Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: 6Xl/pfRa4Yp96OeM+59A3h6Q56jjMd2iGa71XnF03/4=
Subject key identifier: 0F:B0:5C:CB:51:5B:3B:E1:AC:8E:52:60:56:20:EC:21:1A:5C:45:B0
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 019406EACA5DF7CFC5F8ADFC62A4F3B168FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 13D0
Signing time: Fri 27 Dec 2024 07:00:38 +0000
Manifest this update: Fri 27 Dec 2024 07:00:38 +0000
Manifest next update: Sat 28 Dec 2024 07:00:38 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: lWm9R4CyoOOEm5HToBoO8EzWkyWU4TR26b32SsaOXug=)
2: RE7BaNwDFBQibq66dggVliVLXSo.roa (hash: 2TfLrozkW0wcGiGdvHXM0I0blxEp2fGLpUjeQfZQAPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:ea:ca:5d:f7:cf:c5:f8:ad:fc:62:a4:f3:b1:68:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: Dec 27 07:00:38 2024 GMT
Not After : Dec 28 07:00:38 2024 GMT
Subject: CN=0fb05ccb515b3be1ac8e52605620ec211a5c45b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:56:a3:c2:16:49:a4:e5:dc:0a:1b:f2:bc:
79:70:70:80:54:3a:9f:24:4c:69:f0:c4:28:c5:af:
e3:3b:a8:cf:3c:95:d9:cf:5a:d5:22:a4:7f:db:e2:
a0:29:39:23:7d:27:06:82:e2:1e:66:5d:e0:15:d2:
b4:29:ae:c6:99:77:b5:81:c8:e0:0f:52:2d:cd:ac:
29:c5:97:66:d1:e9:8a:d2:a5:33:56:0d:4b:83:f7:
0b:05:5d:56:74:4b:74:d9:c5:e7:99:13:84:55:ab:
3c:ff:21:a2:03:37:49:8c:bb:eb:98:fd:0e:19:96:
08:d1:28:86:96:4d:ab:74:ad:b1:09:95:5b:47:36:
67:42:fe:1d:a8:cf:66:a8:56:a4:1c:20:30:03:e0:
99:0e:81:80:21:dc:21:c0:a3:95:09:b4:57:c1:fb:
63:62:f9:be:c1:cd:a2:88:69:95:29:5f:d6:84:2a:
5c:b9:b5:41:37:ae:d9:b9:5e:f4:69:6d:f7:33:b8:
8f:3f:a0:1f:33:ce:6b:fd:d2:32:ad:70:40:07:2d:
ab:e7:29:65:2a:2c:5e:a6:88:ff:c2:bd:85:88:66:
41:a1:3d:fa:c7:68:c4:84:53:e9:f1:d1:31:e8:28:
7f:60:e8:32:0b:11:f7:f0:bc:cf:7b:53:b2:67:9a:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B0:5C:CB:51:5B:3B:E1:AC:8E:52:60:56:20:EC:21:1A:5C:45:B0
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:dd:30:d7:28:e4:2d:09:c4:8c:08:db:f9:e2:18:34:fd:b6:
8c:7e:bb:02:2d:8d:5c:c3:0b:6b:1c:59:5c:01:c6:05:ac:76:
73:73:15:e2:99:e1:a3:4b:55:af:5e:e6:c7:49:58:c5:13:e5:
85:b2:ae:d0:ac:b3:40:90:60:01:01:92:8f:ee:54:99:fb:ea:
a2:0b:cd:5e:94:a4:fb:b2:bb:82:d6:ce:2b:f1:bb:63:0d:55:
7d:ac:44:f8:f4:4c:57:6c:ea:eb:94:97:46:92:0c:90:3c:81:
5e:1b:3e:c9:52:c9:c6:7b:e6:8f:df:e9:21:77:dd:ab:63:52:
81:e3:14:be:13:75:ac:cc:1a:53:14:24:43:ae:d5:b7:22:81:
d9:15:81:04:6e:cc:da:62:3e:31:ab:4d:91:9b:dd:ad:f2:cb:
49:a0:8f:94:3f:89:cb:8a:26:2f:09:4c:c8:f1:60:a7:27:da:
5e:27:51:49:1f:d7:56:14:be:44:8c:a8:80:a2:91:8c:e5:10:
d6:b4:62:84:af:82:1b:c4:dd:97:d7:05:8b:87:5a:fa:bf:00:
a6:b2:be:ab:12:97:94:20:a2:f6:be:d0:74:1d:1f:b5:ec:ee:
46:a9:81:1d:48:a8:19:f9:f6:5d:01:d3:e5:98:27:52:8d:d1:
77:6d:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:47:15 2024 by rpki-client on console-ams.rpki-client.org