Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: 7WFoeobXulicvZMBJm9woyGT+ars4tG66/vLAy4b4Wo=
Subject key identifier: BC:ED:8A:E0:F7:25:26:AD:7B:E0:FA:B4:BD:7E:1E:58:C6:F7:25:9E
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 019405D7E116D99F2E558E184F49B6C83679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: AA
Signing time: Fri 27 Dec 2024 02:00:21 +0000
Manifest this update: Fri 27 Dec 2024 02:00:21 +0000
Manifest next update: Sat 28 Dec 2024 02:00:21 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: ttILpaJU4NErtsl2Vo0URKZdwfKsLMZkCORG5uJ3eKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:d7:e1:16:d9:9f:2e:55:8e:18:4f:49:b6:c8:36:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: Dec 27 02:00:21 2024 GMT
Not After : Dec 28 02:00:21 2024 GMT
Subject: CN=bced8ae0f72526ad7be0fab4bd7e1e58c6f7259e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:64:01:ed:b4:c9:39:ff:19:1d:86:06:b4:
22:94:7b:23:1a:c8:06:21:df:4c:78:3f:69:93:31:
eb:bd:10:da:a8:47:c7:95:12:0b:c1:4a:98:9a:40:
8a:c6:dd:7c:78:16:40:60:55:51:cc:c2:24:3b:52:
88:23:90:aa:d2:0d:21:5b:b3:68:cf:fc:4a:58:a5:
08:dd:21:ca:bd:0c:c7:35:5b:15:22:3f:8a:ab:10:
c6:2f:7e:cf:41:ec:c5:7c:66:e5:f6:d8:f6:54:ae:
89:91:a6:4d:80:1b:66:4e:2b:6c:17:70:b9:7c:86:
23:cd:b2:0f:09:4d:02:33:2f:41:a0:c2:da:bc:b9:
47:b6:9a:3b:30:0b:68:1a:f2:af:d6:66:66:da:3f:
ce:15:72:1a:02:18:31:d5:ef:c0:dd:1b:dc:f1:c4:
a3:e2:cf:7b:cc:86:3d:a2:b0:1b:bf:7d:9a:1b:9d:
b7:d8:b9:98:e9:f8:69:00:1f:6b:58:a3:44:62:9b:
f7:6c:4f:97:e4:fd:56:87:0d:85:b5:3c:ed:69:94:
8d:38:0b:cb:c5:d8:44:a4:a9:eb:d5:50:cd:1a:c6:
99:43:6f:82:ba:3b:78:ca:8e:b1:26:1c:17:aa:e7:
43:3a:13:0d:24:29:de:6c:bb:92:9f:a7:f6:5a:14:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:ED:8A:E0:F7:25:26:AD:7B:E0:FA:B4:BD:7E:1E:58:C6:F7:25:9E
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d5:4a:42:11:c6:a0:cc:16:27:87:a8:c8:90:b6:16:ba:71:
9a:0d:90:fd:6a:96:df:ef:88:2c:f9:5f:87:c9:f3:0a:82:ff:
57:c2:1b:6a:1e:ab:01:d2:55:9f:66:04:af:0c:31:1a:92:b9:
00:28:65:9b:29:23:42:2c:39:68:82:48:e6:28:90:7d:15:be:
bf:41:9d:d1:2a:6a:6f:7e:f2:e2:64:ec:c3:06:7d:fc:f3:15:
5c:5f:c6:a1:09:1f:fd:a1:cf:a0:32:82:0b:04:0a:1d:ca:7e:
a4:86:99:b4:21:42:dc:8b:73:ff:2d:8c:b5:91:e7:ed:02:b9:
bc:f2:dd:ec:57:f5:bd:2c:39:c6:4b:14:ab:2d:6d:b7:1c:d4:
9a:75:08:ad:f5:41:d3:d7:fc:fc:45:69:5a:d5:6f:ca:1f:f0:
21:9a:60:cc:68:dd:4c:d2:87:16:f4:7a:9f:c5:4e:fe:4f:7e:
90:11:f4:92:8b:47:3c:50:6a:50:e5:ab:fb:b7:7a:e6:bf:21:
cf:3a:e6:18:d2:62:5e:a4:70:bb:57:0a:c2:58:db:03:73:74:
c4:14:23:31:18:47:f8:a3:6d:74:3c:b7:f1:8e:bc:5e:40:25:
d8:3c:b1:94:7a:01:f0:01:87:c6:47:59:b5:27:47:60:4e:9a:
17:a6:49:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:08:15 2024 by rpki-client on console-fra.rpki-client.org