Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
File: 8iyKma2nf70-JAFPXiTxr2lQXCM.mft (raw, json)
Hash identifier: QJt24nvPq8diwuwHqIdVU1GP2PgGFiSdWZSO0zFCEiY=
Subject key identifier: 80:98:A3:7C:B8:D1:30:2B:F4:AC:4A:64:2B:F2:14:8C:75:29:F1:DA
Authority key identifier: F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
Certificate issuer: /CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Certificate serial: 01940647C0897F5D6C34896239AEA79A3E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
Manifest number: 13CC
Signing time: Fri 27 Dec 2024 04:02:33 +0000
Manifest this update: Fri 27 Dec 2024 04:02:33 +0000
Manifest next update: Sat 28 Dec 2024 04:02:33 +0000
Files and hashes: 1: 8iyKma2nf70-JAFPXiTxr2lQXCM.crl (hash: ANVGdcq6D0OjnATX62F1Vm0R+IESeND/R/sY4dbhiUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:47:c0:89:7f:5d:6c:34:89:62:39:ae:a7:9a:3e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Validity
Not Before: Dec 27 04:02:33 2024 GMT
Not After : Dec 28 04:02:33 2024 GMT
Subject: CN=8098a37cb8d1302bf4ac4a642bf2148c7529f1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c1:c9:38:c6:31:8d:45:cd:9d:83:73:63:9c:
c2:07:52:a6:fc:74:f9:e9:02:e9:a2:62:d6:6c:69:
36:33:c9:f6:90:aa:b2:bd:7b:22:fa:52:2b:75:6b:
c3:a3:c6:ba:73:e7:1b:95:5d:96:c7:74:bc:3d:8f:
6e:35:bc:74:22:22:46:05:fe:b6:b6:bc:5f:97:28:
e1:83:2e:c9:41:75:8f:dd:95:58:13:6a:03:6d:ed:
94:16:d5:73:c7:94:a7:2e:dd:97:d5:35:eb:5b:08:
8c:c5:50:16:f9:6c:e6:ba:0f:25:4e:3f:7e:03:bf:
e3:cc:a3:2f:2a:0e:4d:24:a5:ae:1f:6b:57:57:85:
4c:59:a0:01:20:de:b5:0c:47:70:aa:07:97:67:0c:
0e:87:a5:8e:5b:6c:89:be:1f:15:4c:7b:20:1b:98:
cc:73:82:89:b2:e1:c1:c1:0e:e2:bb:da:3d:05:49:
80:bb:e9:c2:08:49:c7:05:25:28:b7:58:3f:07:4e:
17:5e:14:be:b5:84:20:5f:62:b0:98:05:0d:44:89:
ff:0a:bc:17:ab:c3:ba:0d:39:98:0f:5d:95:3d:89:
ba:3d:00:80:e4:05:28:a4:ad:d6:dc:07:91:f9:9d:
42:ee:c9:d9:06:5c:55:3b:c5:b6:7f:12:8d:f7:fe:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:A3:7C:B8:D1:30:2B:F4:AC:4A:64:2B:F2:14:8C:75:29:F1:DA
X509v3 Authority Key Identifier:
keyid:F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:84:ac:c6:81:a8:f8:bc:c7:17:91:53:07:14:03:d6:b2:5d:
1f:35:97:30:79:ce:d1:de:c1:51:74:ba:92:db:e7:dd:32:21:
96:c2:a9:e2:b9:4c:0a:4a:b0:f1:d8:2f:e1:98:14:1f:66:a8:
f9:1c:42:ac:5b:bf:23:3c:20:e1:fc:ad:a8:38:8f:09:d1:ac:
92:7f:54:a5:8a:7d:d1:18:d5:7b:8a:5c:b4:2b:b5:93:7e:d0:
97:92:bc:76:90:f8:cc:47:7f:23:0d:64:20:ae:14:b6:28:b9:
ef:de:0d:86:19:c6:3a:ae:73:5c:76:d5:7f:fb:f7:b5:dc:83:
cc:c9:ef:a7:48:5f:35:b3:0d:87:0d:ee:4a:44:b3:b6:4b:bc:
39:e6:31:75:78:54:7f:6c:40:ab:be:3c:09:71:bf:b9:63:bc:
b5:dc:21:35:61:68:4d:c8:05:98:66:92:86:14:96:06:2a:6d:
d2:cc:84:5f:fa:93:99:69:d9:5f:ed:de:52:f6:26:0f:43:de:
ff:3b:a0:db:54:c4:87:a5:76:c6:b6:44:13:7d:8b:60:1e:9c:
a8:25:9b:f5:cb:83:a3:c9:a2:50:4c:08:bd:4c:5d:54:a6:39:
01:db:53:fe:fc:06:9b:da:d7:40:9a:33:09:f0:5d:e2:49:49:
61:61:2c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:13:38 2024 by rpki-client on console-fra.rpki-client.org