Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: NTVB61cpiH4ioPrMLFhrglznuCQ9hUUp93vjTd5+snI=
Subject key identifier: A1:A4:0E:D4:23:1A:8D:EA:09:5D:39:3B:28:5B:58:CC:54:F9:BA:0E
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 019406462D5A5B54329C01BD2D7ED64AC632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 094D
Signing time: Fri 27 Dec 2024 04:00:49 +0000
Manifest this update: Fri 27 Dec 2024 04:00:49 +0000
Manifest next update: Sat 28 Dec 2024 04:00:49 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: x5Iy8I6eNnxYmeRpxnnjWm92o3AHfSMvcycGhzWJwIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:46:2d:5a:5b:54:32:9c:01:bd:2d:7e:d6:4a:c6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Dec 27 04:00:49 2024 GMT
Not After : Dec 28 04:00:49 2024 GMT
Subject: CN=a1a40ed4231a8dea095d393b285b58cc54f9ba0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:c2:3c:67:6a:68:74:9c:c1:5f:d8:7c:4c:
11:c8:bf:04:3b:d4:05:42:70:77:87:f7:74:5c:77:
2d:44:e0:fd:76:07:1c:7d:3c:6b:57:65:c1:09:56:
95:a2:8a:5f:73:9d:9e:96:9e:88:8b:75:16:98:0a:
cf:f7:f7:b1:ce:11:cc:f4:6b:6d:90:f3:54:a7:50:
74:76:e1:2e:72:71:0b:38:35:d9:74:b0:8e:e8:23:
e3:0c:29:26:cc:00:56:d5:fd:f3:c8:c9:b7:51:b8:
c3:08:a4:1f:79:32:7b:47:35:43:3b:63:93:75:ff:
11:57:17:9f:78:9d:f3:c1:36:0a:45:07:36:1e:12:
d0:f1:dd:85:43:23:f6:78:7d:53:4c:42:f7:5f:94:
90:83:de:0d:0f:1b:13:39:97:f0:f7:77:b6:32:61:
6e:b6:d3:6e:de:d3:ba:00:41:43:43:51:0f:ee:6a:
ab:57:af:89:5e:74:fc:e8:6a:d0:18:b8:4c:fe:e1:
00:b8:d8:8e:23:84:e5:ac:e3:1d:34:c0:4f:01:13:
3d:3b:d5:60:d9:e2:2a:7d:c3:17:e2:04:4a:6a:e1:
b6:96:d0:6d:35:3a:bb:a6:45:96:e7:ba:e0:5b:e7:
8a:f7:ab:38:c8:40:68:fe:00:10:50:e0:fb:88:58:
92:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:0E:D4:23:1A:8D:EA:09:5D:39:3B:28:5B:58:CC:54:F9:BA:0E
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:48:52:58:3d:14:45:5b:3e:8c:bf:7b:6b:86:8d:be:25:d7:
9a:c9:30:60:8a:b2:c3:2d:00:33:d0:be:48:e9:09:e3:51:ad:
28:23:8e:52:d9:bd:e2:a3:e9:0e:62:e3:1c:7b:0a:c9:96:8e:
0d:63:3b:a1:b0:87:5b:6b:12:73:47:03:4c:fd:d4:0f:50:63:
3d:1f:08:4b:7c:a1:3f:69:1a:b5:63:92:7a:19:5b:3c:b8:13:
e9:85:4e:e7:b5:5a:92:90:89:e0:d1:a3:f0:cc:41:6b:43:39:
2e:ec:6e:41:62:bc:9c:96:72:0b:c5:2e:a8:fd:7f:61:d3:0e:
00:19:4b:01:96:1d:48:1d:de:97:2c:01:13:3e:34:4c:45:2d:
78:2f:90:47:85:b4:e1:0f:25:25:62:ca:44:ff:e0:6b:c5:c2:
13:f3:6c:47:6c:ed:2f:d7:ec:8a:30:1b:04:58:c2:81:b8:5e:
1f:0d:e7:88:ab:55:07:bb:87:75:27:4f:de:f8:3f:e8:7a:0f:
2d:7f:68:bb:04:1a:8d:73:39:c5:04:8f:11:8f:85:d6:b9:15:
32:b9:5c:28:90:f4:b7:5b:43:d7:bd:23:2e:41:d2:c9:f3:82:
83:bc:34:b1:e2:8e:0e:87:b7:97:3c:31:bc:15:2b:0c:fb:88:
3a:20:c3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:47 2024 by rpki-client on console-fra.rpki-client.org