Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: Flzb5CN6EAPcUzuh7hm9F9LHsZxPaE6FIAD3PFECb+Q=
Subject key identifier: 03:CD:44:9F:B5:E9:F7:5D:0E:B5:10:D8:E5:A2:5C:4D:68:A1:B5:17
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 0194064741C3B0A0BBF6A5A02749BF175EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 13CA
Signing time: Fri 27 Dec 2024 04:02:00 +0000
Manifest this update: Fri 27 Dec 2024 04:02:00 +0000
Manifest next update: Sat 28 Dec 2024 04:02:00 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: 7zHvKoD9+UKod532WOU8mgeoV5GNvTRqB1rVHziieqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:47:41:c3:b0:a0:bb:f6:a5:a0:27:49:bf:17:5e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Dec 27 04:02:00 2024 GMT
Not After : Dec 28 04:02:00 2024 GMT
Subject: CN=03cd449fb5e9f75d0eb510d8e5a25c4d68a1b517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:74:63:01:3c:dc:15:7e:9d:ae:38:b5:b4:
53:d8:6d:5c:b3:b3:ce:c2:35:7a:f6:26:f3:a6:58:
f0:36:9e:a3:23:d2:ec:82:b9:29:0b:2f:68:cf:59:
33:22:fc:34:68:55:1d:4f:1d:43:9a:ec:dd:e1:ed:
75:4b:75:1a:e6:ef:e3:94:19:7e:03:0a:36:cb:da:
e2:d9:b3:05:8e:a6:f1:4e:b3:db:72:ae:12:3e:f9:
2d:f4:fb:78:4d:ff:32:88:db:b5:ce:03:67:f3:4b:
31:e7:ca:1b:b8:bf:80:c0:e7:3c:cb:1e:ad:24:91:
65:1c:75:1a:7d:ea:67:1a:5c:8e:f1:d8:9a:79:11:
8b:30:70:c3:60:39:0e:a5:0b:cc:f2:f7:14:32:49:
29:cb:11:a9:47:4f:49:c8:58:89:ca:b2:94:48:74:
ad:52:70:d9:65:19:e0:fd:fc:b8:c8:6c:fd:ac:b3:
ef:f3:05:65:9a:5b:dc:cc:b8:d3:8d:c8:7c:05:f1:
76:31:fc:1f:84:ad:50:17:a6:19:50:fa:fb:90:6c:
f3:fb:f9:27:bb:70:81:a4:d2:49:fa:c8:50:f3:ad:
be:b1:3a:e4:09:6f:57:b5:d7:60:f8:67:9d:57:d3:
23:cb:2e:27:b5:a8:9e:65:01:4c:51:ae:bb:73:01:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CD:44:9F:B5:E9:F7:5D:0E:B5:10:D8:E5:A2:5C:4D:68:A1:B5:17
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6b:f6:53:e0:47:58:79:21:d8:57:b4:d3:ce:ab:02:28:c9:
7f:88:fa:71:e8:70:62:8d:9b:a5:0c:65:46:85:7d:24:7b:f6:
bb:80:6d:6e:3f:40:85:37:cf:55:95:d3:69:17:ef:c4:3f:8d:
09:ed:47:fb:43:c2:0a:53:74:2d:96:41:3d:1c:a0:50:a3:39:
67:16:28:6f:4e:30:76:c1:eb:1d:49:bb:c9:64:96:33:69:3a:
5e:81:7a:aa:db:c7:d0:b7:28:b9:5a:22:22:e0:45:b0:82:93:
d5:b8:7d:00:de:46:8f:7f:e7:08:dc:ee:31:db:37:01:7b:cf:
b0:00:b4:ef:e2:bb:67:f7:37:0e:7e:3a:6d:6c:4f:67:40:6f:
b3:4f:5e:9b:96:34:cc:b4:a8:70:14:d8:8e:ce:cf:6e:62:96:
56:b6:7b:c6:36:66:59:9c:43:6b:a6:f1:f8:22:4d:a9:a5:be:
10:57:4f:4f:72:51:99:51:ad:55:89:c3:07:fd:99:71:02:60:
5d:ed:90:06:50:be:00:f5:54:c6:33:06:5c:34:17:7e:df:9d:
e0:8d:4f:06:d1:49:36:1e:f3:2a:f4:00:72:cf:64:61:5e:67:
f1:2d:6a:59:dd:32:1d:81:93:03:fc:1e:19:66:0f:70:53:f0:
0b:ed:53:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:10:44 2024 by rpki-client on console-fra.rpki-client.org