Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier: EzyhgHOVurErBXXlVmzJUVzwsnJ8MHTkWUbNUoCN5pk=
Subject key identifier: 82:FA:63:6F:45:A3:34:5F:BE:2E:6A:36:F7:AE:86:E9:D7:3D:21:7C
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 019406480EA11436D05748042B415D0B4B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number: 0AE7
Signing time: Fri 27 Dec 2024 04:02:53 +0000
Manifest this update: Fri 27 Dec 2024 04:02:53 +0000
Manifest next update: Sat 28 Dec 2024 04:02:53 +0000
Files and hashes: 1: 5S_peVEqVR2yz9AB9kEYnjkqJf4.roa (hash: JN+fDAYO1vu9s3uiFRzWLYtTRtxMx8mlusyzxiCtX+U=)
2: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: n7/z00c/yUkqZcJ/DowMpbKWIsa8hRzJmXFp/xszvLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:48:0e:a1:14:36:d0:57:48:04:2b:41:5d:0b:4b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Dec 27 04:02:53 2024 GMT
Not After : Dec 28 04:02:53 2024 GMT
Subject: CN=82fa636f45a3345fbe2e6a36f7ae86e9d73d217c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:fc:b3:e4:db:51:f7:e9:f2:9f:a8:bd:d6:
87:fb:32:15:02:a2:ee:7f:aa:67:d5:62:04:86:10:
43:ab:e5:c1:74:4f:93:f8:87:6d:53:18:8c:e9:bb:
3a:38:ca:73:49:41:f8:fd:30:4f:cf:f9:ea:f2:59:
fc:4b:20:c9:be:10:2f:ed:4c:ed:b6:0d:b8:67:f6:
f8:af:cb:5f:c3:76:77:66:34:52:20:58:62:b3:87:
17:81:2d:85:91:b6:9e:8d:09:ba:24:57:fe:f8:55:
6d:f6:00:b5:fa:eb:2e:ff:3a:6b:03:ec:dc:9c:e6:
f5:68:fa:e9:30:95:bd:a5:96:91:8b:11:ef:31:7c:
83:7a:cc:ea:04:a8:4b:58:f3:16:e9:a1:39:d4:2c:
1b:3b:b1:5b:85:16:f1:dd:d2:77:87:73:f5:54:96:
3e:83:97:81:d5:8e:83:a5:c2:4b:b0:18:73:82:eb:
55:a9:58:13:f2:2b:3c:d5:9f:fd:4e:9d:4b:47:f9:
e4:80:22:6e:9f:11:a9:a0:1a:24:9d:06:ac:65:c0:
98:b2:66:5d:dd:aa:c9:16:1f:d1:29:71:f7:d9:2f:
67:72:2c:a8:b6:07:aa:04:66:60:3a:3b:bf:23:a6:
4d:7a:a5:bc:4a:cd:ce:9e:cb:66:c5:53:60:fe:e8:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FA:63:6F:45:A3:34:5F:BE:2E:6A:36:F7:AE:86:E9:D7:3D:21:7C
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:16:de:0d:e0:67:1e:d2:d6:8e:6c:2f:55:a1:fe:78:55:b5:
a9:b4:f6:d9:a4:08:3f:78:b2:c6:29:06:e7:09:9c:bc:a1:9e:
d8:e2:5d:1f:67:77:4a:74:77:26:dd:f1:83:e3:d0:3e:fa:38:
e2:98:62:0c:26:8b:37:44:03:35:a2:f5:f5:e5:da:43:54:60:
20:96:60:61:78:4e:89:15:a0:ee:67:b0:74:9e:27:c6:f1:53:
eb:28:f6:1b:0c:fd:c8:2a:f0:d2:bc:fb:f3:ca:d6:8c:32:96:
ba:87:b5:6b:f8:e3:b6:7b:b3:c0:8e:26:20:e6:02:c0:73:d8:
b6:c2:a7:fb:88:96:07:d1:a1:0e:f9:f7:b8:5a:5f:da:d8:b4:
95:f0:e8:d9:d0:2e:4a:82:d8:79:bb:e2:cd:0e:c3:a1:85:a9:
32:48:e2:02:eb:09:00:a5:cd:69:ab:b8:76:d5:19:da:38:2d:
4a:4c:06:30:1f:88:04:15:2b:04:35:5d:18:6f:44:7d:ec:a1:
8c:c2:39:e3:34:80:46:ba:7d:0c:52:8e:aa:21:e5:44:4a:8b:
55:1a:d0:89:3a:1d:26:99:9f:2d:74:4c:95:39:1d:1e:95:de:
2c:da:be:fc:bf:eb:d4:00:e4:71:cf:4f:e4:2f:c7:bc:b3:67:
c8:4f:78:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:47:15 2024 by rpki-client on console-ams.rpki-client.org