Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: UHNUhC5sSlWcO0I6e/2ArpIzjmxI/epw6Yor+jt6IIM=
Subject key identifier: A9:FF:3D:B2:FF:F0:44:C5:04:58:6B:29:41:C8:8D:86:DB:F2:EC:CF
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 019406EAA2CFD4EA5031790D18EE0D401DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 52
Signing time: Fri 27 Dec 2024 07:00:27 +0000
Manifest this update: Fri 27 Dec 2024 07:00:27 +0000
Manifest next update: Sat 28 Dec 2024 07:00:27 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: tzXG/tzQpsPG+UBWEBW6I95Jss7BoePeHzNNTNqkmWA=)
2: WgfbdRdtGBLrTfJAZJmbekwBFZo.roa (hash: KQKzEtxtvoylbQ2uL1wbDc4jUYLYkFckHedEVOE5mWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:ea:a2:cf:d4:ea:50:31:79:0d:18:ee:0d:40:1d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Dec 27 07:00:27 2024 GMT
Not After : Dec 28 07:00:27 2024 GMT
Subject: CN=a9ff3db2fff044c504586b2941c88d86dbf2eccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:c4:4a:cc:2d:fe:4d:e8:c3:9a:60:76:d3:
8b:49:f6:25:ce:cf:8a:3f:1c:f3:3c:47:4c:13:d2:
00:c3:ea:20:c1:60:fc:69:52:4f:97:52:ec:9a:9a:
e2:37:0a:41:30:d8:94:70:ba:85:4d:c8:41:8c:ff:
0e:a6:08:d0:9d:27:d6:68:69:53:9d:79:fe:f2:63:
14:af:79:22:e1:01:bc:ce:15:69:4d:90:54:88:79:
c5:bf:53:d6:97:6b:cf:6b:aa:f0:8a:44:d3:58:bf:
c0:6c:a0:45:55:94:fa:59:06:4e:b5:22:f2:4a:60:
28:44:10:4b:ff:47:ec:37:87:40:a5:0b:1c:8f:5c:
6f:28:53:0d:02:37:b4:30:22:53:d0:7a:96:88:6f:
a3:65:bf:a4:e6:92:f8:88:7f:e1:43:76:b9:c9:4c:
28:85:d1:8a:d1:ce:fa:4e:aa:b6:28:98:cb:e8:88:
3b:cf:bb:e2:98:93:8c:fb:dd:11:b2:f8:c2:69:4a:
b7:15:ef:11:8b:87:78:6e:95:f2:27:11:69:6e:9a:
06:7e:46:16:85:55:e6:b5:83:27:49:f1:f8:8e:46:
a7:b5:9f:07:3c:2c:4d:d5:90:81:6e:45:f4:c6:fd:
1a:0e:98:d7:6e:6f:02:e9:46:94:4e:ea:15:ba:fb:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FF:3D:B2:FF:F0:44:C5:04:58:6B:29:41:C8:8D:86:DB:F2:EC:CF
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:29:0d:da:83:83:4a:ea:4d:98:d2:a9:88:e2:f6:87:ef:47:
d7:ce:fd:e0:eb:5d:73:a4:ef:25:d7:6b:b8:7c:30:33:72:f5:
dd:c8:07:0a:e1:e5:f8:cb:e9:df:9d:d1:4c:19:b7:34:57:9b:
62:7b:75:db:95:2d:3c:e5:4b:39:8f:f9:ff:d7:4a:40:a5:84:
73:d0:23:ce:51:c7:95:1c:ef:b3:7a:45:25:e7:9a:ac:f3:fc:
51:2c:97:73:2d:7e:09:92:fc:ab:0e:b3:e6:66:44:da:0c:bb:
b4:45:44:4f:28:55:89:0b:1a:cc:1f:61:74:16:1e:ea:03:e8:
78:ac:12:2f:45:32:24:98:91:55:6a:d5:10:05:dc:3b:69:fc:
30:b8:e6:b0:b8:1b:61:86:13:86:90:4f:fc:c6:de:6d:0c:80:
70:05:9e:bb:9a:f2:1d:29:ed:ba:cf:2b:b3:1f:f5:ab:ec:3b:
06:58:e5:a3:6e:5b:eb:6f:98:b3:ea:b3:d2:8a:94:ca:42:5c:
d2:60:19:71:f6:25:a0:3d:44:1d:e8:8b:eb:84:d3:24:5b:94:
50:b5:50:6c:aa:68:e8:ec:0c:22:56:90:45:58:5f:9a:53:01:
34:d0:17:1b:86:e1:59:32:12:1e:c5:a8:3b:9f:ce:07:f1:6e:
f7:40:bb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:13:30 2024 by rpki-client on console-fra.rpki-client.org