Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: wIFE/2CN4gUs6J90jDpcdJo+3/iPt3hFw6fk41CmnHA=
Subject key identifier: 9E:32:11:4B:6C:F8:FD:F5:07:EA:07:56:A3:AE:4C:F3:43:C0:F8:A7
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 01901CD846C25EA66591A4BD1111395A1410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 0B7E
Signing time: Sat 15 Jun 2024 17:00:54 +0000
Manifest this update: Sat 15 Jun 2024 17:00:54 +0000
Manifest next update: Sun 16 Jun 2024 17:00:54 +0000
Files and hashes: 1: 1-V20zBEi12-2d5HMz8LTEwwNAw8.roa (hash: 5w72o6LIcA285HIHGIIrdkYEbmR+pycR/OWA6XOJDE8=)
2: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: u0KBb101JW9kIecOk0PfDVm+cip1NS1jOWxQnOO22yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:d8:46:c2:5e:a6:65:91:a4:bd:11:11:39:5a:14:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Jun 15 17:00:54 2024 GMT
Not After : Jun 16 17:00:54 2024 GMT
Subject: CN=9e32114b6cf8fdf507ea0756a3ae4cf343c0f8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:04:24:65:ea:83:2d:39:f2:dc:57:db:65:
17:a5:1e:d7:c6:d1:6f:1c:cd:34:26:aa:ed:40:66:
ec:64:91:b8:3f:0f:7e:0e:bc:5c:1e:02:57:68:86:
aa:ac:39:e5:f5:ad:08:2a:44:2d:d0:e8:fd:75:2a:
ba:73:c9:04:60:ba:57:9f:63:72:95:9b:84:e6:eb:
82:bd:d4:64:ea:58:5c:41:bb:9e:a4:56:89:bd:5c:
17:72:54:46:93:60:0c:29:89:5c:17:fe:3b:e8:1e:
10:7b:ce:11:87:c4:21:bc:48:b3:69:69:6b:48:95:
b3:76:1e:6a:4a:f4:d0:c8:89:16:ea:14:59:5b:10:
8f:7c:cc:b7:5f:3a:78:ab:fa:26:d9:e1:4a:95:83:
ca:e5:30:59:4b:e2:e4:f9:36:59:bb:d8:ce:0c:4a:
7e:d1:d3:c2:53:35:37:68:68:87:c2:e1:74:51:dd:
3c:f3:d7:92:7b:60:c4:66:5f:28:d1:e9:10:24:ae:
9f:f6:c7:6e:86:d7:2f:97:3e:e2:4b:c4:f0:b8:21:
3b:ca:b7:7b:04:4f:5e:49:b9:75:cc:ae:7a:99:6e:
d4:ae:1b:56:52:7f:eb:20:50:7b:d5:2b:4c:55:f4:
a1:76:4e:c9:87:1d:f0:1e:73:3f:1b:59:11:c5:4d:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:32:11:4B:6C:F8:FD:F5:07:EA:07:56:A3:AE:4C:F3:43:C0:F8:A7
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:21:06:59:4f:50:4a:76:ee:d2:86:c6:4e:3e:4f:b6:8d:a7:
85:bc:50:fe:aa:46:ec:49:5e:e8:76:b8:47:33:07:be:a8:5f:
96:2b:1b:83:ef:10:49:43:2b:5d:18:9e:27:5a:3f:ff:f1:b0:
0d:24:ca:2f:b7:cf:e6:cd:f1:2f:a3:2d:f1:93:c5:2f:a4:6a:
20:33:a5:1d:3e:23:34:27:da:11:f6:c2:d5:8e:cc:3e:a3:8a:
ab:f2:5a:a1:d7:e1:c3:86:2f:fd:44:03:cf:b1:19:d8:8b:41:
a0:e1:cf:c9:69:0a:37:e7:6f:27:2c:0d:db:63:d3:68:cc:e6:
5d:e9:84:29:93:8d:6d:8c:8a:9e:3f:fd:8b:80:b0:56:e5:69:
e0:3b:17:72:c3:90:01:04:2e:58:9e:fe:63:c6:9d:be:b8:30:
80:0c:9b:12:94:8f:a8:14:e6:f1:a0:ff:f1:61:a3:08:e2:6f:
29:db:95:d8:df:b2:1b:e7:3e:c2:cb:bd:f0:a7:24:87:b4:3f:
a1:67:a7:01:67:7c:09:29:10:5e:4e:55:b5:bf:4f:37:b6:f8:
ac:b8:98:99:da:1b:d7:f4:e2:fa:98:6f:fa:36:e1:80:6c:11:
bd:a3:61:2b:90:f5:ab:43:96:55:0a:9c:d3:65:e1:85:e0:33:
82:e7:93:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:51:40 2024 by rpki-client on console-fra.rpki-client.org