Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier: fBzvcIJaHxnKF7o/ocfhDnuSeIXHVoTx0LCqvrTA0cM=
Subject key identifier: 0A:6C:10:D4:A3:B7:1F:07:41:D4:E0:A7:7E:60:79:D9:21:55:FB:6B
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 019405A1266B34D486AB8EC16DDE148FBE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number: 129D
Signing time: Fri 27 Dec 2024 01:00:34 +0000
Manifest this update: Fri 27 Dec 2024 01:00:34 +0000
Manifest next update: Sat 28 Dec 2024 01:00:34 +0000
Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: goiPpZVBncDkeCvXGSj+TMtJALavm+QXYsFrlQAsGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:a1:26:6b:34:d4:86:ab:8e:c1:6d:de:14:8f:be:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: Dec 27 01:00:34 2024 GMT
Not After : Dec 28 01:00:34 2024 GMT
Subject: CN=0a6c10d4a3b71f0741d4e0a77e6079d92155fb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:10:38:49:38:b1:a2:9b:46:19:18:cd:56:
a5:1d:33:b8:4a:0a:f7:ca:a7:a2:ba:d0:43:02:d1:
41:a3:b0:a4:f9:6d:cb:c5:c2:1b:a8:a1:75:d8:5b:
16:bd:b4:e4:80:9e:ce:19:7e:b9:2e:b5:08:21:c2:
5e:86:a5:35:1f:ff:7a:74:6b:5c:6f:4d:06:2e:1f:
a3:31:9d:58:1e:2e:69:ba:1d:9c:26:d1:10:9c:8d:
7c:a5:b4:3e:af:a7:c3:4c:12:3b:ae:c0:2c:ca:35:
0e:6e:7e:ec:83:b9:ee:c7:3e:8c:bb:9e:8f:49:c1:
01:b2:15:5f:e9:e1:04:46:53:c9:a5:b5:1b:ac:37:
0f:7d:77:f1:0c:22:61:84:ca:99:e3:42:38:02:c8:
35:e7:ea:6b:3c:13:9e:64:4c:c2:64:c3:91:a6:55:
c9:70:b0:67:b9:80:14:59:2a:98:f8:6e:43:be:b5:
e6:a1:45:05:68:fd:25:53:40:de:6c:2c:4e:a1:5c:
ca:05:4f:66:fb:94:08:28:e1:02:d0:e3:c4:b2:26:
ec:22:f9:c0:9b:58:28:b7:71:1e:66:74:c1:ac:90:
37:1e:02:c1:a5:24:71:f6:42:74:65:98:53:5c:70:
72:09:b1:2f:51:3c:74:7d:31:55:63:81:28:42:f7:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6C:10:D4:A3:B7:1F:07:41:D4:E0:A7:7E:60:79:D9:21:55:FB:6B
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5b:b8:9f:89:de:2d:3a:93:cb:48:56:11:db:09:38:b1:9f:
bf:7e:c8:1d:68:e2:a2:e9:e3:f3:9d:92:a4:81:1e:56:83:fd:
d3:b3:94:06:4e:a6:4a:18:fb:54:13:d7:c3:a5:66:b3:27:d6:
5e:ad:b2:e6:44:7c:a1:b7:26:2e:15:17:72:67:6a:96:8b:12:
bc:89:8d:96:e5:64:71:bd:fa:91:1d:9b:07:bc:7f:a6:6f:cd:
05:9c:1f:c6:1f:23:9b:c2:f9:d0:61:e2:c9:06:b1:f7:3d:c8:
da:86:1d:ea:28:b5:01:9b:23:72:ea:92:c4:97:d3:b6:c2:6c:
bb:ea:2e:15:33:65:e6:38:fa:d2:3d:79:a8:8d:9d:df:ab:02:
c2:34:e8:c0:6a:bc:b1:cd:51:83:37:6f:66:6d:4e:73:fc:84:
51:eb:e4:27:7c:3c:9b:f5:9f:6b:77:51:b0:d5:20:be:27:f2:
de:54:3d:52:e2:ad:18:be:56:0f:b2:fa:d8:b6:d7:a6:93:a4:
f8:f3:ca:6f:3e:87:dd:a9:13:12:6f:2a:cf:c8:3e:3e:b2:d0:
29:f5:31:be:2c:a5:51:38:32:4c:6f:73:f9:4e:bb:51:b0:56:
d8:95:b1:b1:26:af:f9:48:7c:38:a5:bd:93:ca:b6:ce:d4:ea:
82:6d:5e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:13:34 2024 by rpki-client on console-fra.rpki-client.org