Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
File: CKkhe9gwYnyz5lfAuQY8giNN28s.mft (raw, json)
Hash identifier: 0ZJwbZgvqN4mya9tuk5iXUJE1QU5YK4kItK/7AGnkE0=
Subject key identifier: 77:08:AE:C6:7D:D6:AF:86:C2:34:FA:8F:FD:54:CA:69:2C:EF:12:15
Authority key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
Certificate issuer: /CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Certificate serial: 01901B2113D4A3EF5AA1C1F3A8618C22DD52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
Manifest number: 11C7
Signing time: Sat 15 Jun 2024 09:01:10 +0000
Manifest this update: Sat 15 Jun 2024 09:01:10 +0000
Manifest next update: Sun 16 Jun 2024 09:01:10 +0000
Files and hashes: 1: CKkhe9gwYnyz5lfAuQY8giNN28s.crl (hash: 0tNyEM9IiNYUY881XD8w6A4qI6m+p1tzdQ6vXvkadiE=)
2: apILGtQflvaLcBidaVY8RkDjP8M.roa (hash: 6v45IYxoAxgdE3XcrDJdNAI6e1uPTMz7j1Gkkd6Nr6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:21:13:d4:a3:ef:5a:a1:c1:f3:a8:61:8c:22:dd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Validity
Not Before: Jun 15 09:01:10 2024 GMT
Not After : Jun 16 09:01:10 2024 GMT
Subject: CN=7708aec67dd6af86c234fa8ffd54ca692cef1215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:4b:fc:04:66:1f:8d:be:e3:3b:08:fc:38:
d2:f9:90:0e:28:fb:33:ea:47:a6:74:de:82:1a:b5:
8a:f6:c7:a2:c2:c0:fd:34:06:9b:80:e8:98:67:02:
4c:55:8a:08:75:2e:f3:ae:5b:db:4d:be:44:27:49:
b7:c0:1a:af:79:17:05:c6:a0:cb:4c:0a:46:71:65:
93:7c:ad:d3:69:15:40:27:de:28:6b:5d:0d:05:1e:
b1:4f:d5:5f:6e:df:6e:df:d4:69:e6:fb:c3:b4:67:
c4:73:ec:d6:9d:ee:4d:3e:04:c3:25:41:fc:e7:61:
67:28:55:25:7b:e4:3e:da:1b:69:a4:21:63:74:ba:
12:a4:51:77:9a:11:ab:e9:7b:55:f4:61:d7:9f:0b:
e4:ba:93:d1:f1:e8:82:ed:31:38:0f:25:29:6f:ec:
cd:7b:8a:77:76:a9:f8:71:80:e1:2d:f7:01:cc:c1:
7f:c0:c7:cb:e1:e2:a6:b5:db:c4:80:08:49:73:37:
83:8d:9d:ab:86:05:82:02:28:b5:be:7a:f7:e7:a8:
7f:12:b3:d5:5c:04:ec:cc:42:d2:48:69:28:a1:70:
76:1e:38:f5:62:3f:3f:6a:9e:e3:13:5c:dd:63:b2:
a7:3e:66:3a:bd:f3:fe:a4:0f:b4:ce:42:64:7d:76:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:08:AE:C6:7D:D6:AF:86:C2:34:FA:8F:FD:54:CA:69:2C:EF:12:15
X509v3 Authority Key Identifier:
keyid:08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4e:6f:92:00:99:a8:a3:38:68:91:0b:b7:13:06:03:d1:47:
23:d5:06:e9:5b:65:e7:e4:b3:15:59:e0:19:db:b4:3a:dc:b3:
89:a8:22:be:91:3f:e9:40:2b:8a:74:da:71:03:a8:28:c3:8e:
72:ae:b4:a4:a9:af:56:40:37:bf:ca:6a:47:ed:0a:b3:63:f2:
be:86:b6:18:f2:e8:30:93:f1:79:6b:03:6e:1f:83:1b:96:66:
f9:a4:7f:f7:da:a6:10:93:1d:e5:ab:68:f6:e4:da:01:00:85:
0a:c5:59:f8:c0:b8:7a:89:de:32:5d:f5:89:7c:87:fd:d0:ea:
9f:2b:2a:c9:84:42:09:d4:cc:73:50:66:51:ed:16:52:df:65:
c1:56:8e:13:1c:be:a8:48:d0:e8:2b:45:91:0b:4c:87:06:85:
32:8e:46:c7:f5:ce:7c:3b:a2:27:29:ab:55:2c:00:11:07:fe:
b7:18:2a:c8:15:20:f7:21:61:00:96:2d:86:ec:2a:2f:cd:81:
a6:55:3d:e3:a7:45:21:29:2d:17:14:84:ad:40:ab:5e:e0:27:
dc:e8:3a:d2:d1:7f:ce:aa:63:f7:1d:11:c3:4d:e5:84:e9:dd:
a6:86:04:52:9f:b4:31:d3:88:5f:ba:a0:93:be:9c:50:45:35:
d1:83:6f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:51:06 2024 by rpki-client on console-fra.rpki-client.org