Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: p68jzuZQoAPJjXquWtjut/BMC9Yeni8ZGm1ha2VmYiY=
Subject key identifier: 26:F5:B6:B0:1D:45:5A:6D:56:8E:A8:51:9D:67:41:BA:B8:EB:24:20
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 01940721A05F94958358F4E9C1C2C5DB1558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 066E
Signing time: Fri 27 Dec 2024 08:00:31 +0000
Manifest this update: Fri 27 Dec 2024 08:00:31 +0000
Manifest next update: Sat 28 Dec 2024 08:00:31 +0000
Files and hashes: 1: 8CmyEau8EOeTZ8EicjKdVG8R9V4.roa (hash: 0mR23+hycMZJPbhbqqEGa2vSOZHWmTsTUEJ9cW6FA4g=)
2: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: z+2aV6NLv7l4T51C2rTJb2GBanfNb5GGwP2OPsd163g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:21:a0:5f:94:95:83:58:f4:e9:c1:c2:c5:db:15:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Dec 27 08:00:31 2024 GMT
Not After : Dec 28 08:00:31 2024 GMT
Subject: CN=26f5b6b01d455a6d568ea8519d6741bab8eb2420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:02:82:76:8f:84:8c:bb:50:7d:1a:a7:34:
8b:af:87:c3:cf:db:1a:9f:1d:1b:81:34:ee:9a:04:
7b:be:f1:f5:1b:92:c0:95:0d:2a:f4:9c:ab:31:5a:
95:58:ef:68:4a:35:70:45:c4:c2:00:f9:f6:1b:30:
7f:e0:d8:e6:af:7a:01:46:5b:82:c2:da:c9:8e:d8:
61:f9:bc:2d:2c:ca:d0:4a:c5:e3:10:1c:26:c5:04:
fe:f8:c6:c7:ea:46:05:6f:a9:f1:ca:39:42:b7:19:
2d:16:8b:97:e2:05:8a:4c:0a:ec:c9:64:42:6e:81:
b4:64:9a:0e:1a:83:f5:b7:42:76:9d:e7:d3:56:b3:
e5:08:c7:9a:4a:82:21:fd:f5:df:7c:4e:3b:0d:4f:
df:2e:37:be:c4:2e:0b:c1:81:f9:bb:43:c1:a2:98:
16:c9:29:38:51:d3:83:10:18:58:01:4f:57:df:0e:
1f:57:5b:b7:51:ef:0f:e3:b8:c8:bf:5f:99:12:6e:
49:38:16:1a:e1:78:8c:35:1c:3a:8a:2b:3e:81:52:
27:cf:9d:9c:d0:54:f4:1e:a6:a6:ba:bb:37:69:f3:
8d:f6:6f:dd:40:35:c6:7a:94:df:a2:f2:78:83:53:
67:1f:43:41:19:cc:74:4c:2d:5d:8b:d9:bd:d1:05:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:B6:B0:1D:45:5A:6D:56:8E:A8:51:9D:67:41:BA:B8:EB:24:20
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b2:3b:dd:39:04:71:05:94:e4:a9:30:fb:55:06:20:0a:70:
24:9c:ec:e1:7a:ed:f6:d7:0e:7b:37:50:55:9f:f0:0e:25:ad:
74:aa:f2:a4:fd:26:24:0c:d5:ee:32:54:8b:52:05:f7:98:fe:
1d:54:ae:a1:8d:16:4c:53:7f:ac:d8:7a:68:a8:5b:3a:0d:ec:
e1:26:03:77:b7:d5:bf:fe:c0:0a:c3:e5:ac:6c:eb:40:0e:db:
fd:e8:ed:6d:b1:eb:3f:14:47:88:67:ae:42:89:c4:fd:e9:e4:
8d:e0:84:03:04:21:d7:dc:c8:2f:e3:39:1f:dd:33:d6:65:e6:
f3:b9:c0:45:aa:db:30:a8:99:b1:97:6a:33:45:cf:a7:43:e0:
17:c4:c8:93:3f:a4:3c:d9:e9:45:5c:00:ec:f9:f9:42:21:ee:
0a:7d:15:fe:c2:3e:a8:bf:11:95:92:ed:38:7e:e6:f2:70:27:
b8:d0:92:6c:9e:46:c7:48:39:fc:71:a7:75:ad:de:13:d9:ee:
f4:bb:14:36:b3:29:6b:72:ae:e1:19:d6:c6:e4:fd:0c:fe:a2:
88:5b:0f:8f:a4:d9:35:3e:72:16:6d:eb:a0:84:1f:4a:70:4d:
a7:ef:19:82:96:19:e2:30:e0:66:90:db:86:6f:f4:85:39:73:
81:9f:d7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:59:54 2024 by rpki-client on console-ams.rpki-client.org