Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
File: 8KEScQQ06Frl_m-_Qedr3fk4GM8.mft (raw, json)
Hash identifier: +K+2AlMyifq0+Y4wX6DDl1JERQJCmfA2UdekXGoSbQY=
Subject key identifier: 9B:D7:FC:FF:7B:3D:90:78:84:D0:11:68:40:32:08:E1:05:04:22:F9
Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
Certificate issuer: /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Certificate serial: 019405D80F748917D0705B70D430919ED34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
Manifest number: 0244
Signing time: Fri 27 Dec 2024 02:00:33 +0000
Manifest this update: Fri 27 Dec 2024 02:00:33 +0000
Manifest next update: Sat 28 Dec 2024 02:00:33 +0000
Files and hashes: 1: 8KEScQQ06Frl_m-_Qedr3fk4GM8.crl (hash: 09bqTs9HbZzCfgBGvNYbsPrAX5XiFhFVkbLvJm9MG/k=)
2: UVNDKWgKPtDkDA9YrVzI37a4HyE.roa (hash: WUXB6Iv9EyEkPslg+0XXIvQXThm3nJXaVF+OvHu+7dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:d8:0f:74:89:17:d0:70:5b:70:d4:30:91:9e:d3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Validity
Not Before: Dec 27 02:00:33 2024 GMT
Not After : Dec 28 02:00:33 2024 GMT
Subject: CN=9bd7fcff7b3d907884d01168403208e1050422f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:47:4a:de:c4:b2:7e:c3:93:5d:75:da:fd:
6e:2f:18:d2:f2:e6:0b:14:59:32:76:9a:df:5a:af:
fd:d1:f5:a2:30:98:c8:1d:36:a8:4d:99:4d:24:5e:
b4:53:83:16:cf:2b:fa:8b:d9:59:55:b6:be:aa:b6:
71:88:0d:94:ad:6b:26:37:d1:67:6b:e1:7e:7b:e4:
f2:88:1d:43:22:1b:64:43:b0:4f:57:af:1b:32:b2:
56:72:31:00:38:e6:92:5b:d4:0e:cc:0c:cb:1b:3f:
09:b2:03:e0:6c:4d:47:f7:c5:78:73:42:bf:83:57:
5c:92:2d:55:fb:2f:47:60:c1:7b:5b:70:5c:69:4c:
e5:2e:0d:4f:7e:6f:e2:9c:1a:6d:0d:8f:a0:f3:42:
f3:b1:85:bb:c0:84:15:08:aa:8d:a9:9b:70:44:d8:
5d:3e:68:1a:5c:fb:1e:2e:65:48:ba:55:79:3e:1f:
72:87:c4:e1:5e:5f:1e:a1:a8:b6:4e:45:be:4d:96:
c6:74:32:f0:b3:01:1b:2f:e3:5a:90:92:24:55:28:
c0:21:88:84:dd:5d:f1:13:80:1e:47:cd:56:2f:d5:
8f:02:83:25:84:c7:29:a8:a1:52:18:d7:a2:08:36:
27:98:a4:05:04:fb:90:b5:5c:e1:fd:50:e1:68:69:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D7:FC:FF:7B:3D:90:78:84:D0:11:68:40:32:08:E1:05:04:22:F9
X509v3 Authority Key Identifier:
keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6f:85:d3:f9:c4:b5:9f:93:de:4a:ea:d6:08:ad:02:13:ef:
6b:62:21:3c:21:5e:58:a0:6f:ac:4d:e5:0f:85:77:e0:88:bd:
89:a3:1f:8f:5e:e8:c8:92:12:55:d5:b0:7b:59:02:69:08:d1:
57:4e:74:6b:f9:4a:27:58:42:a1:d9:a2:fe:80:9c:69:7f:b0:
d0:90:17:29:0e:8a:b1:08:55:78:cb:ac:29:55:a0:d2:7e:f1:
18:5e:db:90:7d:37:2a:ec:7e:68:e5:25:d3:4a:81:d5:db:7e:
d8:cd:42:e1:a7:e2:d6:9d:5a:9b:55:54:14:3f:cc:a1:19:f1:
52:22:1f:3f:90:a8:11:34:19:46:15:5a:c0:1a:83:56:53:ef:
4c:a6:c9:1c:16:57:79:25:89:3e:9b:8f:96:dd:32:81:43:57:
f0:e3:60:3c:2e:1d:e4:6c:87:70:7a:fb:09:e8:45:47:af:94:
2b:39:91:67:06:32:44:f0:2e:91:cd:00:9f:e6:ee:52:26:21:
13:f4:04:01:04:79:72:7e:76:8c:f9:ea:cd:99:98:ae:ba:e8:
42:d3:79:a7:f1:d0:d6:91:60:7f:83:05:18:3e:4d:c4:2d:1d:
48:21:18:99:60:1e:a0:13:fe:3d:df:d3:a7:2a:c0:83:af:ae:
23:65:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:51:32 2024 by rpki-client on console-ams.rpki-client.org