Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: jH0WdXs2pCHMDfpyz91IO55f1UF63zSee7urRYta4lA=
Subject key identifier: 3D:61:E7:ED:7A:4A:90:5A:0D:64:83:11:80:A2:E3:D8:67:80:E9:9F
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 019406463E752730056F8274A19C34FBBC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 0F0C
Signing time: Fri 27 Dec 2024 04:00:54 +0000
Manifest this update: Fri 27 Dec 2024 04:00:54 +0000
Manifest next update: Sat 28 Dec 2024 04:00:54 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: yO6leSCeYaEhyEdY+yvZ5/VGVnkf3zCMjELf66CZccU=)
2: W8C4AXGxEoCT0v4WkBwaQ0PCTMc.roa (hash: BerVcfPZ2HZHF6RnVrk+EkQyhTlfHfBMrzTP71NoXd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:46:3e:75:27:30:05:6f:82:74:a1:9c:34:fb:bc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Dec 27 04:00:54 2024 GMT
Not After : Dec 28 04:00:54 2024 GMT
Subject: CN=3d61e7ed7a4a905a0d64831180a2e3d86780e99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:cf:b4:56:cd:96:ed:62:ae:07:db:fe:a5:
32:88:6e:df:4d:dd:0d:43:c7:5f:16:01:e1:23:96:
07:71:3e:8e:c1:cd:d6:29:b2:b9:cc:19:55:49:1f:
59:c9:28:ff:55:be:98:69:fa:2c:97:99:19:45:02:
e7:fa:03:1c:c8:16:4f:c0:8e:3b:f8:bf:e1:ad:46:
6a:22:a8:be:07:c8:7c:16:e3:52:d4:f0:0e:c4:10:
d6:de:ea:77:84:aa:37:40:e5:77:b3:f0:1c:39:b5:
f5:cc:b5:66:4e:31:6b:34:6a:c3:aa:d0:b8:36:c5:
70:e7:4f:a3:7d:24:23:ae:3a:47:9c:e2:d2:9b:c4:
32:ff:6a:84:b7:64:64:77:ed:c0:5d:3b:42:a8:b1:
f7:aa:97:f9:e8:a3:70:fc:c4:b7:4f:82:d9:f0:c3:
0e:76:2e:77:08:87:0d:41:a8:11:e9:7e:dc:f5:81:
cf:9f:3c:17:f9:90:67:10:d8:1d:79:05:c5:e6:71:
3d:37:a1:c0:f3:09:5a:25:8c:88:cc:0b:e8:6c:cb:
fa:72:32:a7:3d:b1:83:00:55:49:f3:1e:b8:d6:b9:
c5:2b:26:8b:e7:82:c3:60:87:dc:6f:b3:80:76:ef:
74:94:18:fd:8b:02:b0:4e:83:72:ff:2c:19:28:2d:
c2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:E7:ED:7A:4A:90:5A:0D:64:83:11:80:A2:E3:D8:67:80:E9:9F
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e9:b3:96:fe:0b:7f:b8:de:35:5e:25:02:9d:cb:3d:88:a5:
b0:7e:74:3b:cf:7e:39:23:bd:13:8c:41:35:1f:f5:d4:ea:cf:
ba:7e:92:0a:13:82:ee:50:80:18:8b:70:22:3f:f7:fb:91:a5:
65:73:ef:79:5f:40:87:24:b4:07:56:14:bf:cc:2d:87:03:0a:
30:26:f1:43:fe:5b:c6:5e:b2:c7:4e:24:34:5e:fc:78:52:1b:
bc:92:60:79:cc:cd:2b:13:c3:34:0c:ca:b3:7b:d1:88:5e:97:
52:a0:f1:3d:67:50:6f:b0:a9:15:2d:57:80:74:d3:73:e9:5f:
34:5b:d6:1a:c4:df:3a:d1:b1:91:76:1d:81:d8:de:b0:79:bb:
bf:8b:e2:d2:80:61:ad:eb:36:86:8b:94:ce:bb:7f:6d:ef:de:
f7:16:36:f6:26:71:f8:60:ce:95:db:4b:3e:c4:ed:3b:ea:a0:
e8:3b:eb:0a:54:15:b7:af:f8:a0:9c:cc:1a:c1:96:8c:3c:30:
e5:c2:57:66:61:78:a2:b5:ed:8a:b7:6c:45:34:f2:3d:5a:fc:
92:09:52:28:7d:94:5f:c7:e5:15:f3:74:bd:84:b9:77:0d:1d:
f7:39:32:17:d1:b3:73:5a:55:e2:a1:ed:a9:cd:44:7a:2a:93:
22:4b:03:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:12:23 2024 by rpki-client on console-fra.rpki-client.org