Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier: vO+7xX4si4Q6/+k4TVX76Gt3bSe58vXvyHCnyQk+9jw=
Subject key identifier: FE:39:86:CA:25:FE:0C:10:D2:F3:DD:A7:C5:0A:68:00:77:9B:D1:19
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 01940645FB0793FB851D7EBBAD6840A8DEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number: 13D1
Signing time: Fri 27 Dec 2024 04:00:36 +0000
Manifest this update: Fri 27 Dec 2024 04:00:36 +0000
Manifest next update: Sat 28 Dec 2024 04:00:36 +0000
Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: OicJL3mbFfb/qgPjlgRJCOSsJCL1pYVbCDxsZJojbmU=)
2: 9hJ8QVT1yOhHGe_FkNvD1uN3SH0.roa (hash: J1fJTXSQ6GHsr1ejlFWg1yvKGNskG+om72lwlkONKjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:45:fb:07:93:fb:85:1d:7e:bb:ad:68:40:a8:de:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Dec 27 04:00:36 2024 GMT
Not After : Dec 28 04:00:36 2024 GMT
Subject: CN=fe3986ca25fe0c10d2f3dda7c50a6800779bd119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:8b:6d:f7:d8:3c:5d:89:88:d9:66:0c:b7:
21:e7:f1:26:df:18:97:f7:7b:a8:6e:e6:c7:09:f0:
66:81:af:97:53:32:87:87:a0:07:98:22:a2:40:dc:
70:42:5b:90:06:26:e7:b5:4b:2e:77:27:f4:d4:d8:
ee:8d:25:c7:40:0f:d1:04:48:4a:be:fe:00:47:89:
e5:dc:fb:6e:24:32:75:94:11:dc:5a:9e:ab:2e:ba:
ba:cf:00:9d:b2:4e:58:b4:47:57:a6:74:b3:2e:a3:
b6:31:05:48:47:ae:30:5d:2f:21:fe:33:cf:6f:2a:
5f:bd:b9:ba:fe:c8:b8:3f:88:20:cf:c4:57:05:78:
e5:bf:8a:bd:76:a4:e3:5f:c5:57:52:7a:bb:0d:3a:
a2:ba:d3:3d:ab:1c:73:b3:7b:bf:82:ca:63:61:5b:
e1:0d:3d:68:82:17:c3:4e:7a:75:c3:54:bb:c5:55:
61:d8:ee:dc:d3:f8:bf:7d:a3:c4:27:72:57:54:e9:
07:64:eb:41:c4:c0:b6:23:1a:13:5e:ee:f1:b6:85:
f3:fb:cf:15:eb:f8:11:37:aa:75:6c:76:f7:82:63:
13:13:e9:6c:9f:c9:f2:3f:da:03:6a:4b:5b:50:01:
48:2e:02:7f:db:a2:ae:ad:d2:b8:5f:0c:db:69:19:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:39:86:CA:25:FE:0C:10:D2:F3:DD:A7:C5:0A:68:00:77:9B:D1:19
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e4:f2:1f:c3:21:d5:37:99:f8:ff:15:3b:46:04:1a:53:93:
76:7b:75:8d:fe:fb:cd:6b:0b:4d:10:a6:a1:5a:79:3a:fd:28:
e1:5f:ee:00:ed:51:34:84:61:88:5f:10:8d:e0:15:36:15:a3:
0c:c7:43:ae:cb:d9:1b:60:7d:8a:4b:76:5e:e5:f3:c2:9c:7b:
3e:4a:76:b1:6a:82:6c:3f:2c:9c:de:98:5b:ca:3e:22:62:0a:
9f:06:bc:e0:04:11:f3:04:b8:a1:19:ba:42:20:16:ef:ac:62:
52:28:a9:7e:32:7f:1a:ee:00:9f:eb:21:f3:a6:7a:a5:f8:23:
4a:26:1c:80:51:dc:ca:a3:4f:a1:e0:a9:3c:a4:dc:b5:88:9f:
27:9c:37:21:c0:c0:5c:81:e6:1b:35:99:bf:f7:3b:bc:5e:89:
a7:02:fb:36:bf:d2:d9:20:2f:93:66:a2:b9:ec:29:11:ba:af:
1f:fd:f5:1f:bb:76:e6:7f:ce:08:3f:1e:12:b7:7e:36:53:eb:
25:80:a5:60:79:a2:b6:54:98:23:fc:7f:68:83:b5:88:ec:cc:
df:55:30:6c:bc:13:4e:54:f5:0e:f6:07:9f:9f:4d:e9:f0:4b:
65:f7:07:f8:f6:da:ed:05:06:f2:af:b9:ad:1d:6b:36:08:22:
20:ae:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:08 2024 by rpki-client on console-fra.rpki-client.org