Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: 6difVuH2RRGJL0ZX5E9Nhu8i64CPHAfnbEVfg89DAp0=
Subject key identifier: F4:5D:04:37:AA:8A:4D:78:3D:4E:D8:24:6C:7F:2E:94:72:47:39:5F
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 019406479032EB2C43C12403F60A19E4541C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 0AB3
Signing time: Fri 27 Dec 2024 04:02:20 +0000
Manifest this update: Fri 27 Dec 2024 04:02:20 +0000
Manifest next update: Sat 28 Dec 2024 04:02:20 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: HkfzXyYoUjW/DDK8+AbQxYm6YPbn2b1tJK/RAu0iVd0=)
2: tK94GAp3hNOP7jKGpFoIPqktjRs.roa (hash: dj52wX6TGijNkdB9W4ir1PFY2MrCyctUXexQn4L135k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:47:90:32:eb:2c:43:c1:24:03:f6:0a:19:e4:54:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Dec 27 04:02:20 2024 GMT
Not After : Dec 28 04:02:20 2024 GMT
Subject: CN=f45d0437aa8a4d783d4ed8246c7f2e947247395f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:03:87:82:20:8f:a1:5a:64:78:25:e4:d9:
e6:8b:80:21:fb:11:f6:6a:f4:ef:42:20:3b:99:7d:
fc:45:0f:3b:77:3f:d1:cd:2f:a1:71:14:24:b6:36:
f7:7b:ff:b7:88:d5:f6:79:6b:19:d2:58:d3:10:7a:
ff:67:f4:96:fa:b1:d1:a8:fd:97:83:17:e8:de:64:
6a:11:35:c3:b9:34:28:2e:a3:c5:3e:7e:a5:8c:a2:
11:47:92:9f:50:22:53:b7:86:6c:e5:6e:39:79:db:
e5:37:48:77:e7:f5:18:fa:ff:3c:47:a0:40:d3:1f:
e8:f9:df:10:f2:12:2c:7c:db:e3:04:80:84:50:de:
3b:1f:b5:9e:26:af:0b:5a:c7:eb:d3:20:dc:d9:e9:
68:33:3f:30:28:e0:58:55:b2:2b:d0:e0:f8:b0:36:
1b:1e:9d:3c:23:5c:77:65:68:ce:e3:8c:fd:89:98:
ff:59:9a:04:fa:c0:5c:2a:24:be:00:f7:dc:76:cc:
dc:cf:85:0e:ee:75:ed:14:a7:16:95:b7:a2:ab:0d:
52:08:2c:4c:c3:71:96:fb:64:de:34:df:d7:c9:55:
e0:9d:76:79:72:85:70:90:f5:7c:83:28:12:00:6f:
d6:f3:96:2a:e7:8b:a5:90:38:2f:19:c8:25:be:86:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:04:37:AA:8A:4D:78:3D:4E:D8:24:6C:7F:2E:94:72:47:39:5F
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f1:41:9a:dd:e0:98:51:9c:87:b8:22:6f:70:87:97:71:c2:
19:42:64:f2:04:d7:b8:80:3e:ac:9d:5c:38:22:8b:1a:90:02:
77:d1:cd:50:be:20:a7:d3:6a:f7:73:67:9f:74:f3:b3:f5:0e:
c5:18:66:b2:b3:c5:ba:7b:84:84:46:5b:d0:d0:2a:0a:a8:c3:
0e:05:c3:d9:c8:59:3d:23:37:06:f2:3d:ac:c2:33:f7:29:5d:
98:b6:9e:04:ae:1c:fa:db:4a:7b:f6:30:d7:fc:1d:73:47:c3:
0a:27:6f:8e:d8:95:21:d6:6a:2b:95:3b:7b:e1:10:01:24:9a:
48:36:e9:ee:af:29:ad:f7:11:41:a4:9b:f5:4b:31:fe:f9:e4:
27:a7:2c:21:35:64:c1:42:c1:e7:fb:dd:45:6e:0b:0a:40:20:
c8:7c:1a:8e:ae:ea:f9:22:19:66:14:2d:f3:6f:1d:61:0d:b7:
8e:b5:d5:59:61:0b:9b:19:c9:82:ca:6d:a0:59:9b:c8:2c:41:
93:bd:f2:ac:43:58:2f:b5:78:64:87:07:3b:b8:32:82:5c:22:
11:d0:46:fb:f7:74:cf:10:d9:fd:f6:bf:f0:db:91:b9:34:4f:
6a:c7:5d:25:56:f7:85:70:c7:f4:81:55:08:30:c5:af:4a:74:
09:7c:e6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:05:51 2024 by rpki-client on console-ams.rpki-client.org