Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
File: AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft (raw, json)
Hash identifier: zTITJO94T/4PZlhBDbB7oeJnsqpnkUzvwzBzCJgxJNc=
Subject key identifier: F5:A9:5A:0D:E1:AC:68:71:11:59:AF:F4:59:AE:9F:7D:1D:A9:43:64
Authority key identifier: 02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
Certificate issuer: /CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Certificate serial: 019406476BF31A0C9298AB35D5F7974429F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
Manifest number: 0547
Signing time: Fri 27 Dec 2024 04:02:11 +0000
Manifest this update: Fri 27 Dec 2024 04:02:11 +0000
Manifest next update: Sat 28 Dec 2024 04:02:11 +0000
Files and hashes: 1: AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl (hash: MzaqYwEl2ucvkp/bgwrS+4FYyoQweP899CsAM00OYK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:47:6b:f3:1a:0c:92:98:ab:35:d5:f7:97:44:29:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0272bd3b32aecaf26ca8edb3c878fe5795f2ab6f
Validity
Not Before: Dec 27 04:02:11 2024 GMT
Not After : Dec 28 04:02:11 2024 GMT
Subject: CN=f5a95a0de1ac68711159aff459ae9f7d1da94364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:c0:ff:21:95:07:0e:b7:ac:73:fd:36:f0:
50:7d:af:53:75:e7:6b:af:43:76:86:8b:cd:ba:3b:
3a:3f:1d:4e:ab:dc:09:8d:f0:99:2f:0f:30:9e:bb:
57:00:9e:c0:2b:05:65:c4:a9:c8:ef:82:86:1b:ed:
c5:59:0e:a0:8c:7a:f8:0d:48:25:5a:8c:29:5c:b2:
a1:a1:23:73:f6:eb:9a:10:bf:9f:db:52:82:22:52:
07:61:e5:f0:c1:7b:58:43:45:8e:30:e1:8b:47:47:
0f:78:df:74:ff:41:32:40:fb:45:33:19:a5:8c:43:
10:ba:f5:6d:22:ce:39:20:0c:e5:a7:ab:bd:8a:35:
0e:9b:eb:b1:1c:d5:71:d6:3b:64:c9:24:97:42:d0:
c8:83:7a:71:a3:2d:ac:02:74:e0:fd:fb:2a:f6:9d:
61:9b:72:3e:99:f0:74:9a:c6:51:c0:bc:7f:c0:4b:
82:4e:56:98:6a:db:47:4c:2a:e5:cf:85:26:96:94:
e8:71:e1:df:f1:a1:03:68:b3:a1:57:d1:ae:b4:0b:
7d:f1:2c:7e:4f:fa:53:ff:09:b8:64:c4:d1:1d:28:
77:b1:7a:99:e0:23:b0:83:69:46:43:48:84:b4:ca:
8b:95:52:48:87:c0:43:4e:5e:d7:3a:56:85:25:3e:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:5A:0D:E1:AC:68:71:11:59:AF:F4:59:AE:9F:7D:1D:A9:43:64
X509v3 Authority Key Identifier:
keyid:02:72:BD:3B:32:AE:CA:F2:6C:A8:ED:B3:C8:78:FE:57:95:F2:AB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnK9OzKuyvJsqO2zyHj-V5Xyq28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af2e75-ecee-48e1-8af6-12dede9d0c71/1/AnK9OzKuyvJsqO2zyHj-V5Xyq28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:dd:d2:12:75:14:85:a4:f8:88:03:ae:6f:37:85:c0:51:d1:
e8:6f:64:69:a1:0c:d9:bc:d3:c2:b5:30:ae:55:d0:cc:e1:45:
56:85:22:56:3d:e3:2e:74:ed:b6:06:68:4f:89:5e:1b:ee:51:
66:52:0f:a9:2f:c1:5d:f7:1f:c6:d7:db:bb:eb:66:8b:17:f2:
8a:44:79:37:af:00:fe:32:e4:6e:39:ca:a1:2a:34:91:6a:6e:
cc:94:73:8e:4b:04:2d:dd:3c:1c:3b:48:42:40:ef:f3:a8:b2:
38:ea:fd:52:b1:7e:20:db:ed:e6:27:1e:14:11:b9:d2:1c:a0:
a0:e9:2f:4b:39:02:c4:4b:4e:9a:d2:5f:20:01:6f:e9:46:af:
02:4c:7b:e4:f8:b0:51:e9:45:1c:11:b1:24:cb:ef:fc:93:b9:
9b:24:b6:da:45:46:6f:64:f9:0e:cc:ab:13:dc:eb:82:83:08:
8b:f0:ea:7d:b8:9a:5f:f8:0c:40:1a:4f:58:56:1a:b0:53:c0:
9a:57:5e:99:b0:ec:f3:20:85:38:13:87:73:16:b4:09:dc:f4:
f7:fa:75:21:9d:ae:bf:40:05:41:2c:07:13:d8:38:df:32:a9:
a7:8b:e1:70:39:87:f7:47:f2:aa:85:cf:90:2d:24:37:31:c4:
8a:ad:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:50:30 2024 by rpki-client on console-ams.rpki-client.org