Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: 47i2Kk4kWftpHNlUMj99/7fv+ByduXrcb2pjJTuPlzM=
Subject key identifier: B7:DA:0D:39:2D:E9:FA:BE:A8:17:63:31:2F:A9:1A:A3:6B:B7:B4:EF
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 01940647ED8447D93E4709E9193620D48F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 13CB
Signing time: Fri 27 Dec 2024 04:02:44 +0000
Manifest this update: Fri 27 Dec 2024 04:02:44 +0000
Manifest next update: Sat 28 Dec 2024 04:02:44 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: qtTF62O5eN/qXvOd4pnndQcEts0kV/OlMkeFgU8ksbM=)
2: DW-sNsxiSt8lM4KAsW6zUSPb3NE.roa (hash: kCnpoNoow0kmKozG9npxkX0PtVhVcYT9/iUm8KF3UN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:47:ed:84:47:d9:3e:47:09:e9:19:36:20:d4:8f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Dec 27 04:02:44 2024 GMT
Not After : Dec 28 04:02:44 2024 GMT
Subject: CN=b7da0d392de9fabea81763312fa91aa36bb7b4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:86:23:bc:21:32:16:5e:05:22:23:a1:45:
88:d3:14:d7:ef:b6:8e:80:3c:0b:29:32:7b:4d:72:
79:94:ec:13:9e:8b:2a:fb:ca:98:44:40:dc:29:09:
42:52:1c:89:d0:41:d8:2b:1e:ff:49:e0:b4:33:76:
2e:fe:84:6c:9f:d7:07:7a:18:f1:35:d1:3e:6a:e4:
9b:27:94:b8:c4:1f:25:63:77:a8:1f:d6:26:c6:85:
3d:f6:44:59:17:c1:d5:7b:11:30:84:8d:5a:76:d5:
fc:31:a2:7b:5d:a4:6b:44:0c:41:ab:b1:9f:51:96:
0c:db:cf:a6:0c:5b:42:1a:19:3c:94:d4:a2:96:81:
f3:98:48:73:f3:f7:c7:4c:b9:5f:1e:2b:57:64:57:
98:cd:de:50:47:0a:a2:c0:03:b2:c9:f5:5c:8d:47:
2d:64:34:d1:fe:49:72:4b:4f:31:b9:0c:db:1c:5a:
ef:29:68:0a:dc:49:78:44:f1:c7:b7:21:64:57:76:
18:4a:9a:9c:c3:a8:d4:41:00:3a:19:44:6f:a5:e5:
35:ca:e2:27:7c:2f:e5:6d:ec:88:05:1a:67:2a:14:
c7:bd:c9:8a:42:79:6c:d8:86:82:e1:ca:0e:06:b1:
42:d7:f8:a5:e1:77:9d:02:ce:a9:f7:dc:8f:a2:c7:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DA:0D:39:2D:E9:FA:BE:A8:17:63:31:2F:A9:1A:A3:6B:B7:B4:EF
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:80:c5:a9:28:26:2f:15:75:4d:59:58:a7:2f:54:36:b0:06:
7e:a8:3b:a8:f1:ad:ba:ca:35:db:45:43:57:89:fd:22:87:b3:
11:f6:c0:9f:c3:a1:09:0b:10:e7:57:d0:49:57:0e:5d:90:a3:
22:3d:7b:f9:72:10:57:b8:81:e6:cb:20:79:3a:ae:80:4d:d9:
52:fd:99:d4:b7:dc:ed:d1:ad:79:cc:1f:96:f2:b6:66:32:79:
7c:5b:0c:09:5b:af:51:ad:49:91:96:ba:d8:ad:de:3f:b0:c8:
c1:9d:cd:1e:5b:84:37:ea:4d:e0:e7:d9:7f:60:4c:7a:af:91:
c5:27:87:c2:77:2c:e3:ba:b4:52:3a:10:97:b5:a1:ba:fd:23:
75:d8:12:fa:84:da:e8:4c:39:a5:40:4b:b5:54:ff:49:e4:07:
64:60:0b:a1:7f:59:12:bc:90:4f:34:83:4e:1c:0e:f0:57:f5:
3f:0c:55:fc:6e:f4:a2:4f:d5:39:2a:97:61:1b:12:fb:93:ac:
bb:d8:7d:1b:4a:ec:d0:dd:5f:d5:79:47:6a:ae:ec:6c:46:aa:
b0:b1:75:74:b2:ac:cb:ee:9a:e1:cd:b6:22:7c:a0:01:9c:fe:
a0:a2:73:fb:4b:ba:af:4e:57:5e:f2:b8:31:fe:a0:42:fc:5b:
c4:da:1c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:02:01 2024 by rpki-client on console-ams.rpki-client.org