Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
File: 28sc89PzzcNCb7SfCgwz3ATIaBw.mft (raw, json)
Hash identifier: rE/m56K1xPZXgZcFVR/omK36GcCZ5D5jZrFe0wbxVHI=
Subject key identifier: 46:5A:04:CD:BC:30:A8:9F:92:94:16:33:4E:C5:36:DD:CB:F1:FA:85
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 01940758BF2CAF2C634DEF64BB7192D7820E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
Manifest number: 0D62
Signing time: Fri 27 Dec 2024 09:00:44 +0000
Manifest this update: Fri 27 Dec 2024 09:00:44 +0000
Manifest next update: Sat 28 Dec 2024 09:00:44 +0000
Files and hashes: 1: 28sc89PzzcNCb7SfCgwz3ATIaBw.crl (hash: ekdBuAdZSMz1i3hvB/Uqg3HHJj/heDXpD+NmnH4/X/w=)
2: voOOrcodSYWMY2zA2AnVj6xGDiA.roa (hash: DLPJpK5Ejndh9k4HFDlaBaTqRl9TVF0dECfSDuKDg1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:58:bf:2c:af:2c:63:4d:ef:64:bb:71:92:d7:82:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Dec 27 09:00:44 2024 GMT
Not After : Dec 28 09:00:44 2024 GMT
Subject: CN=465a04cdbc30a89f929416334ec536ddcbf1fa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:db:21:9d:dc:ef:3c:08:82:a3:c8:1f:f9:
9a:c8:18:4c:72:01:9c:e0:a9:5e:d8:30:df:d2:a2:
e7:e2:9c:f0:77:84:d9:41:2b:d0:9e:3f:46:9f:fa:
91:93:1b:e6:e5:1b:54:2a:61:6e:60:75:df:26:76:
73:89:7c:d0:2f:e0:c7:b6:4b:be:40:92:da:11:19:
e5:a5:d5:b4:d2:05:d9:77:b7:3c:8f:b7:5d:17:d9:
f2:01:36:64:1c:06:8d:e3:6d:2d:d2:11:c1:49:8f:
26:aa:c9:64:c0:50:14:6f:f6:58:b2:9c:4b:6d:e3:
90:7a:72:e2:b9:dc:46:fb:a2:9a:a3:fd:35:55:60:
aa:53:56:d9:b7:b4:8b:00:7e:89:90:09:c8:b3:d7:
e6:92:79:8a:b1:2c:bc:14:59:25:d7:82:ea:dd:1b:
a3:ac:b2:d3:4a:c0:c2:9a:f1:95:22:71:af:e4:ed:
eb:91:3e:39:78:ce:87:32:7e:66:9e:54:ee:91:4b:
fa:b9:09:a7:1c:25:cd:f6:43:a7:b2:91:4a:a8:41:
9c:ef:28:22:e4:5c:24:47:4b:57:33:13:9e:38:10:
1d:a8:c2:e1:1d:00:71:20:3e:cb:4c:9a:34:53:37:
f0:2b:15:bf:ee:33:fc:e2:22:3a:be:47:ea:ae:c2:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5A:04:CD:BC:30:A8:9F:92:94:16:33:4E:C5:36:DD:CB:F1:FA:85
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a6:9b:8a:f4:e7:98:b9:7f:8e:11:50:b6:84:48:31:77:40:
7d:f7:0d:7d:74:2b:e5:94:6e:f9:59:f2:d2:09:3f:22:d6:a8:
a6:62:5f:14:0c:e3:c6:f7:1d:01:11:fc:54:d8:89:57:03:a2:
cf:c2:c7:9f:59:1b:6b:13:a9:7d:8e:97:a1:6e:dc:9f:58:82:
0b:db:29:3a:8a:e1:5a:27:da:21:b1:46:8a:77:59:56:36:9d:
6d:f1:fb:f6:65:a2:a9:46:a0:6e:f5:13:47:fe:13:b1:46:37:
25:63:e8:6c:46:d6:cd:ff:fb:2b:15:28:c0:dc:13:ba:e1:af:
b3:77:af:61:b1:9b:cb:d6:8d:09:4a:92:5a:ea:8c:cd:4a:5b:
b0:75:e1:cf:c8:4c:b2:8d:d2:c7:2d:44:71:34:11:95:d3:04:
93:79:15:10:59:fd:49:3b:1e:d8:b0:16:22:b3:50:1e:e7:19:
eb:70:64:7c:41:53:31:ff:6c:bf:12:ed:d2:fa:2b:70:c4:c0:
4b:ae:ee:18:e5:2d:04:76:19:3c:91:2f:da:a0:96:56:58:c2:
72:54:6d:f3:ba:4b:5c:9e:91:e4:44:cc:5d:45:ae:89:26:aa:
93:ab:26:d3:b8:e9:27:01:53:fc:cb:87:b1:04:d9:8e:8f:e6:
5d:89:56:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:10 2024 by rpki-client on console-fra.rpki-client.org