Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: UYPxBeMI+Zpdi1TcX3r1KS/uqmLLv90ZuW0xQEX544I=
Subject key identifier: ED:C3:F0:8D:86:D5:32:7A:EC:1A:2D:BB:07:58:BB:90:C1:04:25:6E
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 01901BFED25E390AF71308C60F7ED1F46E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 11C9
Signing time: Sat 15 Jun 2024 13:03:23 +0000
Manifest this update: Sat 15 Jun 2024 13:03:23 +0000
Manifest next update: Sun 16 Jun 2024 13:03:23 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: nJXTthvUK1YETznkZdQNbAxVjAH+riM13f06cUrNgSk=)
2: biaZMBJdBOPx2FHlzf8QzqNWSW4.roa (hash: R6EFt2yzO/6cvZjM+UoPUQd1LR5tVrN3Lm9Q4bu+Nzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fe:d2:5e:39:0a:f7:13:08:c6:0f:7e:d1:f4:6e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Jun 15 13:03:23 2024 GMT
Not After : Jun 16 13:03:23 2024 GMT
Subject: CN=edc3f08d86d5327aec1a2dbb0758bb90c104256e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:b3:68:c1:be:7b:6b:25:3a:ed:c3:28:ff:
e3:65:dc:92:53:59:d8:9a:3d:62:fa:8c:c6:fd:a5:
2c:7d:b6:4f:6f:63:15:26:00:0c:6c:2c:eb:be:5a:
c9:fd:b0:6b:3b:76:a2:16:98:50:00:2b:cf:f1:38:
15:22:20:80:8c:1d:3a:af:84:f7:c0:95:a8:f6:fd:
b1:03:0e:97:c4:e6:9b:2b:30:82:c3:8a:ee:c5:4d:
1f:9a:10:b6:25:1a:66:12:7b:a5:5a:b2:97:cc:43:
ce:26:de:39:df:db:c0:4f:9a:67:b7:d8:57:16:5a:
10:9c:13:79:df:57:6b:70:40:31:05:87:98:f8:24:
0e:42:2e:a4:f2:aa:0d:7d:9f:68:47:87:3d:ba:ae:
12:8a:d7:2f:4e:f3:9d:bb:49:d2:f1:8e:0c:3f:19:
c3:b3:f3:11:b7:16:9a:78:de:08:0d:61:76:dc:7f:
98:8e:48:af:14:fb:9f:24:73:14:22:72:71:d8:8a:
b7:e0:a0:e3:8e:f2:89:98:6c:1a:bd:3f:c7:e7:73:
92:0b:f0:61:c3:9a:f3:00:c9:0f:15:81:55:93:5c:
af:06:d8:24:7a:d0:a5:4d:d9:da:4e:0d:47:53:86:
58:9d:d4:dd:5e:31:09:98:72:bf:71:25:de:92:b0:
0b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C3:F0:8D:86:D5:32:7A:EC:1A:2D:BB:07:58:BB:90:C1:04:25:6E
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6f:69:83:e5:f2:15:92:ae:8c:1b:b2:18:40:ea:f2:51:71:
15:19:7b:a5:5f:8b:77:66:72:ac:34:52:4e:b2:1a:82:b3:e0:
e4:c1:8b:91:e4:b7:65:59:6e:05:46:f1:f1:a8:44:28:1e:c4:
16:da:fb:7d:d8:c1:ca:a2:35:e8:77:47:11:67:c3:36:39:ed:
5d:cf:67:53:e0:ed:1e:d6:b4:b3:15:1a:71:cb:c9:0f:16:89:
66:4e:82:ae:3c:0f:bc:21:2f:3e:cc:79:23:96:ea:75:0c:05:
10:2e:71:b0:1f:15:02:8f:1a:c0:31:9a:32:98:0f:64:0d:16:
1f:68:30:71:ca:17:96:08:f4:78:15:95:aa:2a:a7:ad:5f:aa:
1a:6a:3a:ec:4d:b8:9e:ee:63:0f:53:18:ed:79:19:61:da:90:
2d:07:c0:2f:dd:d5:2a:c8:92:55:d3:b0:b7:a1:72:67:f6:03:
41:39:1c:75:02:57:05:7a:4d:89:ba:6e:8a:9a:0e:f4:c1:67:
af:8c:fe:78:33:06:c9:f2:79:ee:95:b9:f1:81:41:e4:df:43:
60:64:da:b1:fa:d6:3d:02:e7:c1:47:17:d5:bd:fd:94:24:8d:
3c:6a:17:b6:80:5b:1a:28:20:2e:4c:93:5e:c0:59:db:25:10:
f9:25:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:53:25 2024 by rpki-client on console-fra.rpki-client.org