Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
File: 0Q44sLejPvOhbhVDNAKYfW1njaE.mft (raw, json)
Hash identifier: YjrVz085qJ59VdFSS86cXqHtWcaAB9w8xqtTjANqsX0=
Subject key identifier: 20:28:DD:75:CF:B4:92:92:87:A0:73:1A:BD:1B:35:E3:58:36:CA:21
Authority key identifier: D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
Certificate issuer: /CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Certificate serial: 01940646B9EAE45E635EFD35B5E218541D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
Manifest number: 1076
Signing time: Fri 27 Dec 2024 04:01:25 +0000
Manifest this update: Fri 27 Dec 2024 04:01:25 +0000
Manifest next update: Sat 28 Dec 2024 04:01:25 +0000
Files and hashes: 1: 0Q44sLejPvOhbhVDNAKYfW1njaE.crl (hash: DtMbC5mu1R3F0tPU68mpXuPsVe5rBbZYfyoFfUfeh6A=)
2: XlHNHZoIv4kxq10GhIYVMz233Ik.roa (hash: DlYk1ZpUF7LbPl8Yhq7dai0BpCZ7pAsjFWhgtfkkBUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:46:b9:ea:e4:5e:63:5e:fd:35:b5:e2:18:54:1d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Validity
Not Before: Dec 27 04:01:25 2024 GMT
Not After : Dec 28 04:01:25 2024 GMT
Subject: CN=2028dd75cfb4929287a0731abd1b35e35836ca21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:c4:82:88:2f:df:06:32:72:31:74:7c:c3:
23:1e:15:22:b8:94:9d:f8:96:b1:22:35:38:11:a3:
dc:ce:de:fe:da:93:14:8e:5d:ef:9d:28:59:59:b7:
1e:51:9d:28:49:e5:fe:0f:6f:a0:c7:30:cf:e0:f2:
5f:14:fa:bc:54:6f:bb:36:8d:72:68:5a:91:37:f4:
89:cd:5d:1e:c9:a4:ed:e4:10:af:00:5d:f0:fd:5b:
e4:5d:ff:37:9b:4b:83:b0:fd:bd:c7:e8:80:3b:02:
7a:b0:4b:cf:3b:26:b2:26:53:c3:2a:1c:dc:95:4d:
85:bc:ae:27:65:81:6d:71:fa:c3:be:91:a0:67:28:
89:69:96:e0:3c:8d:61:61:8a:ac:61:41:6a:5c:9d:
2f:9b:e6:81:5e:8b:f4:e1:44:51:3b:f8:88:38:5e:
ac:f0:74:c8:b8:78:bb:25:a7:f3:16:75:ec:7b:87:
e2:46:b7:61:f0:56:e0:df:7e:d0:c4:33:1d:c7:9e:
58:80:34:2b:bf:39:32:c8:17:de:fe:13:75:22:08:
66:3a:02:fa:dc:1c:82:83:d4:3f:ae:ff:a5:6d:56:
6c:59:c1:72:54:6a:d7:73:5f:9a:4a:25:aa:aa:f9:
16:b9:ca:74:19:d0:c7:ba:51:90:4b:7f:40:4f:8c:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:28:DD:75:CF:B4:92:92:87:A0:73:1A:BD:1B:35:E3:58:36:CA:21
X509v3 Authority Key Identifier:
keyid:D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:64:dc:36:47:f9:06:63:c6:ab:27:a2:ee:8e:f3:03:39:ef:
f1:4e:31:ff:60:1a:33:e2:b6:1f:47:4f:e1:09:ce:94:f2:cc:
97:0a:d0:1a:69:86:ce:3d:86:d8:0f:22:88:45:15:7c:46:5a:
16:6a:6b:94:43:d3:18:05:56:36:98:0e:6f:95:e9:7d:95:78:
fe:0e:3a:43:33:bc:4a:4e:94:76:b5:b2:a9:02:74:e1:ae:dd:
85:6c:b7:41:84:8f:c1:aa:2e:9a:ac:6d:1f:c2:6a:db:b9:04:
8f:19:2f:69:62:da:d4:0c:5b:76:1e:4e:3d:86:5c:2f:93:4f:
72:70:c5:6a:4d:bc:b5:e1:6a:1a:8b:51:f5:9c:ba:9a:be:b5:
ce:eb:97:95:f3:e3:dd:a4:c9:79:6a:10:ad:5d:c6:71:95:ff:
da:99:39:00:e6:3a:06:38:cc:a5:2d:db:43:9e:9f:04:be:90:
1a:29:d0:49:3d:b5:3e:ce:94:cd:af:ab:99:d4:e1:69:89:7f:
e9:f8:04:93:9f:8a:e5:ab:65:68:13:dc:f6:d2:ff:1a:19:be:
db:db:5a:ed:cf:c5:05:2d:a8:35:4e:05:26:5f:e4:40:fe:92:
95:18:98:bd:b8:52:c4:22:46:88:a5:88:92:54:9d:cc:16:14:
2d:da:71:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:50:23 2024 by rpki-client on console-ams.rpki-client.org