Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: TzjXkeqqXDPayPPAwvbbd79RD7fflUBWX8V2n+xMkaY=
Subject key identifier: 70:6B:41:AC:CF:02:43:00:33:52:BD:2C:2A:5D:88:9A:AB:F6:B5:BF
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 019406EAF6D0ED752EE8B96A0AF7C1F7A838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 113A
Signing time: Fri 27 Dec 2024 07:00:49 +0000
Manifest this update: Fri 27 Dec 2024 07:00:49 +0000
Manifest next update: Sat 28 Dec 2024 07:00:49 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: Ch2hrZLBHftWJZesMfRI4baec3P8eg2NOVqsTmSuIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:ea:f6:d0:ed:75:2e:e8:b9:6a:0a:f7:c1:f7:a8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: Dec 27 07:00:49 2024 GMT
Not After : Dec 28 07:00:49 2024 GMT
Subject: CN=706b41accf0243003352bd2c2a5d889aabf6b5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:99:b9:b2:a8:11:c0:64:da:97:34:9a:c0:
88:e1:d4:35:fc:ff:8d:bd:99:db:ba:22:c8:98:a2:
c2:69:15:82:35:d9:39:97:a3:3d:a1:ab:f2:ac:8f:
b8:eb:a3:bb:12:46:ae:72:e2:55:47:e3:e3:c2:ce:
d8:86:78:16:10:bb:9c:c0:99:02:dd:5a:cf:96:97:
8a:29:bc:66:87:13:7e:ba:e0:60:06:7d:a1:63:63:
fe:4e:32:68:0f:6e:9f:b8:94:41:58:02:20:9a:07:
bd:8d:b6:30:59:65:59:df:91:4d:92:24:8c:1e:19:
1b:d7:1e:dd:ef:dc:6b:79:53:04:f9:3c:65:71:17:
16:99:a5:66:e1:58:52:44:4e:10:c2:13:64:95:05:
b5:8e:4f:27:1a:8b:c8:4c:bd:5f:9d:6a:10:ae:76:
8b:01:4f:52:91:42:34:57:e3:fc:f5:96:4a:37:80:
11:d6:24:59:8b:34:1a:70:2b:b0:99:f9:c9:68:da:
4e:7a:19:0c:0d:99:07:4d:b9:08:0c:d6:0d:6a:5d:
aa:6c:95:4a:03:6a:57:36:87:fe:05:d3:94:0f:d9:
97:5c:e4:7e:f5:d1:24:0e:c5:83:78:f2:02:4e:70:
e4:fd:e3:3a:a2:0f:45:d8:cf:e7:19:06:01:a2:e1:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:41:AC:CF:02:43:00:33:52:BD:2C:2A:5D:88:9A:AB:F6:B5:BF
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:42:7f:32:51:be:a6:38:e7:65:03:cc:42:e3:30:ab:7f:b5:
c5:96:2c:c9:f3:da:c4:2f:12:1f:aa:e2:49:19:5d:a1:b7:a8:
b2:8e:c3:1d:33:a1:76:1d:f4:5b:9c:97:82:b4:40:26:9b:31:
c2:43:75:e5:c8:46:0f:21:41:e0:f9:a8:77:12:4b:2e:38:c5:
2f:dd:ee:05:87:20:5f:7e:e8:11:c8:d4:d2:26:c3:ee:52:14:
da:6d:ff:cd:44:bf:b7:93:9b:d0:bf:04:e6:7c:05:38:95:32:
fe:4d:b4:3d:e1:9c:24:b9:24:9c:f7:6e:1a:ac:5e:d3:7a:72:
d1:c8:cb:91:79:be:fc:ab:d1:5a:9f:ff:6b:28:f4:a9:8a:db:
a7:2f:f8:76:82:6f:0e:0e:66:62:76:fb:bc:6a:34:a8:56:22:
f6:85:5d:ad:2d:e1:46:4f:93:d6:94:e1:88:e5:56:17:8c:77:
2c:05:15:c8:0c:ed:83:78:3c:bb:8b:3a:33:cb:8a:da:70:aa:
29:23:da:32:79:95:78:53:46:89:f9:0a:27:1c:04:82:cc:e0:
b4:d1:94:90:da:a6:cc:fc:09:1c:f7:f0:2d:6f:24:93:67:d6:
58:d4:bb:33:67:07:9b:e0:c2:41:07:d8:e2:31:5a:93:6c:2e:
b7:3b:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:54:50 2024 by rpki-client on console-fra.rpki-client.org