Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: Ppwa2rtEFg4t9SWfWKlVZYrATp6zig2D0ZuOPe4vLt4=
Subject key identifier: 7D:1C:FD:8D:12:F1:77:3F:CE:ED:26:4E:14:FF:9E:F9:4F:82:F3:16
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 019405D811CF904D10A4C068815042ABE7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 01C1
Signing time: Fri 27 Dec 2024 02:00:33 +0000
Manifest this update: Fri 27 Dec 2024 02:00:33 +0000
Manifest next update: Sat 28 Dec 2024 02:00:33 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: XJfkpoy3p90/Vz8R1v/APoX/CYogTHHe9hlUoBxKWqw=)
2: m3AFnkXgkAql8a1VpLiY4aAry7k.roa (hash: zhggfsKqmgFBLw6rD2jlUYI+uJsAsBSeIfkAbfHiiOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:d8:11:cf:90:4d:10:a4:c0:68:81:50:42:ab:e7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Dec 27 02:00:33 2024 GMT
Not After : Dec 28 02:00:33 2024 GMT
Subject: CN=7d1cfd8d12f1773fceed264e14ff9ef94f82f316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:cd:82:53:a6:28:c6:4b:f1:b5:31:03:56:
87:db:97:01:72:71:93:d2:c0:9e:dc:bf:bc:fb:9d:
76:2e:5a:21:77:6f:80:0d:b6:d1:4f:9e:15:3c:71:
04:73:51:f8:f4:11:3b:6b:af:7c:cd:e3:e4:83:b4:
30:d0:e8:26:ca:57:81:49:59:93:c8:7a:da:89:ab:
30:53:19:00:73:ea:85:e5:79:36:7b:3b:33:dd:31:
4b:c5:af:da:7f:b7:6a:d5:94:0f:9c:6b:ce:4f:21:
fb:48:fb:b8:e4:ab:25:b4:3a:94:e2:f7:b2:b0:04:
a1:a3:26:19:b3:18:3b:30:4a:f3:5c:93:05:23:95:
2b:4b:34:c9:75:a5:af:7c:a7:87:0c:0e:04:0d:d4:
98:15:4e:1a:67:c5:ac:58:46:4b:bb:02:40:32:9b:
ec:49:e7:70:c7:3f:5b:7c:17:88:ce:0a:b9:13:c7:
f9:e7:35:04:d1:e0:d9:83:3b:8e:d6:06:dd:cf:70:
98:ad:4e:71:f7:cd:48:c0:be:fc:8a:34:c3:26:9a:
21:49:14:60:34:ef:3a:62:fd:90:3e:af:f0:d4:e2:
ff:bf:fd:0e:65:97:1e:67:96:ec:6a:2a:a9:d6:9e:
82:d1:70:23:3b:63:71:00:5d:bd:bc:8c:d0:8b:f8:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:FD:8D:12:F1:77:3F:CE:ED:26:4E:14:FF:9E:F9:4F:82:F3:16
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e2:e2:1b:90:e5:e2:82:8e:3d:62:13:a7:d7:6b:33:13:7b:
fa:38:12:0d:1a:8c:e0:bb:01:6e:7f:c4:3e:4a:75:0a:7d:2e:
72:1e:26:88:c4:b6:59:bb:57:b2:b2:0e:c9:43:7d:0e:b9:cf:
4b:15:ec:3d:93:f3:aa:d0:d4:f2:21:e6:66:06:20:15:dd:69:
b6:ca:7e:9f:c5:19:ef:d5:b1:95:85:bf:19:0b:06:a7:fa:85:
6f:54:2f:31:e6:16:04:4a:5a:38:c1:57:b8:55:b1:41:37:f3:
63:dc:e3:80:de:24:a7:fa:15:a4:e0:e0:b4:e5:17:39:73:fb:
01:2c:1a:b8:24:a6:9b:bf:13:26:5e:ff:79:91:50:11:4e:3e:
3a:85:0a:04:18:a9:47:11:f5:43:af:bb:9e:70:44:e4:fa:09:
18:48:41:c1:11:5e:b6:9f:d2:17:66:97:ff:1e:f2:2d:1b:16:
d1:45:90:30:90:3c:9a:41:db:f4:06:42:84:ef:c1:a1:2a:fb:
79:ce:1c:ad:2d:76:ce:79:81:93:57:81:3a:b8:39:85:c0:ec:
a1:47:d0:11:5d:0a:6e:19:b0:de:73:44:40:96:bc:f5:39:d8:
4c:5e:0d:4f:35:aa:84:47:01:f5:af:70:c1:e4:8e:db:ad:e6:
3d:c0:39:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:02:19 2024 by rpki-client on console-ams.rpki-client.org