Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: IOP/ytlKS56BPZVgbkOroM7Bbg+mRr9RN5rtq9ce2gY=
Subject key identifier: 29:9C:B6:8D:04:15:E7:8D:FE:58:14:B8:F3:57:D1:E6:87:B9:8F:63
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 01940645B7B2160890821DA2C8107C3C102F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 12B5
Signing time: Fri 27 Dec 2024 04:00:19 +0000
Manifest this update: Fri 27 Dec 2024 04:00:19 +0000
Manifest next update: Sat 28 Dec 2024 04:00:19 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: y0Hs2Q/27IEV9FmO1OaT1tDqJqSNlDX3ssLI63Vv9LU=)
2: hABOeqqat5JLiTMCVLGrTqt41hc.roa (hash: psG6evJtrdIOpvmhbqBt52h/nCmCObZ0lFSbIEsgPxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:45:b7:b2:16:08:90:82:1d:a2:c8:10:7c:3c:10:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Dec 27 04:00:19 2024 GMT
Not After : Dec 28 04:00:19 2024 GMT
Subject: CN=299cb68d0415e78dfe5814b8f357d1e687b98f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:95:bf:e8:9e:7c:0f:98:6a:f5:a2:90:5b:
b1:ee:bd:20:ac:18:73:7a:83:6f:7d:15:28:3f:46:
7b:08:7f:55:cf:35:0a:82:3f:dd:8c:fe:8b:19:1c:
e7:df:7c:97:27:21:8b:76:e3:fa:3a:65:d6:30:78:
f2:50:d4:92:53:a0:c2:41:a0:e6:ee:90:89:cc:33:
af:b9:ba:b2:39:24:29:c6:08:a8:fb:43:e6:48:de:
3a:a0:58:6f:36:8a:fa:c3:23:7e:55:b9:be:8d:4e:
24:88:19:27:32:c5:ac:d6:78:28:3a:ec:e9:f9:0a:
a1:13:a7:df:bb:13:e0:35:b6:ee:76:54:19:8f:1a:
12:b8:9a:09:64:53:78:40:9e:41:1b:91:4c:49:b6:
4e:ab:c8:9f:2b:e1:06:d8:a1:f3:7e:76:33:58:03:
1b:3a:0b:d5:b4:dc:f8:da:80:62:a6:fa:4b:a9:6f:
21:6f:1b:b0:8f:eb:cb:e5:31:f2:b8:74:81:dd:7b:
08:56:25:83:9d:a5:bf:0b:04:45:ff:b3:08:51:8b:
e4:5b:72:55:0b:3c:06:9a:88:9b:49:ed:25:b8:a0:
1e:3b:ba:e6:73:a4:a1:cb:5c:27:a8:6d:d3:be:f4:
3f:19:9a:a6:0f:73:d0:b1:17:4b:61:67:46:04:64:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9C:B6:8D:04:15:E7:8D:FE:58:14:B8:F3:57:D1:E6:87:B9:8F:63
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:4e:01:fe:cd:46:0e:d4:0e:de:5f:30:cf:f0:9b:91:94:6d:
26:cc:f3:28:98:c5:ad:e0:b1:39:27:c6:87:13:0a:b4:63:00:
bd:a8:2e:5b:4f:1f:ef:92:71:50:d9:0e:0b:bd:f6:e7:6c:e6:
bf:c5:05:a9:97:fd:9e:da:37:26:6c:76:a6:b5:a5:fc:f6:4c:
cb:e3:fa:69:86:66:4e:ec:29:bb:94:0e:06:a5:3c:f3:20:8b:
07:7a:c2:d7:46:ca:88:3d:a7:fd:f6:9e:9b:68:62:2c:e2:df:
80:90:13:76:97:1c:2c:f7:be:e0:1d:fa:7a:f7:8e:a3:52:f6:
59:b7:6e:f8:16:ce:b7:e6:cc:13:7a:6b:91:72:a2:cb:8e:63:
30:49:58:06:1b:12:2b:59:7d:fd:30:bd:1b:44:34:45:2e:3f:
15:43:d6:1a:98:2e:f2:6a:52:ee:dc:27:f5:0e:32:43:5e:03:
26:4b:6d:a9:21:f2:2e:30:53:43:eb:72:de:57:48:42:2f:35:
58:73:ea:d8:57:aa:6b:7a:01:84:60:97:97:64:41:31:78:ac:
2a:02:21:0f:b8:61:70:73:bf:e9:e7:03:10:9c:6a:e9:8d:c9:
65:63:d4:56:71:f3:1b:96:bc:18:f3:7f:86:61:5b:2f:af:10:
ba:db:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:53:08 2024 by rpki-client on console-fra.rpki-client.org