Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File: C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier: 4UbLOb2YgRqn4sDEJwhYWbJcAqhHMhNXJZOKMZLqs3o=
Subject key identifier: 7D:F4:69:81:90:4D:09:4A:D8:09:48:F1:34:7D:10:78:06:2E:C7:DD
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 019406B3D0071481730522A31034314CD24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number: 13CA
Signing time: Fri 27 Dec 2024 06:00:34 +0000
Manifest this update: Fri 27 Dec 2024 06:00:34 +0000
Manifest next update: Sat 28 Dec 2024 06:00:34 +0000
Files and hashes: 1: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: I9ECnbIzpasL3B3xrLBFmNZNydyN6V1esouSWEZV3xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:b3:d0:07:14:81:73:05:22:a3:10:34:31:4c:d2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: Dec 27 06:00:34 2024 GMT
Not After : Dec 28 06:00:34 2024 GMT
Subject: CN=7df46981904d094ad80948f1347d1078062ec7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:5d:67:09:d6:3a:5e:13:5b:13:fe:f5:95:
ee:b3:1a:7b:f0:21:10:20:eb:d7:11:a3:7f:b8:9a:
2a:82:80:18:5a:fd:f9:f0:4d:97:e9:ba:0e:b4:c7:
7a:3e:cb:70:9b:bd:7b:9d:17:36:1c:7d:47:e4:d4:
bc:22:35:42:a0:27:7e:0c:26:9b:f6:14:53:4f:7e:
b6:4e:15:a3:c6:86:74:4a:08:de:20:f9:75:a6:d0:
b1:e8:fe:32:25:d1:ac:e4:cc:b9:92:a7:37:13:bc:
11:90:5b:6a:59:e3:54:9a:87:31:c4:b8:61:ef:2c:
f5:f9:f2:83:f0:68:fd:30:fb:d3:31:91:f0:28:74:
3f:7c:32:62:a9:67:d7:a6:08:76:05:ce:67:be:75:
5b:e7:1a:03:b3:3d:f0:28:f3:d9:6d:13:79:a3:c2:
cf:f1:a6:49:19:f8:49:5f:7e:bc:4c:28:62:ea:33:
d3:83:bf:6f:7b:02:7c:38:20:23:67:8b:2f:d8:8c:
31:4a:10:f7:5d:ab:be:8f:af:f2:74:6b:89:41:8d:
ae:61:78:08:e6:13:68:e8:81:70:e8:14:21:8b:57:
2c:c2:96:b9:62:7a:0e:04:76:93:d6:10:b7:f0:8c:
ba:b1:67:a9:d5:06:cf:4b:21:fc:11:10:ca:34:3b:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F4:69:81:90:4D:09:4A:D8:09:48:F1:34:7D:10:78:06:2E:C7:DD
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e9:4d:31:8f:8e:0f:91:3f:3b:45:58:68:6c:38:48:77:e7:
d5:5b:32:f1:fb:af:4f:5a:db:5d:32:cb:ec:54:25:fb:7b:b8:
9f:00:9b:ea:c5:f1:44:f9:6d:71:12:e2:de:62:9c:17:29:f5:
74:ae:d4:65:a6:42:a8:1e:9f:6c:c6:42:58:5b:0c:ff:fe:ef:
fd:4e:b8:8f:99:88:4a:e4:ac:64:46:22:28:ba:da:a4:8f:54:
c0:c5:e9:ca:fd:99:f9:66:f4:03:bc:2f:74:3a:b0:d6:73:c6:
9b:ad:62:2d:19:d1:6a:ce:0c:8d:0f:5c:97:53:09:26:d2:e5:
e5:21:eb:1a:f5:bf:6e:fd:e1:e0:86:5e:a6:02:eb:fd:f7:4c:
97:7d:41:36:36:33:5f:d8:86:80:e9:8a:e9:31:18:30:6d:1d:
6f:a1:20:3e:91:6c:c7:02:09:53:d5:a6:98:0d:88:65:c3:4d:
e6:e4:8c:3e:a0:be:36:b2:59:82:5a:f1:18:00:ed:ff:d3:79:
b9:69:1d:f6:7f:78:79:46:44:59:8d:6d:b2:6f:8e:c5:6f:81:
3e:68:b6:07:b1:2c:6b:1c:12:57:c7:55:8f:ea:d0:c2:3d:a3:
01:5c:ba:02:3d:29:0a:bf:ff:66:57:e8:8b:e4:26:3d:18:30:
77:cd:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:55:18 2024 by rpki-client on console-fra.rpki-client.org