Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: jQKCCh9XmhtYz7HwGYQeUvaKuNy+/l0tEHgJB22Fpdk=
Subject key identifier: CF:AB:0D:58:03:B7:4F:8F:87:63:EE:33:D1:96:79:AD:FF:0E:81:76
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 0194056A21FF911E80195CC486BAF71E3541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0908
Signing time: Fri 27 Dec 2024 00:00:29 +0000
Manifest this update: Fri 27 Dec 2024 00:00:29 +0000
Manifest next update: Sat 28 Dec 2024 00:00:29 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: QpOlVBkPjGExBFQLTMnw64bCdL39KqJvGnfGUaQunZ8=)
2: TWn-0uCyuiEJ3scUOYRJhHIGmMU.roa (hash: DywbCWNTo/70t7B5UtRTgv5T+ongZgC6jKWNzHqeh0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:6a:21:ff:91:1e:80:19:5c:c4:86:ba:f7:1e:35:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Dec 27 00:00:29 2024 GMT
Not After : Dec 28 00:00:29 2024 GMT
Subject: CN=cfab0d5803b74f8f8763ee33d19679adff0e8176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:71:4a:de:9a:a2:02:4a:33:a5:33:00:f7:
97:1e:63:0a:cb:aa:62:e5:72:fc:8e:ea:06:be:b8:
f1:23:2d:cb:9c:9e:dd:d0:23:c4:4a:e3:7a:e5:63:
89:a5:c8:67:84:32:85:2b:a1:db:df:03:d9:3c:bd:
5e:1f:41:c7:16:a2:fb:6b:77:e0:f2:5c:48:d7:c4:
93:ed:e0:0e:48:af:e3:bb:15:d2:af:d1:37:6e:72:
e4:5c:fb:dd:4f:eb:4d:0f:61:da:9a:2e:de:87:88:
ab:28:5f:ca:fb:ad:dc:82:44:8d:bb:3a:e7:e2:3c:
62:42:d3:98:45:18:21:5a:64:73:61:9e:f6:16:01:
48:70:47:08:d1:1e:c6:40:ca:7b:83:0e:54:d2:cf:
27:79:7a:95:ab:6d:52:9f:49:b7:10:81:f8:3c:8d:
67:49:98:09:5d:3f:3b:08:8a:e3:1a:a9:8f:6f:cf:
c7:16:ec:ea:96:b4:d6:87:d5:f6:a6:24:83:11:f5:
95:a6:41:34:dc:34:0e:86:e4:4f:cd:26:3a:ca:8c:
e5:f0:76:5e:47:f1:2b:04:1a:22:66:53:e5:ca:f9:
7b:49:e6:9e:7a:fd:3b:3b:92:7b:99:4e:ba:0b:ae:
5a:6f:61:62:64:58:a2:6e:60:bf:5d:b5:c6:57:c0:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:0D:58:03:B7:4F:8F:87:63:EE:33:D1:96:79:AD:FF:0E:81:76
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:81:b4:e3:1c:d6:bc:1b:a0:1c:bb:a9:db:ca:ea:8f:52:ab:
2b:5e:2f:13:45:57:00:a4:88:b2:00:1c:3c:c1:66:a7:2f:99:
93:29:0b:fa:c5:f3:a6:fd:d0:0e:82:3b:7f:49:94:a6:80:a7:
73:ef:34:ef:ce:d2:7d:e0:b8:5c:dc:1b:11:5b:4e:2d:9c:5c:
0b:be:bc:7c:b8:1b:9f:34:64:01:57:05:3d:f2:0c:6c:cb:d6:
cc:95:a5:ae:19:79:9c:a8:77:60:58:63:03:a7:e5:65:8b:70:
f9:16:7b:32:00:18:08:8a:97:75:6e:27:8f:d3:a8:91:5b:98:
b4:38:a9:24:4f:3a:13:4b:13:80:7e:49:b2:b0:5b:8d:ce:20:
36:3d:c1:dd:44:c3:8c:e7:c8:98:59:ae:91:5c:4e:9f:e7:34:
9a:39:64:51:af:ed:58:d9:91:f8:7e:53:1d:c4:94:18:b1:b4:
40:2e:5b:56:e7:75:a5:c1:78:64:60:a6:52:96:3c:0c:1e:71:
aa:8b:ba:08:ce:30:4c:65:70:bd:2f:d9:ae:99:b6:cb:02:96:
22:87:0d:76:21:b5:f7:2f:dd:56:5e:a4:6c:02:86:70:45:4f:
2c:d3:3e:26:87:42:ae:41:4a:83:f8:25:37:9e:af:ee:a7:16:
2d:d9:3d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:00:56 2024 by rpki-client on console-ams.rpki-client.org