Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json)
Hash identifier: AC+f1ZEVFgaFxkg9csWGQxU6KnB8c5YYwP9zDziEux0=
Subject key identifier: 63:B2:B1:2D:F8:42:9F:F7:F7:50:60:23:3B:95:2F:0C:26:0D:3C:38
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 01901E58AD69FA8315520B68DAE13D55A9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
Manifest number: 04F1
Signing time: Sun 16 Jun 2024 00:00:46 +0000
Manifest this update: Sun 16 Jun 2024 00:00:46 +0000
Manifest next update: Mon 17 Jun 2024 00:00:46 +0000
Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: AEYULTsJoMExV0NGeSYjnZX6Lo+mJR1NoT+i9vVmlYc=)
2: JnCeM_UrHxSagSWeEYKuxVT_RsE.roa (hash: Nqc0kLRKWhdceFL4S+WkkPQoNAcD+SOL0v5npMpEC18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:ad:69:fa:83:15:52:0b:68:da:e1:3d:55:a9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Jun 16 00:00:46 2024 GMT
Not After : Jun 17 00:00:46 2024 GMT
Subject: CN=63b2b12df8429ff7f75060233b952f0c260d3c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:38:bf:d8:09:08:15:5d:81:34:6e:8b:d4:
0e:4b:5f:d0:45:7d:b8:33:97:9a:71:31:59:99:a5:
e9:3e:74:ed:88:7c:48:d7:25:a3:2d:f8:f5:24:15:
00:86:c1:6d:42:ca:90:62:fa:43:12:d6:f5:d1:3c:
94:dc:e2:de:3d:e0:f2:e8:c9:08:84:1b:da:8b:dd:
06:68:d2:da:63:09:f7:26:d4:90:92:1e:fb:78:7a:
38:6d:b8:4b:1e:be:56:a9:dc:6f:cd:0b:8e:50:38:
66:c8:d3:1c:18:8a:10:27:b4:64:73:6f:12:d3:b5:
f0:78:e9:7c:3f:e8:6f:ee:17:ce:26:f2:55:45:5e:
6c:71:cd:e4:8f:33:e6:c7:67:04:b7:46:b3:48:c7:
be:86:00:f5:bf:a1:ad:9b:68:15:18:c8:a1:15:ab:
31:9d:f1:03:b1:dd:7a:e3:fb:12:38:42:75:a4:16:
60:e6:78:9e:83:a5:97:53:06:a8:6e:ab:a2:b8:1e:
4a:5e:22:3c:3e:f6:d5:19:3f:6e:75:dd:11:f1:fd:
99:29:2a:10:f2:db:f4:4d:59:bc:19:98:c5:04:38:
91:a2:b2:e2:f6:3c:52:9a:43:b0:90:70:15:28:ec:
2a:2d:c9:af:64:67:9a:6f:0e:c0:7c:6e:29:03:24:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B2:B1:2D:F8:42:9F:F7:F7:50:60:23:3B:95:2F:0C:26:0D:3C:38
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ce:2b:a7:46:d7:b0:aa:41:f7:7a:3d:d3:11:a5:9a:4d:3f:
86:fc:51:b3:a9:a6:75:79:78:6c:e3:1e:8f:4f:d0:ba:dd:e0:
b2:0f:4f:06:66:d5:f5:51:32:a2:de:ab:45:46:ee:91:7b:9b:
50:a8:80:ac:32:47:cc:88:d0:a7:9b:0a:fc:1e:d5:24:4b:84:
e2:d4:98:ff:79:ba:9f:98:26:c0:12:1a:5a:a4:9b:c0:af:45:
7f:3c:e0:d8:5d:5f:4b:9a:93:f0:95:3b:d4:b8:85:63:85:b2:
be:d7:4c:42:3b:cf:78:fb:3c:4f:c5:7a:96:5d:36:8a:0c:28:
7c:48:70:83:46:2d:e9:07:ae:3e:3d:b6:02:49:30:dc:57:bd:
5e:52:a2:a8:b8:3a:44:81:c7:5c:ee:b5:06:f5:ad:b8:5d:2e:
80:bc:9c:61:1d:30:1c:cf:5b:6a:e2:eb:4a:89:8d:f3:b1:7f:
b3:33:e9:d2:5d:11:bf:df:e3:62:de:fd:32:0d:9c:af:ea:8c:
d1:71:d5:46:4e:51:ac:f0:18:c3:91:7d:28:49:11:65:d9:c0:
3c:89:a7:86:03:93:9d:07:ef:a2:60:36:13:31:31:de:8d:b0:
83:dc:ba:d7:ef:d7:75:8a:31:6e:8f:89:41:f3:3e:c2:47:be:
a3:3b:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:51 2024 by rpki-client on console-fra.rpki-client.org