Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier: 1kOTOedjdXWNHH9575Vtbfc14k+WfkgYZ967k0Jgmjc=
Subject key identifier: A9:FF:C7:2F:8B:A7:CC:D3:EC:8E:DF:EF:1B:52:CB:BB:EB:85:F9:E3
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 01901EC71E63E2CD5D88AA43AD275C5E9F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number: 0525
Signing time: Sun 16 Jun 2024 02:01:24 +0000
Manifest this update: Sun 16 Jun 2024 02:01:24 +0000
Manifest next update: Mon 17 Jun 2024 02:01:24 +0000
Files and hashes: 1: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: KSBboltL9W+N3xjdMiisegzOhh2eV0DH/P5z4dZjD7Y=)
2: dThs0Y_gEV2FJQMxKlBWQyThSuo.roa (hash: 0hGFY4oC5PIsKVQtr7DEIpGbJ6P6Z+FxEOTxWqNM/aI=)
3: eBovQd7laMJDh7EXSoyMFy7n66Q.roa (hash: VTjxdL7XL4VnnXvmtNRxN4uUeKR3vTv9n/WpP39ttGU=)
4: kEzmBsQ_ujjkAaORkicXngGDk5k.roa (hash: ufUq5ylIwpjVf9t/GcjPGZobGjFZGJ55aHMogtJ6l1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c7:1e:63:e2:cd:5d:88:aa:43:ad:27:5c:5e:9f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: Jun 16 02:01:24 2024 GMT
Not After : Jun 17 02:01:24 2024 GMT
Subject: CN=a9ffc72f8ba7ccd3ec8edfef1b52cbbbeb85f9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:3e:4e:de:a2:5a:03:29:c9:65:af:80:66:
43:b3:3c:9f:6b:98:26:82:bb:e0:2b:67:e4:42:45:
94:2c:08:66:25:ac:5f:50:62:cf:bc:2d:f2:d9:47:
1d:59:d9:c0:86:9d:b4:51:ca:d0:03:05:49:5d:95:
9e:1e:1c:79:94:5d:95:06:0d:2e:3b:5c:6a:a8:72:
0b:53:b2:f2:b6:81:02:cb:d4:d6:47:72:d2:06:a2:
a9:b6:67:c0:56:0f:25:15:89:82:b6:ee:4d:f7:25:
7d:66:3a:3f:0d:6f:b2:f7:16:ba:b5:69:6a:05:ca:
17:ed:e4:de:2e:03:a0:e1:a1:31:b6:9e:59:0f:f4:
e3:8e:eb:69:c0:5e:43:52:e4:8d:5c:56:52:8b:29:
d1:f6:a2:17:ed:f9:b9:38:2d:2f:6d:56:e7:5a:59:
30:1a:5a:cc:66:b0:4e:e9:bb:50:46:14:dc:63:f7:
66:89:2e:dd:56:5c:c3:b5:ff:4e:c1:64:1f:b8:53:
bd:f8:bf:1d:bc:70:60:15:f8:a0:72:f2:96:a8:18:
df:4a:a4:00:31:a7:58:68:1f:98:39:39:a9:0f:b9:
d8:e1:bb:ca:ca:90:50:2b:ab:46:17:8d:f2:26:80:
06:af:a2:24:ba:22:78:06:d6:53:68:46:a0:c2:17:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FF:C7:2F:8B:A7:CC:D3:EC:8E:DF:EF:1B:52:CB:BB:EB:85:F9:E3
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8a:62:43:f1:7a:d9:f2:65:ae:a7:4a:8a:4c:1a:e0:ff:96:
e8:b6:b0:2f:49:23:64:c9:8c:8d:ec:c5:ba:1b:a2:ed:bf:5c:
24:b9:49:81:0d:c7:60:07:22:ff:fd:30:3e:49:92:a0:a1:7e:
25:28:17:a6:35:d8:c9:73:55:8d:d1:ad:03:d8:cb:66:a4:ca:
70:1a:4a:1b:30:ef:ba:df:88:bf:3a:e7:43:4c:96:9e:d1:15:
fb:d9:4f:e5:c8:85:de:f5:3f:7e:b7:0b:b6:de:44:86:82:78:
39:bb:66:d7:b7:9e:8a:e8:da:15:26:ea:66:76:d1:ad:98:50:
97:df:20:94:a4:95:38:e9:51:0b:e3:25:1f:37:4e:b0:77:9a:
bb:40:cb:a7:dd:93:9e:fd:08:cc:43:eb:ef:5b:53:3d:0a:fd:
3d:ac:ce:4e:52:dd:be:7c:3a:a3:5d:d7:13:8e:c0:fa:cb:64:
55:fb:6b:e1:dc:9a:9c:25:3c:3b:fd:66:cb:a1:4f:5a:19:32:
ef:4c:f0:56:b5:44:ba:ac:34:53:1b:75:19:34:ba:8b:47:eb:
37:10:ca:72:28:5d:cf:d8:cc:4c:c0:ee:93:ea:6a:35:ac:51:
08:2b:bd:da:c4:1c:70:02:1c:29:40:33:ce:0d:54:68:9b:3d:
c5:3d:8b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:16 2024 by rpki-client on console-fra.rpki-client.org