Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: r2A+zvjxOYKoAk9rvXwGxYYYdr7kaMrQqAi6Czqjwbg=
Subject key identifier: 1C:32:1D:6F:96:81:EE:CE:BC:B5:9D:6B:95:B1:AF:13:10:E6:0C:D3
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 0194064705726725DDB98064BED18B780701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 13CC
Signing time: Fri 27 Dec 2024 04:01:45 +0000
Manifest this update: Fri 27 Dec 2024 04:01:45 +0000
Manifest next update: Sat 28 Dec 2024 04:01:45 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: IXhOxS+nKbcNWNJc6hQRWSaUq4CO+OwlJF9CzQ/HmAs=)
2: iMMH1Fgw9EttOFfxgbHxGk2m0Bg.roa (hash: mY2YPs4rCSz69TeCgeSjqpo/A4eB0i+BtIFSmaMNwyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:47:05:72:67:25:dd:b9:80:64:be:d1:8b:78:07:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Dec 27 04:01:45 2024 GMT
Not After : Dec 28 04:01:45 2024 GMT
Subject: CN=1c321d6f9681eecebcb59d6b95b1af1310e60cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:5a:5c:db:01:d9:a7:18:b0:0d:4d:64:f6:
97:ba:46:3b:95:73:22:34:1b:19:1a:13:fd:be:ca:
58:b7:eb:88:3a:e1:52:12:ea:f4:d3:1e:0c:9d:9f:
24:67:c4:9b:17:24:3e:9e:82:09:18:39:bb:0d:28:
13:82:17:80:91:e9:23:fa:70:7c:0c:92:f1:b7:0d:
f4:a3:18:ac:54:21:d1:63:4e:dc:11:ea:2c:39:cc:
96:2e:c3:b5:b3:21:08:d9:79:2c:46:c3:25:53:7e:
b4:72:00:1a:85:d2:ce:5f:d4:ca:b8:25:fb:f4:a0:
2f:4c:dd:77:b7:2f:b9:79:24:61:e7:dc:48:97:e9:
8d:fa:50:89:88:4e:29:cf:cf:36:6f:c0:ba:11:11:
b5:87:9e:8a:88:cb:43:b2:1f:74:12:8a:98:2d:c5:
e9:f0:f7:4e:45:5c:b0:88:4f:0c:08:d7:46:8d:9f:
98:30:79:90:5e:ce:9b:a9:5b:05:74:54:27:d9:1e:
9d:a5:be:8d:4c:c6:f4:50:c3:75:12:d8:56:4b:3b:
1c:06:9e:0a:a3:03:95:35:c3:98:46:a3:2b:0a:d0:
d0:62:2a:f8:f8:61:8c:16:bb:66:df:1c:e2:18:71:
c3:57:fc:bb:0b:12:4a:15:b2:b8:53:ce:73:4f:66:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:32:1D:6F:96:81:EE:CE:BC:B5:9D:6B:95:B1:AF:13:10:E6:0C:D3
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:92:bf:a3:e5:c1:df:2b:61:7c:25:3c:68:16:32:c7:76:3c:
f6:37:58:f6:ca:50:f4:2d:6b:0b:12:60:24:58:89:27:c3:00:
62:a0:4d:ee:c4:58:a5:46:42:fe:86:54:70:8b:7e:9d:56:84:
65:1f:bd:21:0f:41:72:13:38:5b:35:7c:c5:56:35:52:51:e5:
95:bd:95:75:7c:31:b8:14:ab:81:f2:13:29:19:70:97:f6:86:
c8:80:61:9a:16:e5:7f:0a:bb:47:ca:18:d4:9b:0c:2e:4a:68:
c6:8f:de:6e:e9:c6:a3:33:a4:56:5a:a0:ec:5a:6d:5b:79:df:
41:78:63:ff:6f:04:a9:6a:92:26:b4:c8:6d:99:2b:65:65:a4:
a6:2b:90:2c:de:ad:fa:9f:90:7a:5f:07:54:dc:52:02:d9:42:
fe:b9:90:16:f4:04:dd:eb:67:df:60:bd:a7:4e:0a:3d:22:dd:
6b:f9:24:25:5a:6e:79:a6:3d:17:b9:0a:4c:7e:f3:c7:84:9e:
7e:3d:33:9e:51:31:5c:4f:b8:c9:0c:a6:9b:29:c2:ca:d7:be:
e6:95:cf:90:10:8d:17:e5:8c:6b:75:3b:5a:4b:a8:c4:f5:fc:
80:7c:c1:67:81:92:c8:06:3c:28:c8:37:1f:d1:4f:f9:72:28:
f6:62:e6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:14:27 2024 by rpki-client on console-fra.rpki-client.org