Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: hbPZCNQEPjhKzIlKbTCeFfUbdEj9fKSkakxXX5MyBe0=
Subject key identifier: 6A:9B:07:8C:7A:51:8A:B2:9D:F1:CA:C0:04:2D:27:D4:C4:D5:7B:46
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 01901BFC43210F4922BBCCDF836D8CF3F384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 11C5
Signing time: Sat 15 Jun 2024 13:00:35 +0000
Manifest this update: Sat 15 Jun 2024 13:00:35 +0000
Manifest next update: Sun 16 Jun 2024 13:00:35 +0000
Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: MRYHGXfGr5HhFw+8hNnUsk1fFov1hiLrLCjk7j595iM=)
2: fs2fb9vyAdTJ_9vZHP12Zvq4Myw.roa (hash: H+v0AGTX9OPRrvx0El9sPJcT+c7zAT319O7GS7lreK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fc:43:21:0f:49:22:bb:cc:df:83:6d:8c:f3:f3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Jun 15 13:00:35 2024 GMT
Not After : Jun 16 13:00:35 2024 GMT
Subject: CN=6a9b078c7a518ab29df1cac0042d27d4c4d57b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:17:c0:bf:52:8c:6e:d6:21:92:b5:52:01:
81:93:73:e0:6e:70:69:e4:32:f7:c8:b6:8b:e0:19:
a9:4d:9a:3b:9d:e0:75:61:04:ad:fb:7f:15:2f:82:
bf:41:25:e5:a6:bf:27:45:d7:27:ef:a8:a3:de:04:
02:c3:d8:a2:22:da:54:a7:19:e6:e1:99:45:77:8f:
c7:16:2e:45:9c:b6:62:77:2b:69:2c:e9:1e:2a:e8:
4c:29:5b:d4:e2:c8:14:3c:72:48:ca:a4:5d:b5:f1:
23:24:17:77:93:b9:97:41:94:33:e2:eb:ee:66:e2:
da:4c:2c:60:bf:dc:37:42:a5:3d:fb:3a:a5:88:b5:
25:3d:64:f0:a5:50:29:5a:e8:5f:b8:02:5b:79:07:
3d:d2:69:a2:5e:90:78:1a:fd:ea:2d:67:36:76:5a:
76:4b:d1:44:07:c3:02:6b:58:8d:01:c0:8b:4c:95:
61:5e:92:0d:34:63:a0:ff:2d:f4:4f:bc:88:fa:49:
f4:80:9f:28:83:8d:ac:f3:61:ac:ec:6c:12:ed:bc:
ee:d3:9e:aa:be:f2:32:17:a8:f3:9d:9d:e5:4c:77:
b7:08:8a:69:22:2e:81:f8:f1:cb:7a:4e:b9:a1:5f:
43:1e:b8:9c:17:5a:34:1d:d5:18:e3:71:a5:9c:6a:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9B:07:8C:7A:51:8A:B2:9D:F1:CA:C0:04:2D:27:D4:C4:D5:7B:46
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d2:0f:c1:d4:54:6c:db:d2:b4:7c:95:c7:76:76:d0:fb:21:
6e:f7:0c:62:08:c2:f6:cc:4b:2b:e8:2e:cf:2c:c7:b9:2a:88:
84:0e:6c:91:07:f3:21:89:1a:f4:39:a5:02:13:6f:6e:1b:32:
bb:9e:6c:63:71:c7:b2:1b:4e:32:77:4a:72:1d:f4:ca:2d:41:
ff:fe:d9:fe:7a:54:69:d2:c1:54:40:a6:bf:26:20:6a:af:18:
84:8b:f0:fa:b0:cc:9e:f7:b1:57:22:87:20:e9:bf:61:37:75:
1e:24:1d:59:aa:9b:80:50:e3:ad:83:7a:a6:91:56:6e:b3:7a:
70:a9:d7:b1:ee:6d:d8:c9:78:5b:8a:d3:0a:b7:82:2e:cc:c5:
b3:18:c1:ed:f9:99:35:d2:33:38:d2:15:80:b0:a2:e0:51:26:
c4:05:d2:38:06:e1:13:42:8c:55:38:f3:bf:89:1b:5e:57:cf:
1d:18:60:8f:f9:65:a6:12:44:d8:32:1e:2f:63:f9:87:fc:3c:
00:6b:16:6d:3c:68:f2:b2:06:fc:28:f8:7e:72:36:25:76:9c:
e7:71:6e:9b:25:94:93:29:83:6d:c6:3b:eb:07:91:61:fa:df:
a3:09:21:13:11:64:a3:35:70:c3:14:6b:d0:5d:0a:27:00:dc:
ce:91:33:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:18:43 2024 by rpki-client on console-ams.rpki-client.org