Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json)
Hash identifier: TAzNIt6faw+vfG4dQKwygUvG9pARIGgmX1TsXN2fzH0=
Subject key identifier: 47:2B:D8:9E:FE:A7:61:49:1A:08:D9:CA:70:89:9C:86:7E:0E:79:FC
Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593
Certificate serial: 0194064715274265CB0EC9F3B57300581A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
Manifest number: 0C9F
Signing time: Fri 27 Dec 2024 04:01:49 +0000
Manifest this update: Fri 27 Dec 2024 04:01:49 +0000
Manifest next update: Sat 28 Dec 2024 04:01:49 +0000
Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: ZELT8/zmfwtxat88qBb+kaDgos6fonwpCAd7tD5Gkjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:47:15:27:42:65:cb:0e:c9:f3:b5:73:00:58:1a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593
Validity
Not Before: Dec 27 04:01:49 2024 GMT
Not After : Dec 28 04:01:49 2024 GMT
Subject: CN=472bd89efea761491a08d9ca70899c867e0e79fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:8d:bb:24:f5:af:95:70:c2:42:19:ca:d3:
38:c3:0d:80:f8:4f:a5:ed:24:25:cc:89:c3:dc:75:
c0:2d:61:71:96:13:d2:6d:a8:b3:05:ed:e1:e1:07:
2f:58:06:63:f2:6e:fb:b2:89:49:29:ba:fa:3c:e4:
0d:ec:09:19:7f:90:fe:67:d0:21:9e:09:bd:93:51:
d3:bd:3b:a3:77:01:a8:77:54:dc:5a:4e:67:10:aa:
bc:4f:39:72:17:97:de:29:d5:fa:ae:f5:46:cf:bd:
36:2f:64:82:9e:a5:56:6d:eb:a3:7e:e6:dd:89:77:
fc:4e:37:7e:f9:56:ba:63:67:39:00:0a:82:cf:32:
e0:d1:42:fe:00:a8:79:c5:cd:a8:c9:9e:99:3e:32:
38:95:db:aa:fe:c4:22:eb:e0:f4:88:82:c1:76:cd:
9a:2d:04:ee:f3:f3:e9:e1:01:25:50:b9:cb:50:cc:
80:f5:17:9b:4e:dd:83:be:df:1a:5b:80:af:6f:04:
95:cc:27:55:21:22:36:3a:3e:bb:26:27:2d:e5:7b:
a5:fb:78:d0:8a:87:fa:0d:e6:99:8b:7c:d4:68:47:
01:c3:2f:be:ca:d8:68:c4:dc:eb:86:33:24:e2:a4:
35:2f:32:6f:04:2b:5c:74:f3:76:b1:30:c1:7b:d6:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2B:D8:9E:FE:A7:61:49:1A:08:D9:CA:70:89:9C:86:7E:0E:79:FC
X509v3 Authority Key Identifier:
keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:61:18:bb:62:be:10:d1:82:cd:16:f8:b4:77:89:b2:c5:5d:
28:e0:14:68:55:dd:36:fd:44:2e:73:1d:fe:60:34:38:2e:2c:
fd:94:5d:a8:4d:4e:94:18:2f:25:76:a9:a4:62:b5:5f:93:a7:
63:8c:d6:d3:e6:b8:c6:75:16:19:73:f2:0e:5b:26:fd:b8:07:
22:60:10:5d:97:5d:a7:e0:29:fd:47:42:cb:0f:9b:07:d4:2c:
7a:4c:5e:dd:3e:50:28:f4:01:f8:d9:0a:68:91:5e:fb:0e:62:
8f:51:dd:f7:d6:12:de:9e:cb:ed:af:2e:78:d0:d3:7a:8c:42:
bd:7a:88:2a:4f:e4:45:94:e2:90:5d:7c:1e:eb:f0:7f:07:e1:
74:b6:7d:dd:23:cf:cd:f4:f4:be:66:9e:e1:0e:80:6e:61:82:
b8:6f:cb:26:fe:3f:a5:b9:d1:2e:b2:64:a9:77:12:74:b8:ae:
cf:ff:86:91:c4:06:88:f7:fd:ce:7e:7a:c3:ce:0e:46:af:15:
ee:33:00:36:d1:78:3e:b2:db:65:a5:17:42:d8:cc:8e:76:70:
50:66:40:41:75:d4:24:df:2d:fa:7a:ab:60:7a:ae:f4:6a:97:
25:d1:fd:bc:8f:f0:2d:27:06:62:7e:bc:d2:8c:01:4f:0a:33:
9e:c6:97:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:13:39 2024 by rpki-client on console-fra.rpki-client.org