Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
File: C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json)
Hash identifier: vKaDo84XrG8abfV60cj7djfQ1rQygXC+2tfQ8m28UEk=
Subject key identifier: EF:CF:8D:C4:60:7A:3C:B0:95:60:79:B8:22:58:C9:15:9E:A0:1A:2B
Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
Certificate issuer: /CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Certificate serial: 01940721CE665F61F7C01A2C8F851C89001F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
Manifest number: 13CC
Signing time: Fri 27 Dec 2024 08:00:43 +0000
Manifest this update: Fri 27 Dec 2024 08:00:43 +0000
Manifest next update: Sat 28 Dec 2024 08:00:43 +0000
Files and hashes: 1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: 4c9j3frwzc0Dpyfc8BFEM7UVmVt23LS2XhfQkvb8t0w=)
2: jcqHFu5qOxSW-TnLkY1_u5xVSkY.roa (hash: NgmD4wgtXUd2RoIUVTRN3ydeoBjG7zM9G8+8J0bQPGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:21:ce:66:5f:61:f7:c0:1a:2c:8f:85:1c:89:00:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Validity
Not Before: Dec 27 08:00:43 2024 GMT
Not After : Dec 28 08:00:43 2024 GMT
Subject: CN=efcf8dc4607a3cb0956079b82258c9159ea01a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:4b:70:2a:24:40:52:71:41:15:fe:ed:0c:
eb:f0:59:ce:0b:3a:db:62:37:be:80:b5:fc:58:b3:
60:ef:7d:89:c4:e4:a1:0d:c4:63:c5:66:fa:3c:74:
f2:5b:e4:22:ff:47:4b:e7:95:8e:b3:1d:8c:bc:8a:
be:77:c9:f4:6e:cf:5e:8e:85:d1:7b:93:ee:95:90:
9d:84:b4:c1:4d:ff:3c:af:23:33:34:f2:4e:fc:22:
f5:b8:16:bc:bf:c7:4b:87:8a:e8:fd:9a:25:c0:5c:
60:47:54:bd:12:21:21:f1:e3:a2:87:be:dd:4d:52:
73:5e:77:97:67:3e:a8:e2:fb:94:64:29:92:a3:43:
e3:8a:14:10:92:56:68:f7:89:d2:67:ac:0d:19:53:
40:4f:b8:79:84:d7:c7:27:3b:dc:13:1f:99:8f:e8:
cd:bc:8b:a7:1e:de:1c:27:b3:da:4f:b2:73:da:79:
9a:48:41:4a:08:77:58:81:10:55:0a:c1:eb:8c:8b:
71:23:83:78:fe:40:68:9f:b4:3b:5f:df:c8:f5:ed:
bf:f6:1b:a6:82:8a:c2:0d:bc:37:af:3f:41:f9:fa:
01:d5:1d:10:bf:bb:53:ae:cc:20:23:cf:ea:8e:08:
2c:2e:dc:f9:60:de:2d:7b:28:90:3d:f5:fa:b8:3f:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CF:8D:C4:60:7A:3C:B0:95:60:79:B8:22:58:C9:15:9E:A0:1A:2B
X509v3 Authority Key Identifier:
keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:12:52:7e:b8:50:84:b7:3e:f2:71:ca:24:47:3b:9c:ac:bb:
15:c2:56:b4:7e:ea:7d:6c:e6:09:62:4b:04:75:6c:07:56:a5:
91:f4:b2:da:cc:a6:fe:8a:e6:b9:6f:c7:99:f7:78:4a:7c:4d:
c0:00:fc:e2:53:58:d2:f6:ec:2d:5a:70:2b:f4:76:fb:66:2f:
6f:eb:7a:cf:7b:92:46:26:8b:cf:c3:d0:75:02:e3:23:1c:05:
ce:bd:22:6e:b0:6f:f5:bd:8d:24:90:58:ea:c8:d4:83:8d:00:
c8:99:75:cf:a5:a7:2c:59:1c:09:1c:97:b7:1e:60:4d:1a:a1:
be:97:fb:25:20:2e:ae:63:cd:64:2f:3d:7f:7c:09:68:ff:78:
60:a0:f0:9e:8c:38:34:6f:e3:38:41:ee:45:80:9e:29:07:fe:
93:36:1e:12:57:1d:16:a4:c0:f3:ae:4f:4c:cd:db:8c:f0:94:
fa:29:cc:13:11:06:f3:8b:d4:27:38:de:eb:d9:9b:26:d0:7d:
2b:ae:4e:23:1c:91:0f:22:fb:ac:3c:39:77:02:80:74:fd:4d:
ff:6e:59:8b:96:d2:65:b2:07:a9:8d:50:3e:b3:a2:b2:ed:e5:
a6:47:03:c8:2a:4b:86:a3:6c:ae:ab:76:ec:d7:e7:67:dc:c7:
bb:e4:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:55:10 2024 by rpki-client on console-fra.rpki-client.org