Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json)
Hash identifier: 6ZMt23KNTtG3aj4138RhSoPpXKu+7UIQZMaEIAHATQ4=
Subject key identifier: F4:AE:21:B0:72:8F:06:5E:7F:DE:A9:8B:28:A6:44:1E:71:67:B7:69
Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Certificate serial: 0194064619B29D95AB4CCBFC18C641E1357D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
Manifest number: 13CA
Signing time: Fri 27 Dec 2024 04:00:44 +0000
Manifest this update: Fri 27 Dec 2024 04:00:44 +0000
Manifest next update: Sat 28 Dec 2024 04:00:44 +0000
Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: 15+3j+XkPeL1peZFfwISWW8N6pAkqr0Y1sgMlAJShtU=)
2: 9VfyQlDrgjGEsT-Z2CH3JH9pjtI.roa (hash: DvOo9eNlNDON387S712OHAueL9jmcNYkIxRoD4AWUdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:46:19:b2:9d:95:ab:4c:cb:fc:18:c6:41:e1:35:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Validity
Not Before: Dec 27 04:00:44 2024 GMT
Not After : Dec 28 04:00:44 2024 GMT
Subject: CN=f4ae21b0728f065e7fdea98b28a6441e7167b769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:3f:96:35:68:d9:7b:da:df:61:5b:d8:da:
e4:4a:51:b7:a2:da:84:cc:42:ae:e3:ed:a0:39:49:
c1:a3:e2:34:c8:98:09:ac:fa:eb:9c:34:00:93:3a:
c6:e1:b7:00:86:65:4a:32:f8:bc:61:2c:0f:fc:0c:
16:1c:27:52:7e:f3:0a:81:33:25:7c:f5:d9:6a:1a:
86:45:b3:c8:cb:df:9d:2e:ef:ce:86:5e:90:9b:16:
83:69:83:0e:7d:6b:9b:21:46:8e:34:68:5d:97:80:
36:9f:50:57:19:2e:61:29:e3:c7:c5:ac:d2:8b:ce:
43:ff:76:90:fe:57:e0:e6:a3:a1:ac:55:24:01:8f:
6a:cf:0e:fc:30:9c:90:72:e1:e5:5c:a7:25:75:2d:
11:0f:dd:ef:1b:fa:35:76:fe:1d:13:3b:ad:80:94:
b8:89:40:59:54:3f:2e:4e:84:57:5e:be:81:c4:68:
fe:f3:72:b3:2d:1d:a2:a0:56:0b:c3:b9:4e:27:dd:
fa:2b:bb:72:57:d7:ee:3a:46:2a:e1:a9:67:94:e8:
14:fc:bf:36:34:ea:ff:d7:cf:83:9f:ac:cf:57:72:
26:f9:43:b3:fc:ee:80:03:ee:5e:64:c5:fe:5b:9b:
56:fe:c5:ba:5e:ef:3a:86:4d:62:ec:d1:5d:f8:67:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AE:21:B0:72:8F:06:5E:7F:DE:A9:8B:28:A6:44:1E:71:67:B7:69
X509v3 Authority Key Identifier:
keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6b:6b:34:f1:15:bb:49:46:07:5b:96:c5:ea:f1:f1:31:82:
a1:c1:80:e6:1c:18:a0:5b:ab:d4:f1:4b:2a:68:c9:4a:56:b1:
8f:1b:54:b8:61:97:67:3b:e8:40:82:7e:78:60:32:42:40:8e:
6e:9f:9b:88:5b:55:35:3b:a7:65:5e:ff:50:10:a7:d5:a2:97:
85:23:84:f4:6d:da:06:9e:e7:dc:aa:0f:ba:07:e5:72:8c:a3:
20:12:f7:88:1a:47:27:af:73:08:71:fb:22:6f:2c:3d:24:c4:
76:fa:73:f8:e4:fc:81:4f:b4:b2:cc:82:e5:68:e3:3b:00:1e:
3e:70:09:9e:66:c2:84:f3:17:38:45:9c:35:19:0e:dc:d5:62:
94:01:a6:10:ff:16:55:a8:fe:a0:3c:77:b5:26:51:d5:b0:92:
92:32:9d:f9:38:33:6a:7a:21:1c:fe:95:3e:89:69:fa:69:12:
11:8f:26:55:8f:eb:21:f2:e5:3f:6d:ea:c8:bf:e6:e2:1c:48:
c5:47:f3:73:90:6a:a4:e6:19:ce:bc:c6:b2:6f:b2:59:4c:62:
44:b3:d3:e3:3b:45:46:d1:24:7c:60:48:40:33:81:91:b0:db:
14:25:94:cd:44:c7:66:a5:1d:43:c9:cb:19:63:1f:b1:dc:0e:
df:5f:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:03:19 2024 by rpki-client on console-ams.rpki-client.org