Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: XGIh6C/H1LMrVFCw4evdZPYt1Eoc5mjMjiIVuRtLVcc=
Subject key identifier: 99:97:96:C7:FD:57:C6:CB:CC:F3:4B:99:63:29:30:5B:60:56:A0:B3
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 019406EAE17C8084449EA0069123F1642FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 13C9
Signing time: Fri 27 Dec 2024 07:00:43 +0000
Manifest this update: Fri 27 Dec 2024 07:00:43 +0000
Manifest next update: Sat 28 Dec 2024 07:00:43 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: 2fxs0CAkavluYfBubL5NzrcKvZ2K44xOe9vE8D6H0Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:ea:e1:7c:80:84:44:9e:a0:06:91:23:f1:64:2f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: Dec 27 07:00:43 2024 GMT
Not After : Dec 28 07:00:43 2024 GMT
Subject: CN=999796c7fd57c6cbccf34b996329305b6056a0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:46:d1:4b:42:4e:ad:7e:77:9d:f2:3d:4a:ef:
7e:b2:66:4f:ff:7c:26:36:dd:97:fb:61:47:ad:e3:
58:a2:6e:bc:15:bc:ec:b7:21:05:5e:07:90:72:9e:
4d:48:37:ce:6a:27:6c:f3:dd:47:89:bb:40:e9:fa:
21:fd:c7:5f:3e:da:ce:26:df:da:c6:da:9b:c8:28:
c3:0f:db:c0:5a:d1:ba:93:93:df:f4:23:90:f2:08:
0e:c1:54:1b:e8:e0:17:39:a6:a9:8c:24:e0:f9:e1:
d9:8b:e4:19:e1:bb:10:ac:4c:3a:3f:79:65:c7:d4:
5e:d8:7c:99:c1:39:3c:1b:a6:ef:9f:f9:14:52:22:
a2:e2:d9:b3:a3:77:7a:e4:72:6e:40:29:0a:55:7c:
72:33:ab:d3:b9:c0:bb:05:46:5f:f9:92:05:a8:0f:
0c:8b:cf:f4:de:4b:16:43:ea:24:23:15:31:27:4f:
87:2d:86:40:cb:a4:70:0d:ac:c8:c7:f8:54:0a:a8:
49:41:1f:7b:60:c1:f1:56:b2:23:6d:c4:29:da:0b:
89:7a:dc:6a:ac:73:2d:84:87:ef:33:98:ef:33:d0:
42:53:42:37:a6:58:19:76:43:69:e5:a7:8b:0a:da:
c7:0f:27:95:77:cf:0a:e9:82:88:62:ab:12:10:2c:
f4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:97:96:C7:FD:57:C6:CB:CC:F3:4B:99:63:29:30:5B:60:56:A0:B3
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2f:65:35:45:cb:e8:ce:c2:96:7c:41:23:6f:ba:25:4a:0a:
6a:33:5e:21:c0:d4:72:48:5a:bf:54:a8:cd:0d:9b:3d:48:72:
71:07:47:c9:f8:dd:47:14:93:d9:47:af:37:69:0e:45:66:39:
6f:56:5d:ed:fd:69:26:a3:d4:bb:81:07:eb:67:ec:d3:de:eb:
0e:38:33:31:c1:a8:4d:6f:45:07:16:7e:5e:ed:18:c0:0c:e7:
1b:a1:22:4f:a9:d7:dd:2d:b6:71:fd:04:43:38:5b:a7:54:fa:
3a:99:4d:c7:f9:c4:b1:0c:55:0d:47:97:3a:52:2e:8f:94:2d:
b1:6b:71:49:ba:6e:1b:6b:86:03:d7:fe:7e:d4:c6:0d:ff:02:
7b:64:04:d5:1e:98:97:26:6f:be:97:de:34:d3:c7:bb:d3:c6:
36:79:6c:da:0a:34:23:b9:75:17:25:45:72:1f:c2:3f:31:02:
00:46:91:5a:13:13:1c:80:f5:fb:ed:56:9e:31:ff:0a:40:c2:
c3:d3:f4:d6:d0:12:7f:03:55:30:c4:97:ce:86:3b:0d:ec:79:
cb:02:14:ee:9e:76:7e:a8:7a:cd:39:8c:73:c4:b7:2e:43:78:
89:d8:08:cb:0a:d8:77:4d:97:ad:db:dc:ce:73:38:57:94:f5:
0a:34:06:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:01:40 2024 by rpki-client on console-ams.rpki-client.org