Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File: 27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier: VqopRRT6vISMs92oCWM8CFo3td6t8aYwpy4NOTqkXm4=
Subject key identifier: 4F:03:01:BF:19:58:D0:A3:6C:AC:FD:A6:AF:60:E1:98:BA:00:71:DF
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer: /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial: 019369DA00E04C7DF077CC2DFAC8537C9C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number: 137C
Signing time: Tue 26 Nov 2024 19:01:54 +0000
Manifest this update: Tue 26 Nov 2024 19:01:54 +0000
Manifest next update: Wed 27 Nov 2024 19:01:54 +0000
Files and hashes: 1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: /0Abqi2z2gjUGYKlJp9X2PnF+vB8viso3EbMvCHXxuo=)
2: J-lq-YcoB-SA8AJwKmsHt-4Tn3c.roa (hash: FOr8yU9gOGy0+JXHvqN2yq6FkW2Zi7BHi7kgWYWUttg=)
3: KV1CuLs-TuRkP0aqS5IeSJMaGYQ.roa (hash: ogZmzrdsdzK3IggjFNZovnD74N47IX4cwCNErgyTVSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:00:e0:4c:7d:f0:77:cc:2d:fa:c8:53:7c:9c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Validity
Not Before: Nov 26 19:01:54 2024 GMT
Not After : Nov 27 19:01:54 2024 GMT
Subject: CN=4f0301bf1958d0a36cacfda6af60e198ba0071df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:8d:4c:87:b7:dc:04:4f:d8:6e:b7:04:80:
d6:0f:fa:90:cc:1c:06:60:22:2c:d8:12:86:c7:68:
bc:ef:e5:d8:c0:04:f7:cf:1f:15:cc:80:6b:f8:6c:
4b:77:f6:92:94:14:a2:22:12:23:45:80:90:b3:43:
be:7d:00:16:51:ee:bb:80:80:cc:16:e1:61:bf:fb:
f4:3d:03:09:b3:2b:17:69:0d:b0:47:7c:0f:39:a1:
c2:e5:65:b2:48:44:52:ba:bb:dc:a4:aa:84:eb:cd:
a9:22:ca:6a:e6:1c:59:8d:64:7c:05:5a:db:71:b3:
fe:81:36:71:cc:e1:b8:71:8e:4d:40:d9:62:43:70:
fe:5c:d3:a5:19:3c:10:07:dc:58:26:64:23:39:bc:
eb:50:73:bf:65:e9:24:8f:fd:f4:5e:55:de:b7:ec:
91:64:a1:61:c2:83:c8:ac:ed:2f:fe:3d:55:57:90:
79:16:9b:5c:b5:0a:07:36:52:54:cc:63:a4:82:66:
f7:8d:31:53:4e:7a:5e:0d:32:60:49:e7:d5:f3:d8:
f3:18:df:73:41:6b:d7:68:92:dc:0d:1d:45:eb:79:
d3:85:d3:74:a2:d7:5c:d6:65:0a:75:76:83:52:1b:
08:62:6a:3c:89:6e:e6:36:49:29:13:32:13:d0:84:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:03:01:BF:19:58:D0:A3:6C:AC:FD:A6:AF:60:E1:98:BA:00:71:DF
X509v3 Authority Key Identifier:
keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1e:b7:56:93:d5:26:52:6d:c1:1b:3b:06:ad:61:21:3d:65:
64:fb:6b:28:d3:01:fa:29:6f:7c:79:5a:61:7b:3b:9c:7a:47:
ca:36:b6:1c:cc:d7:65:ae:49:21:bc:2b:f6:5e:23:c0:1e:9c:
4a:cb:b9:3c:8a:86:b3:4b:d4:b8:07:b5:a3:67:3a:7d:e4:43:
9a:ac:c3:6b:37:ff:5b:4b:a3:f5:c2:a7:d2:b6:3c:0a:80:72:
13:17:f9:4d:9d:e8:9f:9c:6b:50:e9:1c:c4:7f:b5:87:5c:cb:
43:89:75:bc:0c:7a:9b:27:d2:17:57:02:dd:61:d6:43:69:f9:
2c:21:27:d4:ac:18:bf:39:f0:ab:ae:74:81:39:6e:ef:dc:1d:
2d:aa:27:19:9a:3d:71:f6:e9:0a:32:18:15:5a:1a:e5:f6:24:
39:dc:3f:a4:52:af:3f:24:31:e5:ee:51:a5:b5:46:4a:38:5e:
67:a4:40:2d:c8:f3:eb:fa:73:10:73:cd:27:6b:63:66:00:a7:
c7:5c:3f:97:d5:b9:1d:ad:6a:3c:3a:7e:cd:6d:f7:4f:7c:3c:
16:ca:40:c4:0d:2c:0e:e5:ba:bb:88:27:ba:44:0c:97:4d:72:
7d:95:f1:87:4c:9c:f2:70:09:a0:b3:7a:28:3f:61:5f:9c:be:
0c:26:f2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:17 2024 by rpki-client on console-ams.rpki-client.org