Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier: Ij1aI8UzhfIZ7oJXw80j48jCH6JAcDhfkY1SO/9cSwk=
Subject key identifier: 0C:AB:8E:19:05:CD:98:DA:7F:06:5A:AF:DA:F0:BF:86:B5:67:60:6E
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 019049B1427FBA6AE812C500A62FDEF44190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number: 1120
Signing time: Mon 24 Jun 2024 10:01:11 +0000
Manifest this update: Mon 24 Jun 2024 10:01:11 +0000
Manifest next update: Tue 25 Jun 2024 10:01:11 +0000
Files and hashes: 1: c48ITznYWNOCtQnBItYbm_4wI4c.roa (hash: dcMy/kHnx3JAVi/C/fI++zs6QoCREjwrUOkNdwZwGgY=)
2: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: GRh+QmoEYK5mm1tPmXOrKFAbLEK5+8467DNvNDbzPx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:b1:42:7f:ba:6a:e8:12:c5:00:a6:2f:de:f4:41:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Jun 24 10:01:11 2024 GMT
Not After : Jun 25 10:01:11 2024 GMT
Subject: CN=0cab8e1905cd98da7f065aafdaf0bf86b567606e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:de:3e:cb:59:b1:ce:41:b5:77:1f:d8:17:
8d:e9:1e:71:40:eb:d9:d8:44:da:e4:0a:19:fb:b2:
31:6d:91:f0:d3:cb:91:6f:9f:1e:d7:de:0a:5b:49:
3a:c0:c6:da:1f:39:ef:7c:77:ac:df:2b:68:e9:37:
4a:5a:45:db:a4:21:f1:5a:ce:02:b6:db:5c:78:db:
1b:0a:d4:b1:73:f1:6b:c5:35:5b:7d:48:98:cb:79:
e4:3b:b9:38:4e:d9:00:6b:81:44:5c:8b:e3:49:be:
e7:29:5e:02:e5:fb:22:b1:bd:4c:54:25:2d:46:67:
f0:1a:88:09:e6:7e:66:b6:c2:31:7e:e9:59:60:32:
b3:cc:39:ec:a1:53:04:9f:56:2f:42:39:ee:a0:61:
f9:60:f0:02:c3:91:ce:27:a3:75:ee:78:d0:f8:9b:
8f:13:91:83:4b:3c:b8:c5:45:ad:7c:b4:e6:b7:73:
a6:ae:48:c4:05:a7:ba:bc:a9:6f:03:09:99:e6:76:
aa:d0:c7:52:80:15:bb:aa:88:72:7f:e4:c9:ab:76:
c5:83:31:61:e9:d1:20:a6:5c:4c:dd:11:38:1d:d1:
64:f2:cb:e2:50:a8:45:da:79:6d:44:ef:4c:83:ae:
d1:b4:34:a9:f5:33:cc:a4:1a:2d:e7:57:2e:b2:b3:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:8E:19:05:CD:98:DA:7F:06:5A:AF:DA:F0:BF:86:B5:67:60:6E
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f2:eb:00:72:a4:55:49:7b:11:b0:e8:2e:3a:b8:40:4f:b6:
37:6b:04:21:ad:ad:7c:89:14:1a:fd:5c:89:d3:0c:89:35:67:
80:e8:29:6d:c2:4d:df:98:b4:0b:11:e8:b2:8a:ee:68:c8:03:
24:15:93:93:0a:97:51:ae:64:12:5d:94:f2:29:ab:79:19:ed:
89:83:fd:d0:50:e3:19:c6:a4:4d:a4:eb:64:37:08:13:e2:a9:
cf:e8:f7:77:c4:92:c3:57:79:e6:32:a4:68:62:db:5d:09:82:
f0:e5:a0:60:8d:55:41:72:52:1f:27:50:e9:21:f4:da:66:c8:
09:c4:60:66:37:7e:0c:ea:e5:84:89:16:85:5c:a8:1a:f8:38:
f6:99:38:7c:c7:aa:c7:e6:f6:1f:c6:c1:17:89:c3:31:68:71:
2f:f8:1b:51:83:1b:0d:68:72:45:56:cc:65:df:7e:ac:11:b6:
b4:84:6d:d5:7b:16:fb:f5:8a:b9:35:11:ef:bb:1b:ac:55:91:
d3:91:c6:8a:8e:c4:68:f3:4a:1e:a4:16:f6:06:af:67:66:ce:
e5:a1:d8:bd:fa:8d:b5:16:c6:c2:98:90:12:1d:b8:bf:47:7d:
8b:f1:2a:2f:0a:38:13:54:73:23:ea:d7:5d:12:f0:6a:76:56:
ca:3f:69:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:45:26 2024 by rpki-client on console-fra.rpki-client.org