Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
File: 7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json)
Hash identifier: guIN17JVni5qoEZ7LgHLt9ILdQsbjOfi0SSo98PMvyA=
Subject key identifier: 73:39:E8:4E:44:D2:99:32:A9:F3:80:E0:86:F4:46:82:77:4C:A9:0D
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial: 0194056A9159964985F4E8C5BA97527971DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
Manifest number: 13CC
Signing time: Fri 27 Dec 2024 00:00:57 +0000
Manifest this update: Fri 27 Dec 2024 00:00:57 +0000
Manifest next update: Sat 28 Dec 2024 00:00:57 +0000
Files and hashes: 1: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: NwZMrUOYN2zGOfKX9eMFbVMwWwX0n7LKNvzjP6n8OnQ=)
2: gc6tyuD9na-jtm82_8a6ibtdeuY.roa (hash: /ubLPvozII99NDtyT4pQcOTtexf3r4oV1gV6RBwKpps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:6a:91:59:96:49:85:f4:e8:c5:ba:97:52:79:71:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Validity
Not Before: Dec 27 00:00:57 2024 GMT
Not After : Dec 28 00:00:57 2024 GMT
Subject: CN=7339e84e44d29932a9f380e086f44682774ca90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:2b:72:50:ea:9e:24:07:ae:68:0b:2d:b3:
12:4e:13:2b:fa:9e:42:78:34:36:17:27:c0:70:50:
67:34:3a:47:da:56:81:72:70:48:2f:8e:59:04:9a:
58:0e:70:e9:a4:9d:1a:c6:da:77:e6:c0:6d:2b:e7:
6e:31:f6:1a:9c:ab:fa:2c:b9:05:2e:bb:83:b6:1f:
32:c5:df:f2:1b:3b:d9:9b:44:65:8f:12:25:6f:0f:
4f:a3:2b:f1:3a:c1:43:33:fc:cc:45:1f:f9:49:0a:
e0:e9:29:d3:1d:04:1e:73:8e:8c:49:78:77:22:fc:
e1:85:86:f2:ba:a3:01:05:6b:f3:73:7d:86:d9:de:
ed:6c:ff:ad:ab:7c:5e:36:2a:9e:79:18:3b:c5:c3:
14:c4:7c:fb:1b:2b:3b:f3:8e:fb:b4:07:40:60:c2:
7b:e7:39:70:96:08:d5:ef:5c:e0:a3:d2:d1:1f:51:
a0:b4:39:29:5d:7d:2d:fa:08:0e:3d:a3:5d:ae:36:
b0:fc:13:1b:8d:2e:44:35:cb:2d:f9:c8:43:13:ca:
3d:34:d1:a5:e8:21:be:b0:4b:ec:b8:2e:3b:a6:71:
64:53:d2:04:db:e0:a6:c6:ff:61:31:2c:f7:87:3c:
78:17:3b:d3:9a:f5:8a:90:85:b1:0c:52:e4:f9:b5:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:39:E8:4E:44:D2:99:32:A9:F3:80:E0:86:F4:46:82:77:4C:A9:0D
X509v3 Authority Key Identifier:
keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4e:1c:8d:c4:be:ba:82:59:02:c0:63:19:b6:6f:31:b3:05:
3d:07:bd:f1:70:fc:b4:3c:fe:c5:8e:bf:c3:dc:57:90:2c:b5:
5d:92:52:cf:b8:18:cf:05:43:e5:67:86:3d:18:6d:06:49:15:
3b:f3:1a:82:db:a8:03:c7:7e:f4:49:58:2d:6d:c4:26:e2:df:
c1:72:c9:25:00:d5:af:81:57:41:28:b6:c9:84:63:a6:57:e2:
ab:89:f5:d3:8e:d7:6c:da:c7:aa:14:d8:48:de:63:48:4c:86:
7f:43:61:bc:37:4b:a8:01:91:e4:a3:32:1b:de:ad:0d:21:73:
5a:22:f9:72:c9:67:ee:c1:c7:8e:62:6a:26:9a:d5:e5:e7:9f:
30:a5:b9:fc:e7:c4:36:11:14:f3:c6:b6:5e:9a:76:9d:03:e0:
3e:5c:c1:7d:0f:e0:5e:1d:4e:5a:31:0f:f7:09:37:88:55:eb:
b9:a1:0e:98:02:3c:99:ad:d1:f7:20:bf:7f:14:c9:df:2b:0e:
79:91:57:49:f9:a6:fb:9a:3c:3c:4a:1a:1b:a9:48:69:9e:42:
7f:45:65:1a:1a:0b:55:3b:9c:24:0d:0f:6e:df:e4:e1:98:9d:
93:61:74:d9:26:f3:1b:00:a0:9f:5c:5a:58:2f:9d:8a:b8:c3:
d0:5e:ce:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQFapFZlkmF9OjFupdSeXHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODlkMTdiMzlhNzY4NGE2OTU0Yjk3YjhiMGZiYWM3ZDQ4
OTU0Y2EwHhcNMjQxMjI3MDAwMDU3WhcNMjQxMjI4MDAwMDU3WjAzMTEwLwYDVQQD
Eyg3MzM5ZTg0ZTQ0ZDI5OTMyYTlmMzgwZTA4NmY0NDY4Mjc3NGNhOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhwrclDqniQHrmgLLbMSThMr+p5C
eDQ2FyfAcFBnNDpH2laBcnBIL45ZBJpYDnDppJ0axtp35sBtK+duMfYanKv6LLkF
LruDth8yxd/yGzvZm0RljxIlbw9PoyvxOsFDM/zMRR/5SQrg6SnTHQQec46MSXh3
IvzhhYbyuqMBBWvzc32G2d7tbP+tq3xeNiqeeRg7xcMUxHz7Gys78477tAdAYMJ7
5zlwlgjV71zgo9LRH1GgtDkpXX0t+ggOPaNdrjaw/BMbjS5ENcst+chDE8o9NNGl
6CG+sEvsuC47pnFkU9IE2+Cmxv9hMSz3hzx4FzvTmvWKkIWxDFLk+bWvyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHM56E5E0pkyqfOA4Ib0RoJ3TKkNMB8GA1UdIwQY
MBaAFO6J0Xs5p2hKaVS5e4sPusfUiVTKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29uUmV6bW5hRXBwVkxsN2l3LTZ4OVNKVk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lMTFiNTMtMWNkNi00NzQ3LTkyMzIt
ZjE5YjRlN2IyN2NiLzEvN29uUmV6bW5hRXBwVkxsN2l3LTZ4OVNKVk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lMTFiNTMtMWNkNi00NzQ3LTkyMzItZjE5YjRlN2IyN2Ni
LzEvN29uUmV6bW5hRXBwVkxsN2l3LTZ4OVNKVk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR04cjcS+
uoJZAsBjGbZvMbMFPQe98XD8tDz+xY6/w9xXkCy1XZJSz7gYzwVD5WeGPRhtBkkV
O/MagtuoA8d+9ElYLW3EJuLfwXLJJQDVr4FXQSi2yYRjplfiq4n1047XbNrHqhTY
SN5jSEyGf0NhvDdLqAGR5KMyG96tDSFzWiL5csln7sHHjmJqJprV5eefMKW5/OfE
NhEU88a2Xpp2nQPgPlzBfQ/gXh1OWjEP9wk3iFXruaEOmAI8ma3R9yC/fxTJ3ysO
eZFXSfmm+5o8PEoaG6lIaZ5Cf0VlGhoLVTucJA0Pbt/k4Zidk2F02SbzGwCgn1xa
WC+dirjD0F7OiQ==
-----END CERTIFICATE-----
Generated at Fri Dec 27 09:49:30 2024 by rpki-client on console-ams.rpki-client.org