Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
File: 12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json)
Hash identifier: UAB9devSnOnuEc/T/8wflBERUh3VDyuybiybJ9Z/Zus=
Subject key identifier: 44:D8:17:87:E0:6A:8F:1C:87:DA:56:C0:47:C6:08:FC:C3:F8:FA:A3
Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
Certificate issuer: /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Certificate serial: 01936AB4917B5B7BDF11505CA6010F578080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
Manifest number: 037B
Signing time: Tue 26 Nov 2024 23:00:38 +0000
Manifest this update: Tue 26 Nov 2024 23:00:38 +0000
Manifest next update: Wed 27 Nov 2024 23:00:38 +0000
Files and hashes: 1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: QSghQYG53V7YPTMibgw1d90h+S3Xf0yLkLwnXvgJbLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:91:7b:5b:7b:df:11:50:5c:a6:01:0f:57:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Validity
Not Before: Nov 26 23:00:38 2024 GMT
Not After : Nov 27 23:00:38 2024 GMT
Subject: CN=44d81787e06a8f1c87da56c047c608fcc3f8faa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:2e:9f:e5:e1:fc:6d:96:f3:03:97:aa:3a:
13:6b:ce:6f:38:1b:40:a3:93:9a:0e:a8:b6:d9:21:
29:fd:e0:cc:83:e1:11:d6:1f:16:13:3a:6d:f0:10:
48:e7:e1:a7:77:69:12:b1:d3:74:28:a9:09:1a:e1:
55:5b:93:ad:d9:87:43:97:aa:35:52:32:ac:97:ab:
36:95:bf:7d:71:67:88:28:3b:c8:c7:f2:54:cc:73:
fb:27:dd:f2:af:79:65:dd:c3:ec:64:f1:0c:24:79:
c4:15:14:3c:0e:a2:b2:59:37:73:f0:6a:19:b2:16:
36:6f:f7:da:ab:52:47:7b:cc:42:65:84:6a:6f:ab:
87:24:a6:32:81:ca:05:7f:03:c7:14:44:f8:24:6a:
26:2b:8e:92:f2:48:dc:68:9b:a5:e0:a1:bd:ca:78:
48:59:29:ed:a8:52:0a:b0:91:6b:8b:50:86:07:a6:
f7:1e:8a:4b:05:16:1e:a9:3f:e4:2b:1b:58:1e:b9:
bd:90:15:3f:34:af:56:04:ea:08:cf:4c:5a:db:4d:
6f:31:68:ec:3c:8c:e4:1b:1d:60:47:df:be:28:f8:
36:ad:6a:0c:1e:4a:84:c9:1a:b2:be:57:9d:75:7e:
cb:7d:59:77:92:56:ee:19:51:0a:d0:8f:01:16:c6:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D8:17:87:E0:6A:8F:1C:87:DA:56:C0:47:C6:08:FC:C3:F8:FA:A3
X509v3 Authority Key Identifier:
keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ce:f0:37:92:c3:5a:1a:37:e6:7b:67:34:28:f7:8d:2f:77:
cb:c9:22:eb:8d:49:bc:32:7e:ac:58:0f:b7:2b:ca:1f:c8:80:
01:5d:09:73:d6:75:ce:de:4e:14:f8:23:b1:9a:79:30:8a:45:
fc:fd:6f:1b:3f:e4:c0:ea:52:02:18:69:47:f4:81:87:05:6f:
12:a9:12:59:a0:47:4a:64:4c:13:b3:3e:c0:de:4b:49:37:cb:
5c:08:73:7e:57:21:71:44:68:79:0e:51:c9:24:4a:ab:5d:e8:
d6:a5:63:83:a2:1c:89:cd:8e:a8:09:b0:55:3c:71:d5:19:2d:
de:af:5b:c7:bd:e0:c1:78:0f:0a:ab:de:44:5b:02:10:b1:95:
54:f4:a7:8b:00:c1:fa:ce:2d:04:d6:9e:94:48:10:ab:17:5d:
9a:99:36:37:79:8f:48:26:11:34:d8:f0:02:9e:ee:51:50:b3:
85:03:f9:1b:45:8d:ad:c8:9c:8e:ea:8f:d5:50:10:03:2b:07:
ab:b7:16:74:6a:54:f8:50:1a:4d:f4:65:c4:61:34:79:0d:2d:
9a:27:46:f4:6b:b5:74:21:04:cd:f6:95:58:b6:c6:a3:f9:d6:
e0:e0:5c:fb:35:96:77:de:fc:22:d3:6f:4f:f1:fb:25:21:5c:
52:41:01:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtJF7W3vfEVBcpgEPV4CAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjRjN2YzZjc4Yjg3NmQ2YjA0M2MxNmNkZGJkZGViMWU3
OTViOWMwHhcNMjQxMTI2MjMwMDM4WhcNMjQxMTI3MjMwMDM4WjAzMTEwLwYDVQQD
Eyg0NGQ4MTc4N2UwNmE4ZjFjODdkYTU2YzA0N2M2MDhmY2MzZjhmYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF4un+Xh/G2W8wOXqjoTa85vOBtA
o5OaDqi22SEp/eDMg+ER1h8WEzpt8BBI5+Gnd2kSsdN0KKkJGuFVW5Ot2YdDl6o1
UjKsl6s2lb99cWeIKDvIx/JUzHP7J93yr3ll3cPsZPEMJHnEFRQ8DqKyWTdz8GoZ
shY2b/faq1JHe8xCZYRqb6uHJKYygcoFfwPHFET4JGomK46S8kjcaJul4KG9ynhI
WSntqFIKsJFri1CGB6b3HopLBRYeqT/kKxtYHrm9kBU/NK9WBOoIz0xa201vMWjs
PIzkGx1gR9++KPg2rWoMHkqEyRqyvleddX7LfVl3klbuGVEK0I8BFsYeQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETYF4fgao8ch9pWwEfGCPzD+PqjMB8GA1UdIwQY
MBaAFNdkx/P3i4dtawQ8Fs3b3eseeVucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MjZkZTYtNTAzOS00MDM3LTg4MDIt
NWUyY2JmOTQyNDA1LzEvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84MjZkZTYtNTAzOS00MDM3LTg4MDItNWUyY2JmOTQyNDA1
LzEvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg87wN5LD
Who35ntnNCj3jS93y8ki641JvDJ+rFgPtyvKH8iAAV0Jc9Z1zt5OFPgjsZp5MIpF
/P1vGz/kwOpSAhhpR/SBhwVvEqkSWaBHSmRME7M+wN5LSTfLXAhzflchcURoeQ5R
ySRKq13o1qVjg6Icic2OqAmwVTxx1Rkt3q9bx73gwXgPCqveRFsCELGVVPSniwDB
+s4tBNaelEgQqxddmpk2N3mPSCYRNNjwAp7uUVCzhQP5G0WNrcicjuqP1VAQAysH
q7cWdGpU+FAaTfRlxGE0eQ0tmidG9Gu1dCEEzfaVWLbGo/nW4OBc+zWWd978ItNv
T/H7JSFcUkEBqA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:30 2024 by rpki-client on console-fra.rpki-client.org