Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
File: 1-tzmN--ygZRxWsKnISniBXG5g68.mft (raw, json)
Hash identifier: UmhGJ3y6ftrISYD7hWlANPmd0rjxVcK/MlKTdQ22gKk=
Subject key identifier: 8E:2D:DF:CC:70:F9:6F:A8:F0:8B:82:DD:18:3A:29:FC:22:17:E9:91
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial: 0194067CD64E8F111D3E303D818C96313EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
Manifest number: 13CA
Signing time: Fri 27 Dec 2024 05:00:32 +0000
Manifest this update: Fri 27 Dec 2024 05:00:32 +0000
Manifest next update: Sat 28 Dec 2024 05:00:32 +0000
Files and hashes: 1: 1-tzmN--ygZRxWsKnISniBXG5g68.crl (hash: CEvblJFlY+Y+0QVTQuQ2hrKVUeqMR+NEOXKpw6OWd0o=)
2: eUwLqeIH7zCT81sSKFeKCXYEErU.roa (hash: sO7+riJG6LVH+5S0VyXbW+QLXBEOQ2RHFqB92GiEe8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:7c:d6:4e:8f:11:1d:3e:30:3d:81:8c:96:31:3e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
Validity
Not Before: Dec 27 05:00:32 2024 GMT
Not After : Dec 28 05:00:32 2024 GMT
Subject: CN=8e2ddfcc70f96fa8f08b82dd183a29fc2217e991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:b4:59:40:45:99:3f:f9:f8:02:e4:42:9f:
a5:da:08:e4:07:dd:8e:be:c9:84:54:d1:ae:d6:8e:
30:ec:4f:bd:38:86:20:4c:ea:2f:0b:a3:35:e2:94:
00:86:80:a8:f5:b1:7b:5c:62:ea:ee:f3:81:16:47:
9c:ec:4a:06:8b:58:8c:d8:e9:7d:9a:8c:8c:3a:cc:
72:81:90:d4:f0:18:f1:bd:ea:83:bb:fc:3c:9f:6a:
5c:5b:e3:fe:b4:81:93:70:c7:c7:45:72:71:b5:12:
48:f0:df:9b:ab:5d:a6:15:fa:86:e3:0c:b9:eb:e3:
9a:b7:be:cf:02:64:03:d7:c0:a2:8d:39:85:0d:1f:
fc:ab:11:81:34:7a:ee:1b:61:82:e3:52:a3:65:7a:
df:4f:93:b3:02:7c:b9:7f:f1:65:7e:31:d1:d2:ee:
e3:44:f3:e2:00:7f:25:04:34:ff:ea:be:37:fd:f7:
04:97:fd:b0:36:b0:0c:38:ed:7d:a9:7f:a0:57:e7:
b4:96:c2:a9:2b:e5:59:66:89:7e:41:01:9d:da:43:
fb:6e:b8:7c:21:54:48:73:32:80:87:91:3a:df:60:
52:ee:d7:9b:f7:16:6e:98:01:60:71:08:4e:4e:15:
ed:bd:d0:ea:e1:14:7d:94:b8:5d:e9:b4:85:86:33:
d5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2D:DF:CC:70:F9:6F:A8:F0:8B:82:DD:18:3A:29:FC:22:17:E9:91
X509v3 Authority Key Identifier:
keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7a:dc:2f:f8:54:d1:e2:ee:14:a8:a3:f1:e7:c3:ea:74:f2:
98:59:43:87:4e:6a:f2:48:df:29:d8:e7:2c:cc:b6:bc:06:91:
b6:d7:0a:5b:15:4a:12:ce:c6:a7:15:b7:5d:11:1f:7c:ac:e4:
21:b7:9b:e9:2e:df:c6:a5:5e:85:87:8b:50:96:23:cf:32:65:
65:52:e2:ab:73:a2:3e:5e:be:6a:7e:9d:87:ea:1e:b4:6b:b1:
e7:e9:cc:cb:10:6c:76:35:5d:40:00:74:50:94:18:7a:53:f0:
18:44:9e:4a:16:1e:7e:0d:8b:e6:7d:de:5a:e1:21:b0:d2:3b:
6f:fa:b4:16:8e:ec:5a:88:03:73:d7:0f:f7:25:66:8d:e2:87:
30:28:2f:d2:f3:58:b6:12:cc:5f:07:26:7a:8d:72:62:60:c2:
19:42:a1:f4:ea:61:1b:0d:f9:2d:21:28:89:b0:86:75:c3:18:
6f:cb:81:85:de:6a:3b:ad:1d:f6:d6:ef:95:f9:3c:fb:2f:cb:
a3:56:f8:f5:92:ab:7e:f8:0f:00:32:3a:7c:0f:92:2b:42:a6:
97:fa:66:ab:7d:6b:f5:d0:2e:c4:09:da:26:b6:ce:60:cf:62:
9f:6c:f1:a3:74:af:93:df:d1:67:7f:44:74:1c:74:d6:41:5d:
3e:96:97:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:19 2024 by rpki-client on console-fra.rpki-client.org