Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json)
Hash identifier: rjCuhBzoqavGASLGlcD62gee38Z+lPDYc5hSnmGsa8I=
Subject key identifier: 7D:E4:8D:CF:80:49:17:F7:55:E9:CC:33:86:C6:D3:6B:5B:C1:E4:F2
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 01940646362CFAA611E5A88111BF5BCDC188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
Manifest number: 13CC
Signing time: Fri 27 Dec 2024 04:00:52 +0000
Manifest this update: Fri 27 Dec 2024 04:00:52 +0000
Manifest next update: Sat 28 Dec 2024 04:00:52 +0000
Files and hashes: 1: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: PnNapcYWTVGZy0QgrEoZNqtoDwuXAYSiCYdJ2Q7PqqY=)
2: lm0oAoZuPDglLTO5NkSupkZgPF8.roa (hash: 495midBn8SI1gZK3c1KtGNh7SXnMfSLRWx8m8bE0P1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:46:36:2c:fa:a6:11:e5:a8:81:11:bf:5b:cd:c1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: Dec 27 04:00:52 2024 GMT
Not After : Dec 28 04:00:52 2024 GMT
Subject: CN=7de48dcf804917f755e9cc3386c6d36b5bc1e4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:cf:66:ee:ab:49:61:ec:6e:4d:db:2d:09:
89:20:42:46:c4:0a:17:16:5c:5f:fc:55:38:d7:77:
83:26:5c:a5:91:43:b2:59:26:3d:7e:de:68:44:0a:
29:e3:26:2c:c6:37:24:26:2c:5d:b6:d1:a5:02:7d:
1a:6d:48:9d:8b:f7:1a:7a:6d:97:41:0f:b2:68:9c:
7d:8d:2f:86:42:5b:82:30:40:d4:83:30:d4:37:2d:
8a:8e:15:51:85:0a:fd:79:ae:e6:2d:ab:54:49:4f:
93:6d:23:21:62:8f:47:d1:03:48:35:a0:c4:6f:fa:
3b:6f:af:26:88:80:2c:97:a7:18:76:70:50:39:d9:
de:21:9a:a3:fa:35:35:0a:e0:b4:66:81:17:2a:b1:
94:a3:fd:72:8c:32:84:ca:53:88:bf:6f:01:aa:2c:
57:26:cf:4b:86:97:e7:36:b6:5f:fd:8f:1a:02:3d:
51:24:9d:ca:62:d9:ca:e4:11:3a:a2:1c:45:91:3f:
df:9f:fa:1e:6d:54:27:d5:bc:fe:5e:cf:81:2a:d6:
39:16:b1:56:17:84:15:e7:11:18:45:44:95:25:f9:
c8:1a:ed:7e:33:15:c4:31:cd:2b:54:8e:b4:92:b5:
96:20:b2:18:2d:92:bc:56:6d:03:ac:5d:bb:26:70:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E4:8D:CF:80:49:17:F7:55:E9:CC:33:86:C6:D3:6B:5B:C1:E4:F2
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:35:01:e4:d5:83:43:fc:e5:05:37:bb:90:05:2b:74:72:45:
35:13:d1:b4:a2:7d:34:f6:40:2d:59:11:29:4a:10:09:03:af:
b0:d9:6c:a7:cc:70:12:74:12:e9:3e:85:60:bb:c4:1c:9c:82:
5d:bd:28:ef:71:cb:1f:d8:bc:70:84:eb:45:46:51:de:49:0d:
8c:a0:5e:cb:c6:72:14:a8:8c:67:54:5e:ef:32:ef:82:ed:fe:
b2:7f:99:5c:ed:54:5f:75:a5:85:f5:3f:19:b1:f6:63:f4:3b:
96:6b:66:ea:e1:0a:ec:a1:f5:43:8b:f7:a1:97:63:ca:67:84:
f4:f0:6e:7a:4d:3e:5d:9d:d0:02:31:3a:2b:84:4a:16:29:8b:
7a:05:b2:08:b1:65:ef:3f:b1:18:77:a6:06:c7:bc:19:05:b0:
75:f9:6d:94:52:9f:ae:28:e3:18:4b:a8:d2:d7:0b:cd:49:b3:
94:d1:e7:24:30:09:ca:a9:c0:0a:38:31:8b:fd:7a:55:83:cc:
49:d6:93:e5:b8:29:f0:b2:24:b0:1a:dc:90:06:12:3a:dd:ea:
fa:ff:f9:d0:8c:9c:15:f7:6f:ac:64:3b:4a:cc:77:98:25:8a:
f2:74:f1:c3:21:7c:aa:81:48:08:89:40:47:1f:fd:ca:f9:96:
9f:d3:1e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:51:13 2024 by rpki-client on console-fra.rpki-client.org