Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: RFeix8+fcAqHNvAXDyGCVqlZb0/WHDZoG11IlTIpIEw=
Subject key identifier: B4:2E:2C:50:BD:59:2D:4F:E0:48:53:73:06:32:74:57:14:FD:A5:73
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 01940721C00949B0D7075689D7FF4020D420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 13CC
Signing time: Fri 27 Dec 2024 08:00:39 +0000
Manifest this update: Fri 27 Dec 2024 08:00:39 +0000
Manifest next update: Sat 28 Dec 2024 08:00:39 +0000
Files and hashes: 1: 0ZmhfBoM_G3NoQJ5hIYgdFdsbSU.roa (hash: bcr+w3E06quiZLwubiKJ0cQs04qYDWaoGwgsM5q6AXY=)
2: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: YsEc3YtAmD5HWQhVBj8naYLYHB8kx2cxLelR3/u6DYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:21:c0:09:49:b0:d7:07:56:89:d7:ff:40:20:d4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Dec 27 08:00:39 2024 GMT
Not After : Dec 28 08:00:39 2024 GMT
Subject: CN=b42e2c50bd592d4fe04853730632745714fda573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:94:4f:74:15:29:1f:f4:31:53:98:0a:0d:
c3:9c:5f:1c:55:b0:83:e4:56:ed:ac:00:e0:c6:6c:
39:40:8d:eb:25:ed:d1:8d:27:20:57:b8:ff:65:d7:
d7:df:e5:c0:90:17:f3:d2:d0:0f:f5:da:cf:dc:f9:
64:69:ae:de:be:89:2c:f0:36:05:4b:73:4e:f7:2d:
98:f3:0c:1f:66:9a:b1:ed:04:a8:49:9d:ef:3d:48:
5c:54:7d:b6:2b:b8:3c:77:0f:5c:b6:f5:82:79:5d:
58:c5:40:d4:03:ee:66:af:30:ad:05:77:9f:1f:07:
b4:e4:ff:7c:0c:61:cd:82:bf:61:27:03:9e:32:24:
f3:29:1b:bf:e1:d3:d9:69:35:9d:22:e9:20:94:d5:
a8:9a:bb:e0:d2:a5:2e:d0:be:6d:f1:26:75:ed:8c:
df:9c:35:2a:ec:e6:0a:d3:d6:d1:57:65:80:73:60:
f1:d1:6b:b6:3c:77:67:d9:80:51:74:83:71:be:01:
de:8a:ae:38:56:f7:c5:cf:9b:c3:0f:1f:5b:ce:a2:
a7:75:78:ad:c4:91:4a:12:03:a6:3a:6f:28:bc:05:
39:29:fc:65:d3:f3:6d:1a:5d:95:7a:ce:35:6b:ed:
ff:74:43:3d:32:58:ce:7c:0c:fe:78:a4:d2:23:97:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2E:2C:50:BD:59:2D:4F:E0:48:53:73:06:32:74:57:14:FD:A5:73
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:eb:c6:a6:59:e0:b7:0c:2b:97:b8:63:a0:44:08:cb:eb:f1:
ee:1e:18:ed:c8:d8:1c:57:7d:ac:b6:1d:7a:a8:4d:30:49:8d:
14:bb:1d:e7:6e:b5:3c:6c:8e:71:bf:2d:bd:ec:00:e5:d2:7e:
91:54:33:0c:86:2d:ee:0a:26:84:55:20:dc:84:a9:0f:a5:c1:
af:59:be:24:5a:b6:de:63:5b:70:79:d6:d1:2e:b7:70:59:c6:
ef:54:d2:75:dc:41:49:c7:45:00:5c:ee:f3:f9:0c:ff:49:dc:
d0:7f:21:c8:78:e1:b3:4c:02:0b:55:b9:cb:69:35:58:9d:e9:
ec:32:cc:cf:66:c8:43:81:22:00:d5:0f:e7:85:9b:b0:12:c9:
a9:01:df:c7:98:3e:98:c9:30:f1:2d:9f:fe:65:0a:2c:8c:df:
e6:3f:a1:08:b3:14:6b:f9:f4:17:b7:1d:cf:a9:99:92:96:c4:
e7:b5:a8:cb:9b:c7:b6:5a:e7:55:45:0e:14:79:cb:5d:b6:36:
40:49:0e:7e:4e:a5:5a:72:8e:8e:3b:c8:8a:55:86:8b:d4:a2:
0d:de:29:63:24:30:40:72:b6:79:57:f5:d9:bb:17:73:2b:27:
37:14:d1:07:f9:ed:f7:e1:02:ce:fc:79:f4:e1:af:e3:64:4a:
f1:ca:d8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:01:13 2024 by rpki-client on console-ams.rpki-client.org