Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.mft
File: cvpBoKemgQK1OrMXQtthJC91kIw.mft (raw, json)
Hash identifier: u6Z4glYnuTo17C35SJnne7/wdqpDbekqlsC42xy7OGc=
Subject key identifier: 9B:B0:E1:E5:0D:23:FB:31:4D:1C:51:6B:75:17:75:E0:9C:7C:9A:82
Authority key identifier: 72:FA:41:A0:A7:A6:81:02:B5:3A:B3:17:42:DB:61:24:2F:75:90:8C
Certificate issuer: /CN=72fa41a0a7a68102b53ab31742db61242f75908c
Certificate serial: 01901DEC8C7F31A4222A1626C06F710CE36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvpBoKemgQK1OrMXQtthJC91kIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.mft
Manifest number: 100F
Signing time: Sat 15 Jun 2024 22:02:40 +0000
Manifest this update: Sat 15 Jun 2024 22:02:40 +0000
Manifest next update: Sun 16 Jun 2024 22:02:40 +0000
Files and hashes: 1: _9J8B85rfLQf89br2WOu4yPWFHI.roa (hash: pmBio6M6PmjY6HE0emFwiWb4/d8aZ7o7ngU4OMHUOh8=)
2: cvpBoKemgQK1OrMXQtthJC91kIw.crl (hash: BAMx+o7rWPJpFBjWcIZGcRXVyo09y5tNPdFEyrEuQAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvpBoKemgQK1OrMXQtthJC91kIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:8c:7f:31:a4:22:2a:16:26:c0:6f:71:0c:e3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72fa41a0a7a68102b53ab31742db61242f75908c
Validity
Not Before: Jun 15 22:02:40 2024 GMT
Not After : Jun 16 22:02:40 2024 GMT
Subject: CN=9bb0e1e50d23fb314d1c516b751775e09c7c9a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:3c:bf:ea:8c:da:b8:7e:8b:94:3c:4c:65:
52:cb:af:c1:35:8f:15:d3:8b:d0:f2:80:45:43:10:
1d:92:df:86:e4:51:fe:e3:43:9f:da:e1:85:1d:7c:
a4:ee:20:59:6f:a0:23:00:6d:95:7a:8f:60:0c:06:
56:e0:42:d1:3c:07:10:34:45:4a:a8:b1:b4:75:83:
99:ff:da:56:c7:c0:9f:35:9b:ae:a0:fd:91:a5:e6:
8f:16:99:3d:e5:c0:3c:9c:e4:28:af:de:40:87:51:
ff:04:7a:db:aa:dc:33:bd:71:39:12:76:80:f2:29:
86:fc:1c:04:ed:a9:be:28:eb:8c:ab:27:9e:c0:61:
62:8a:61:a5:8e:ca:f5:7d:ce:8e:64:10:57:3a:f0:
a7:eb:5f:53:89:54:e7:4a:ab:58:88:14:18:f9:13:
ec:57:75:49:2d:1a:ac:70:e7:0d:e8:40:83:26:ec:
d9:22:df:8f:ce:fb:21:18:5f:0a:9a:9f:66:e1:1b:
56:d8:16:2a:2f:3d:f1:98:a2:e6:dc:0a:cd:71:5a:
a5:04:42:86:e2:97:ed:ff:7d:9f:95:ae:6e:01:df:
3d:c7:08:24:95:e1:4b:15:79:df:91:ad:df:b6:48:
98:01:92:7e:17:22:85:87:bf:d0:d2:f0:2f:96:7b:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B0:E1:E5:0D:23:FB:31:4D:1C:51:6B:75:17:75:E0:9C:7C:9A:82
X509v3 Authority Key Identifier:
keyid:72:FA:41:A0:A7:A6:81:02:B5:3A:B3:17:42:DB:61:24:2F:75:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvpBoKemgQK1OrMXQtthJC91kIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:7f:52:26:6e:19:d8:c5:0f:a4:1c:cf:d5:0f:21:66:6d:ba:
94:11:3e:2c:3c:80:f4:1c:92:38:54:e5:f3:cf:39:49:e7:c8:
c2:f4:f5:0e:d9:a9:f7:76:d0:b2:56:d7:93:64:c8:69:a9:5d:
c5:2c:f1:d7:1c:75:52:22:84:4e:6c:00:2e:3b:bd:a1:23:c2:
d6:3b:6b:65:2e:88:25:9f:11:4c:3a:9c:f0:39:e3:d0:96:af:
2a:cc:f6:86:e3:ce:e1:07:aa:34:75:55:d5:21:d4:7e:36:f5:
4e:aa:6d:a4:43:aa:bb:42:f4:f3:23:6e:60:c9:83:c9:49:de:
26:58:11:9c:b2:4f:e2:9d:8c:e4:ba:85:b7:3c:91:7b:2e:77:
aa:16:03:6b:46:27:4d:dc:e8:e5:a8:c8:ad:7d:8b:86:a5:65:
a1:5a:d2:97:70:74:29:9e:97:c1:86:24:97:a0:e0:a2:71:e6:
cd:b9:1e:c0:21:ac:bd:a4:98:9c:27:d6:47:78:0b:11:35:40:
51:d2:03:e9:b9:47:3a:a6:dd:29:e0:9c:2a:78:ee:9e:f7:69:
9e:be:e4:7a:67:86:dd:e8:4b:95:17:70:81:6d:d9:89:d0:7a:
4c:2b:d7:11:16:db:18:d2:b0:41:9a:b8:0e:0b:c7:10:fc:c1:
e8:4a:7b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:46:09 2024 by rpki-client on console-fra.rpki-client.org