Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: XwAC15DHVrVzexahz3pY8k1nZNnbM/3+J10L9y2q6S4=
Subject key identifier: A6:D4:15:4C:91:79:24:28:FD:9F:A5:5B:29:D7:0D:68:44:F5:78:EC
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 01936C355410FD7CEF89E215753EAB73CA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: 07
Signing time: Wed 27 Nov 2024 06:00:54 +0000
Manifest this update: Wed 27 Nov 2024 06:00:54 +0000
Manifest next update: Thu 28 Nov 2024 06:00:54 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: utNnPXuqyjVq+RVkZHuamvbTkiKI5ROUrF4IYEE4IdI=)
2: ta6DvlgWVpJ5f5HkzjJIoxe0ts8.roa (hash: 2OnQ/FOT4VR46AoR+5TmYChEu2dKbDXCfvMuAjRieZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:35:54:10:fd:7c:ef:89:e2:15:75:3e:ab:73:ca:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Nov 27 06:00:54 2024 GMT
Not After : Nov 28 06:00:54 2024 GMT
Subject: CN=a6d4154c91792428fd9fa55b29d70d6844f578ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:f0:73:2c:33:e6:46:d9:7b:53:1c:0c:bd:
68:ab:24:cd:c5:b8:9e:cf:7d:91:f5:e6:99:48:63:
71:6f:38:40:a5:bf:1e:32:68:51:5d:7b:8c:88:ee:
7c:dd:33:5d:a3:d2:f1:ca:cc:52:0c:20:d7:6d:5e:
a0:5f:39:9e:3e:78:cd:07:30:a3:d6:9d:42:a5:58:
c2:c1:e1:26:03:e3:1d:35:c3:21:2f:2e:fe:f5:c1:
93:3f:d7:83:1e:30:7f:09:2c:a3:4b:a0:de:33:a9:
24:91:42:51:17:75:e5:80:34:55:c3:6f:33:46:cd:
2f:c7:57:39:ec:94:45:f0:f8:59:72:ac:67:71:ee:
44:18:e5:7e:79:15:20:d4:5b:44:7a:44:ab:42:6c:
a9:fc:1e:d3:83:51:32:ee:2d:34:5b:57:fa:a9:5c:
a1:e3:4e:bd:21:fe:81:c9:6c:7b:a6:7d:64:13:6c:
18:20:39:47:d7:85:56:21:54:0b:e1:de:71:30:45:
6c:25:89:d5:ba:8d:61:f5:dd:6f:15:96:04:40:83:
a8:02:fe:6c:17:59:b0:26:67:81:7e:07:91:fd:dc:
74:b5:a2:a9:f2:b5:8e:60:93:63:63:be:35:d1:31:
b0:ad:a4:fa:a5:9f:92:a3:97:61:f2:6f:ff:2e:ed:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D4:15:4C:91:79:24:28:FD:9F:A5:5B:29:D7:0D:68:44:F5:78:EC
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9b:72:bb:6b:40:5f:e9:62:0b:f5:d5:ac:c8:49:c4:2b:cc:
61:cf:d9:0d:98:58:cb:e3:23:dc:f6:21:3d:ac:24:bd:ef:ec:
76:fe:ec:d9:fc:a4:d2:5f:65:df:ea:c6:d2:71:e3:ce:5f:c0:
2e:3d:f4:7b:2b:af:58:fc:b9:2a:5a:7c:a1:f2:ab:2e:2f:c8:
f8:cd:70:9e:bc:3a:cf:98:65:c3:e3:13:da:00:c3:6f:19:d3:
28:09:ce:68:30:90:87:fd:c4:19:8d:5e:db:9b:eb:be:c5:f8:
5c:fe:b6:19:c6:75:24:50:0c:87:dd:db:79:84:21:81:c4:99:
b4:80:2f:22:f3:84:e0:b2:bd:93:dd:83:ae:15:38:ef:8e:22:
04:95:cd:0c:dd:b7:9f:74:5d:b9:f1:ca:25:46:8f:b4:db:53:
a1:45:bf:f6:c4:f6:1b:1a:0d:00:ed:66:65:45:29:12:c0:8b:
e0:eb:63:fc:ef:49:e0:76:21:c5:88:f0:40:6d:30:c9:74:ee:
a7:d7:aa:96:62:15:cd:5f:f3:78:b4:e4:6d:26:a0:ac:90:7e:
b2:64:40:d9:f9:05:ec:f2:8d:cf:28:3b:02:d2:3a:0f:82:b9:
5f:ca:49:6b:77:c8:d0:4b:70:5b:38:4c:95:52:88:ff:56:51:
9d:35:a8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:30:32 2024 by rpki-client on console-ams.rpki-client.org