Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: no74E1MbGip3eyeX4nk5+CoiXg+Il8yJdV8qm3OC+ps=
Subject key identifier: 4D:78:FD:09:E3:11:01:49:1B:3D:57:8D:65:48:BB:D8:E5:E8:CA:83
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 0194067CDCA8C066FF71E0BC67AA40103CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 0239
Signing time: Fri 27 Dec 2024 05:00:33 +0000
Manifest this update: Fri 27 Dec 2024 05:00:33 +0000
Manifest next update: Sat 28 Dec 2024 05:00:33 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: BgO941uce+orSP9B14WonJCcdnDsYEeK3Q3cAfLBD6c=)
2: AsBehFBPScLzEdH1taUpUuHl87k.roa (hash: ANBF3jYOPtoY/nFEMpNazMt93YHyO4Ds3MiiXOgHpcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:7c:dc:a8:c0:66:ff:71:e0:bc:67:aa:40:10:3c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Dec 27 05:00:33 2024 GMT
Not After : Dec 28 05:00:33 2024 GMT
Subject: CN=4d78fd09e31101491b3d578d6548bbd8e5e8ca83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:2d:a9:18:51:22:82:c9:ec:ab:2d:af:74:
20:d7:94:86:d7:82:e8:80:aa:7b:ea:17:1e:28:7e:
74:a3:ef:fa:c6:b8:46:f6:dd:5a:68:b6:a5:da:f7:
24:f9:01:85:66:3f:23:1f:e7:7a:1a:a4:4a:e2:84:
01:6b:b4:f4:df:cf:cb:23:99:f6:e1:3b:5f:49:0b:
83:ed:31:d2:ee:a9:78:31:08:8d:20:5a:04:a3:88:
a2:c1:20:e0:f5:75:4c:c0:ee:81:d3:c3:ee:7c:f7:
ca:50:2b:b3:91:c9:9a:c4:34:df:2d:ec:c3:56:18:
3b:63:03:5c:66:2b:2b:fe:ca:e3:34:5b:00:16:30:
38:f5:3f:8c:9a:a6:65:3d:6c:99:08:32:de:6d:49:
3b:6c:53:d5:46:f1:03:17:13:50:f0:49:3e:7a:73:
a0:30:09:b8:f4:8a:32:b0:ec:0f:d9:3d:9e:a9:82:
e6:9b:57:d9:89:ba:a4:1a:ab:44:61:fd:23:77:75:
a0:09:55:fa:42:f5:b2:90:2f:84:b5:e5:97:5b:6f:
44:85:0e:1c:ab:a9:1a:d3:8e:71:68:d0:e5:c1:5a:
e7:c0:02:c6:09:d4:93:e4:86:61:f4:ed:a2:5a:0b:
ff:49:78:78:53:31:e7:db:5d:01:0e:7c:74:1c:be:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:78:FD:09:E3:11:01:49:1B:3D:57:8D:65:48:BB:D8:E5:E8:CA:83
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4e:54:7b:fd:fc:2d:57:a5:15:4b:64:b7:71:d7:91:d4:eb:
0d:76:8d:a2:69:51:c4:61:14:e9:15:81:1c:41:bd:a7:74:ce:
1f:70:51:8b:73:ce:5f:3c:29:45:34:5a:e6:f9:3e:71:6b:93:
0b:e1:89:88:b8:e8:53:74:ef:c8:bf:86:21:81:e0:b8:7f:77:
d9:33:3f:8f:e6:17:90:b6:78:8e:3a:3a:f6:5b:58:8e:06:bd:
0e:ce:19:79:ee:e6:ca:dd:07:34:67:c2:bb:2b:76:93:91:7a:
19:36:ab:54:8e:f3:43:7d:14:80:fa:ea:1c:e6:a8:f1:a1:42:
21:95:eb:bc:41:62:5f:e0:c2:2a:5c:34:49:7b:ba:4f:53:6e:
3c:32:f6:ba:04:c9:dd:df:68:a1:82:c4:53:aa:1a:de:81:13:
36:d9:99:69:aa:fd:60:96:e9:f2:89:a9:b4:da:48:a1:83:36:
d0:39:0a:da:78:ad:d1:a4:d9:5a:21:e8:f9:47:b3:20:9e:9b:
7f:30:0d:72:8a:e1:f2:21:ca:d3:aa:cd:ef:6d:b9:cb:ef:b4:
39:e2:ba:db:64:f4:be:c4:ef:f6:bf:54:d9:91:8d:f9:1d:fe:
50:3b:06:b6:db:07:49:97:6b:5c:cf:97:21:58:4d:d3:f2:7e:
0e:0b:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:04:40 2024 by rpki-client on console-ams.rpki-client.org