Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json)
Hash identifier: McbEnjbY6yY/WknK81lM51RBBqZtA+dB6LWbi4KGf1o=
Subject key identifier: F4:BB:B7:06:EA:3C:E1:CE:52:05:7A:41:2D:36:90:CB:E0:5C:1D:97
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 019369D9A08482E093B45293BBB620EC122C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 19:01:30 +0000
Manifest this update: Tue 26 Nov 2024 19:01:30 +0000
Manifest next update: Wed 27 Nov 2024 19:01:30 +0000
Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: IVnS0PjxE6UQxo7Y2BJY8quWL4dHt4hhB1pvcWsXYmM=)
2: qVuM86sETiyV5_mqiwOiZyBGbhs.roa (hash: JIC47Buu82rkJBmDHvlO8zq+H901Cn/NDXAdHBMmW7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:a0:84:82:e0:93:b4:52:93:bb:b6:20:ec:12:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Nov 26 19:01:30 2024 GMT
Not After : Nov 27 19:01:30 2024 GMT
Subject: CN=f4bbb706ea3ce1ce52057a412d3690cbe05c1d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:e9:b8:29:fa:21:5c:35:6f:4a:9d:65:ea:
d5:6f:d4:52:62:da:0e:b5:57:e6:5e:7f:e5:8f:f0:
4c:ef:82:30:bc:15:d3:43:83:61:7a:da:ed:fb:b7:
b3:6d:91:eb:4d:e5:c7:c0:1b:63:f4:2a:bf:aa:70:
50:bd:85:f9:d0:88:7b:ff:89:a5:62:fc:3b:7d:44:
b3:90:1b:35:de:a3:5f:2e:69:19:21:2d:4c:18:15:
f9:a7:a8:47:3a:8c:b7:e4:85:4d:62:e9:4b:a7:1f:
cb:81:19:c6:57:e7:a1:10:1d:2b:a3:b5:b2:e0:78:
78:54:12:9f:07:fe:c4:a7:bf:63:ce:5b:7e:e5:49:
fd:2d:c1:08:ed:06:a1:d1:3b:04:0f:84:ea:67:b4:
3e:1e:ef:2a:13:5d:40:ef:d8:9a:c9:1c:18:d3:0f:
2a:16:c9:46:99:ef:93:8f:a9:a4:28:43:ef:ca:a1:
f8:ee:51:a7:e0:5d:53:f6:05:a4:57:f6:8d:c3:27:
0b:ef:6a:aa:97:6d:12:f3:60:88:a9:9d:4f:c3:03:
47:95:a1:2d:ae:2a:4f:f2:9d:02:e3:82:0c:4f:f0:
5b:07:94:99:30:eb:02:b6:e6:5d:10:a3:3d:d0:78:
d2:6d:a7:65:33:5a:92:f0:65:8a:27:27:e9:22:ce:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BB:B7:06:EA:3C:E1:CE:52:05:7A:41:2D:36:90:CB:E0:5C:1D:97
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:dd:03:66:88:81:2f:e3:42:66:70:3f:0f:cc:2d:c1:49:4b:
70:44:da:8e:99:03:ad:3c:3b:f5:9b:c8:f8:64:2d:4f:92:28:
84:e4:5c:08:8f:75:0c:86:8e:8f:69:05:96:93:b9:b4:5f:54:
55:8f:23:6d:cb:29:de:c3:2a:bf:0e:28:6d:46:d7:9f:67:c3:
26:20:7a:19:05:a9:56:25:78:46:24:cc:7f:e5:2b:62:ba:20:
d6:74:ea:8f:fb:d3:f2:2d:5f:96:2a:63:e4:21:ed:ab:64:2b:
1f:72:a0:14:46:1c:ee:7d:e9:df:4a:e0:7a:22:d3:90:61:ce:
ee:f4:10:c5:39:64:e8:ab:cc:17:cb:6d:28:08:28:d0:5f:62:
77:a7:ed:9f:a3:a2:e6:ff:7c:9a:c0:c9:02:2c:38:68:0d:6a:
32:b5:90:27:cb:97:2d:88:e9:e0:4f:0a:b5:4f:a8:37:06:49:
46:b6:01:1a:91:5f:53:04:4a:e0:30:96:4d:a8:f4:c0:22:35:
7a:fa:74:e6:23:ca:89:d0:6e:f2:0e:9a:d2:21:36:04:9a:ce:
33:3e:54:be:33:89:81:ca:39:98:1b:6f:60:c7:fb:b6:cb:cf:
a0:62:91:71:97:22:12:3f:66:b6:1f:85:30:db:f1:b9:13:98:
df:93:5e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:11 2024 by rpki-client on console-ams.rpki-client.org