Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: SBkQcW6gIm4aKHRO/q1B+Dv4B8iF5QpfQ3hci0+3hHI=
Subject key identifier: B8:DB:94:03:48:CB:E3:98:5F:FB:6B:B1:02:35:ED:76:F7:FB:45:0B
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 01940721D3951B07BEAA9378231808CF87C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 13CB
Signing time: Fri 27 Dec 2024 08:00:44 +0000
Manifest this update: Fri 27 Dec 2024 08:00:44 +0000
Manifest next update: Sat 28 Dec 2024 08:00:44 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: yCmgF2XRD27huhE8st9V1y3bgE5bG3JnlBy3CncjVA8=)
2: ABLd_GhkY3vakEeuFHvoMmFguBA.roa (hash: 3PTn1zmCH8kuJUSoOyMk4VBESvJfeeNo1ozAN35MB0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:21:d3:95:1b:07:be:aa:93:78:23:18:08:cf:87:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Dec 27 08:00:44 2024 GMT
Not After : Dec 28 08:00:44 2024 GMT
Subject: CN=b8db940348cbe3985ffb6bb10235ed76f7fb450b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:71:48:3a:aa:af:e5:17:a0:5c:11:21:2e:
ee:29:46:de:bf:b8:95:2b:4f:df:78:b5:ef:44:9b:
0d:e5:f7:65:6a:91:0e:e5:cd:d6:b3:8b:50:67:bc:
12:1e:36:52:49:45:54:b4:60:58:3a:0b:cb:2f:27:
db:fb:22:55:ef:11:af:f2:64:24:71:ee:0b:38:b7:
63:97:ae:b7:85:61:10:fe:3e:af:37:78:e4:45:b3:
19:8d:73:bb:b7:7e:7a:1b:7d:93:38:04:fe:49:bb:
37:81:70:5e:d2:16:9e:73:af:cb:af:de:d2:e9:c2:
a8:a4:05:19:1a:c1:fd:63:0c:b4:62:d7:1e:ee:28:
c8:42:38:61:f5:94:59:a4:9b:1e:5e:3f:db:c7:93:
74:b8:cf:9f:c5:80:2f:0f:0c:82:16:58:28:ca:21:
b6:ad:39:1f:80:38:6f:1c:f2:c7:ac:6c:71:f0:82:
78:c5:80:84:d0:b6:bc:d6:87:60:82:11:47:53:0c:
04:11:7e:f2:a0:ac:70:26:a1:59:ca:d3:e1:5b:2c:
61:45:56:58:b2:4d:3c:b7:94:65:cb:e3:c5:cb:3a:
4a:e9:fa:25:84:21:a9:40:5e:3b:7c:9c:af:35:c0:
11:0e:d2:c9:ef:c2:6c:6b:2b:5b:32:b1:2b:f7:a0:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DB:94:03:48:CB:E3:98:5F:FB:6B:B1:02:35:ED:76:F7:FB:45:0B
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:71:57:32:cb:be:9c:fb:54:37:dc:88:0f:1e:f9:35:89:2b:
6b:c2:a6:95:17:6b:7e:c8:2f:da:24:12:43:2b:38:54:5a:5e:
1c:97:4f:a2:98:1b:c8:a3:4d:3d:64:04:97:57:f3:63:86:20:
22:f8:89:1f:53:ae:a1:0a:ab:a4:1a:71:1d:d0:5b:6f:85:6b:
15:a0:b0:ad:be:45:b1:a2:20:4a:df:af:1b:de:1a:11:11:a4:
4e:f3:90:d1:ff:47:c8:4b:d8:05:57:75:18:20:44:24:96:7c:
66:65:4b:db:5a:cb:0d:77:c9:50:e5:35:96:5e:e5:66:8b:ba:
f1:ec:57:ac:41:95:03:cd:f0:fa:36:2f:00:13:42:0c:23:fb:
24:cc:8a:63:9b:53:5e:5b:39:55:dc:62:fc:13:6c:0d:8b:12:
ee:56:4a:cd:a6:46:b0:f2:aa:c4:46:dc:d2:a9:f2:a7:fe:e9:
89:dd:a2:63:33:0f:a2:c5:98:3c:eb:a0:19:0e:dd:48:dc:76:
66:51:70:d5:ab:d3:ea:7c:b3:03:e8:49:94:c2:d3:2a:0a:de:
2a:32:86:85:f0:85:1e:e1:d9:48:cf:76:3e:b1:25:66:cc:4c:
0a:87:dc:55:3e:17:7d:ec:47:9a:49:56:c6:ed:bb:4d:77:42:
36:72:d9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:50:27 2024 by rpki-client on console-ams.rpki-client.org