Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
File: 1e-BdSPHDnJw0q7lorbXJWojQiM.mft (raw, json)
Hash identifier: Yz9NrQvrQBwRitHskRycOkCWSRYQxjHiY3ZZKlPisnA=
Subject key identifier: C2:5A:F2:D4:17:C1:0D:FE:B3:D8:26:36:BC:BE:86:22:BF:0C:33:48
Authority key identifier: D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
Certificate issuer: /CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Certificate serial: 0194060ED972526355832F38BAB5E9B254B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
Manifest number: 3D
Signing time: Fri 27 Dec 2024 03:00:23 +0000
Manifest this update: Fri 27 Dec 2024 03:00:23 +0000
Manifest next update: Sat 28 Dec 2024 03:00:23 +0000
Files and hashes: 1: 1e-BdSPHDnJw0q7lorbXJWojQiM.crl (hash: +kNpyCQ3K9FdBdD+TushpRVzPkwIPOX+H2xKZSKUTMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:0e:d9:72:52:63:55:83:2f:38:ba:b5:e9:b2:54:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Validity
Not Before: Dec 27 03:00:23 2024 GMT
Not After : Dec 28 03:00:23 2024 GMT
Subject: CN=c25af2d417c10dfeb3d82636bcbe8622bf0c3348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:5a:ee:05:4c:f7:3c:73:0d:81:4b:ca:b5:
d0:8b:59:20:0e:56:c0:2e:b5:d5:ed:d2:6f:cd:c6:
41:8b:89:d0:15:1e:07:5b:ac:18:12:bb:c2:ec:e3:
f8:23:75:e9:77:42:9e:f2:3b:4b:a8:13:22:73:c2:
96:f2:41:04:4b:f5:de:dd:51:54:ef:62:be:24:de:
59:52:7d:47:1e:6d:d4:16:cc:bf:d3:59:3d:fd:bb:
d0:83:f2:20:27:d0:ee:58:ce:5f:28:c9:03:d7:32:
20:89:70:bb:97:a9:de:37:92:ee:c1:11:d7:6b:cd:
9c:88:33:0e:44:80:75:d4:05:bf:da:78:70:8a:2d:
a9:1c:73:55:86:b8:90:29:bb:01:57:4e:83:c1:d6:
9f:cc:e8:18:e8:de:15:dd:3a:b7:95:9f:ef:74:8a:
6e:eb:4c:6b:8d:7e:e7:49:30:06:4f:3b:bb:ff:ee:
25:ff:11:75:83:93:24:04:8b:4d:c9:74:8c:7c:0c:
61:0c:67:37:0e:40:41:54:2c:da:37:2f:c8:96:96:
77:59:57:24:4e:0a:35:b0:44:93:9f:38:7e:23:39:
ae:e3:2e:f2:ba:b5:31:1e:91:62:63:2d:7f:56:31:
b1:7e:9b:bc:1f:74:57:a4:ff:2d:dc:7c:22:56:db:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5A:F2:D4:17:C1:0D:FE:B3:D8:26:36:BC:BE:86:22:BF:0C:33:48
X509v3 Authority Key Identifier:
keyid:D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7e:a2:51:a8:4e:3d:05:33:5e:99:7f:71:64:e6:a1:bf:33:
36:9a:80:5f:bf:43:97:ce:6f:16:05:31:ba:a3:91:e4:1a:95:
e1:78:a5:4b:5f:21:a8:53:1b:91:69:c0:75:f0:fe:c0:16:d8:
e1:d3:80:11:da:8b:95:0d:5d:9f:01:f1:5d:a9:16:55:23:e5:
79:32:15:f0:78:79:83:b3:3f:de:68:94:40:b0:b4:9b:dc:42:
34:97:4a:7c:da:34:c9:5b:54:a5:6b:39:24:e5:fc:48:47:5a:
04:0f:46:82:1b:02:e4:fd:69:6f:34:b6:2c:57:96:f5:93:f0:
54:9b:e1:39:36:32:2a:9f:02:67:91:e0:c0:34:0d:9b:eb:70:
ab:64:d9:73:65:bb:66:78:cc:25:a0:d9:1b:a3:1a:62:55:8a:
19:0b:c4:8f:8f:0b:e3:5e:e2:af:2d:8c:1f:81:8f:40:a0:1a:
2f:16:50:f0:0c:94:5e:42:f9:9c:6a:f7:41:8e:85:b4:b8:97:
e3:bb:d9:e2:a1:f1:37:b2:47:ee:af:01:e8:1d:7f:fd:97:0c:
c4:59:a1:83:71:43:7a:7a:00:b8:d9:70:5f:2f:b3:0c:1b:8c:
2f:cd:79:73:a5:b4:b8:cc:7a:e7:90:d0:4e:23:6d:15:51:70:
ef:9f:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:00:49 2024 by rpki-client on console-ams.rpki-client.org