Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
File: 2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft (raw, json)
Hash identifier: UEXqeR5cg5/FXEiFXKjYr9zIUKahU/QSQuQx6nAc+eA=
Subject key identifier: 67:11:57:30:AB:3D:AE:A1:64:93:00:8E:5A:52:E4:FC:CD:6B:F3:DF
Authority key identifier: D9:B2:28:11:DF:86:12:3D:71:AF:5B:99:8A:21:0C:23:EB:1D:5E:FA
Certificate issuer: /CN=d9b22811df86123d71af5b998a210c23eb1d5efa
Certificate serial: 01940645EBA9C756B6EE5A0A39DC708778C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
Manifest number: 0D09
Signing time: Fri 27 Dec 2024 04:00:33 +0000
Manifest this update: Fri 27 Dec 2024 04:00:33 +0000
Manifest next update: Sat 28 Dec 2024 04:00:33 +0000
Files and hashes: 1: 2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl (hash: QREQGZ0+12k0TqOHmOF16g1m5QQJQAJd6Kx0YNKutG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:45:eb:a9:c7:56:b6:ee:5a:0a:39:dc:70:87:78:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9b22811df86123d71af5b998a210c23eb1d5efa
Validity
Not Before: Dec 27 04:00:33 2024 GMT
Not After : Dec 28 04:00:33 2024 GMT
Subject: CN=67115730ab3daea16493008e5a52e4fccd6bf3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:67:71:94:41:3d:0a:bf:24:36:2f:2a:1c:
75:dd:37:5f:11:fa:66:0a:06:4a:a7:75:05:78:cb:
11:47:2a:e2:18:57:bd:5d:16:7c:82:17:55:56:94:
07:40:de:3c:b9:3c:38:55:5e:91:21:76:45:9f:96:
f0:d3:11:e4:77:d2:74:6a:05:2f:4d:a7:f4:17:5f:
da:4c:2c:1d:9d:9d:fa:a2:d6:ee:cb:7c:46:e0:7b:
b8:9f:5b:b4:dc:c6:8c:0c:aa:c2:1d:88:c6:9b:a6:
2e:c0:9d:4c:ad:9d:76:67:83:66:c4:3d:c4:54:05:
c4:41:ca:93:10:e3:3f:73:ec:4e:bc:e4:27:5e:14:
e7:b1:bf:a2:8b:02:f4:a7:05:7a:3d:59:bb:43:55:
52:dd:5c:60:8a:c1:fb:8f:6b:15:43:d7:9b:a3:08:
88:d4:de:18:31:04:77:7a:12:2e:6e:f0:61:bf:3f:
88:9e:65:42:d2:3a:97:9c:3b:66:53:d7:09:f5:ce:
e4:1f:62:15:f8:43:76:36:32:a9:e2:84:67:d9:b0:
14:54:ac:fb:f0:56:6a:a3:9e:61:c4:64:93:b9:93:
f4:54:33:da:7b:0a:a8:9d:76:76:82:4a:38:ff:6f:
3d:ad:0c:04:36:1f:ef:0e:43:03:34:12:8e:80:8e:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:11:57:30:AB:3D:AE:A1:64:93:00:8E:5A:52:E4:FC:CD:6B:F3:DF
X509v3 Authority Key Identifier:
keyid:D9:B2:28:11:DF:86:12:3D:71:AF:5B:99:8A:21:0C:23:EB:1D:5E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c7:09:80:93:13:1d:a0:4c:c9:d2:b1:ca:7d:c7:38:e3:e7:
2d:80:a8:db:ff:f2:37:ba:bf:d4:41:d8:e2:42:01:49:d2:97:
2c:4a:84:46:88:33:d5:d6:ad:c3:11:36:b2:e9:17:78:88:fe:
f4:d2:85:7c:a1:eb:37:dd:dd:07:4e:f1:d4:39:10:79:52:34:
af:7e:8c:ea:73:e1:63:8d:40:10:af:29:44:71:b4:f5:49:74:
72:71:d6:e0:45:09:cc:43:52:24:9f:90:3d:12:dd:ad:9a:48:
a4:ae:e1:2a:96:65:82:46:7f:e7:86:86:9e:e5:ac:79:79:0b:
bf:f4:72:ec:43:f1:93:c6:7b:c1:6b:c2:36:83:4c:9e:b8:a4:
47:17:ab:85:e2:5b:13:60:85:c4:65:55:8b:1a:77:37:2e:b9:
37:c5:27:4e:d7:e8:57:49:e9:39:b8:5d:3d:5a:02:03:a5:f4:
26:75:3e:c2:d4:fc:d5:5b:a8:18:29:0d:98:95:ed:b9:7d:69:
94:af:b1:63:a8:fe:ff:ab:af:81:8a:cd:8b:10:93:eb:15:d5:
03:14:31:dc:ad:7c:ad:fb:00:fd:dc:9f:47:6b:99:3b:45:bf:
93:5e:c0:cc:de:85:f8:23:38:a2:97:2c:4e:e6:57:f9:1a:01:
8d:50:6d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:50:28 2024 by rpki-client on console-ams.rpki-client.org