Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json)
Hash identifier: UcCa3xyDtLz/1grRCPNrhEl0xR46h6bb31Uf5QDocU0=
Subject key identifier: 75:4A:91:E5:56:9E:EA:9E:20:A7:84:C7:B8:99:4D:43:1B:F8:3E:1D
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 01940646DD869C789A7E3B3149BB4CDFD3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
Manifest number: 0ED2
Signing time: Fri 27 Dec 2024 04:01:35 +0000
Manifest this update: Fri 27 Dec 2024 04:01:35 +0000
Manifest next update: Sat 28 Dec 2024 04:01:35 +0000
Files and hashes: 1: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: OlgVOXtk2ZMEslS7gdankiRF1ooaE2K8DN0L7a6TxtE=)
2: yPt4j3qtTnzdZ6BX7sukcKzhVEI.roa (hash: ugs4m91RC2kNqS3HaQgvAXipuwQNrGWMDZR+FOOrkQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:46:dd:86:9c:78:9a:7e:3b:31:49:bb:4c:df:d3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: Dec 27 04:01:35 2024 GMT
Not After : Dec 28 04:01:35 2024 GMT
Subject: CN=754a91e5569eea9e20a784c7b8994d431bf83e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:cc:56:bf:0c:e1:ab:e8:91:f5:9c:b7:7e:
91:42:62:64:40:98:37:34:d3:55:31:47:54:41:3d:
e6:8c:96:ab:bb:54:19:3b:da:4a:c5:c5:0e:fe:f2:
19:65:9f:a0:70:0c:cf:71:20:cb:2a:27:25:cd:cc:
7c:4d:47:31:ff:e4:4a:02:b7:a3:45:7c:96:58:45:
5e:0c:63:88:d8:e1:1d:89:37:df:a5:71:3b:4a:54:
52:b0:b2:0a:1d:c7:3c:d9:84:00:b2:22:f3:40:fa:
4f:3f:56:70:31:50:52:4b:35:8a:75:6b:89:ca:bb:
07:4a:4f:cb:95:ae:4e:78:1b:d2:76:81:23:48:de:
e3:aa:1c:d0:3e:3c:a0:bf:7a:69:12:b8:ca:f6:0c:
17:40:e8:a2:79:63:63:7c:7f:11:a6:87:5d:a9:f0:
06:27:c5:a1:0b:f2:68:bd:dd:c4:9d:21:a0:7f:50:
35:2d:42:d4:2d:17:ee:f3:40:13:75:dc:a7:df:f9:
21:e5:d4:8f:dc:b4:d1:b8:e8:be:b0:48:61:23:c7:
b8:69:08:c5:29:84:a7:06:a0:f9:14:4c:b5:5d:f1:
a9:0c:fc:8d:13:62:82:10:36:cd:b9:25:01:4a:f1:
a0:2d:fa:73:b0:48:39:67:04:d3:03:f5:47:ef:0c:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4A:91:E5:56:9E:EA:9E:20:A7:84:C7:B8:99:4D:43:1B:F8:3E:1D
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ce:3d:90:c6:f2:60:83:25:cd:c4:1e:e7:23:6b:b1:b9:60:
26:0c:7a:17:d3:fa:fc:4e:54:51:77:18:39:61:78:15:cf:e2:
e2:b4:ed:ee:14:ee:db:83:3e:1b:d3:94:30:1b:00:95:e8:92:
a7:e3:4b:ee:3a:32:4e:dc:71:ca:57:f9:0b:bf:60:b8:7b:48:
e0:71:d3:d6:7e:21:10:43:1b:18:da:6e:a9:7b:66:3b:87:a0:
95:2d:38:c9:8e:60:c0:a1:70:a4:ec:00:d3:2d:f2:f1:4e:4a:
4e:8a:ba:00:b1:b4:1f:7b:06:77:fd:54:e9:fa:f4:9c:ff:0f:
e9:af:77:cf:55:02:10:71:59:27:b5:44:ed:58:c7:07:93:d6:
1c:bf:b9:69:e1:ff:c5:0f:59:b5:15:41:0c:c8:73:37:0c:0a:
7c:b6:c8:34:6b:f7:c5:93:27:65:4e:e9:5a:23:5f:e0:51:93:
b8:dc:14:a7:43:43:d9:c9:0c:d6:1f:96:7f:84:28:c3:1c:5d:
a4:fe:25:61:fd:85:3c:aa:08:31:9a:78:44:a3:93:24:1b:a7:
2f:b2:34:1a:e5:c7:89:9f:1b:54:44:9a:68:14:d8:56:69:64:
9c:28:4e:40:a4:99:8d:8f:9b:70:e7:8e:03:3d:4a:63:2b:21:
25:d1:18:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:12:14 2024 by rpki-client on console-fra.rpki-client.org