Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: D5yKQUk4mNaEkpbI8lemYwB/GDlMUIJhHmvr8RucrTA=
Subject key identifier: 5B:A5:9C:A3:A4:39:BF:BB:F2:DD:EA:9E:4B:17:59:77:8F:92:63:5E
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 01901DED17B85D9B14854C4CE797122EE359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 09EE
Signing time: Sat 15 Jun 2024 22:03:15 +0000
Manifest this update: Sat 15 Jun 2024 22:03:15 +0000
Manifest next update: Sun 16 Jun 2024 22:03:15 +0000
Files and hashes: 1: 1MHjz11tSDSzqTLg4pv0prV8I4s.roa (hash: /f9tshTvtqrUIT2RjNgmkvB+G5K9sNk5rpVdP3+bne8=)
2: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: TC9rpmCxV/L/NHQyjhuLUp5ocLoCR8D90SXgWUoGcq8=)
3: ywmvdxuATAVZRgO1PVAcVFaOIlE.roa (hash: dVEwHyJX1y05nWOyx7+6R5bqYtf88VDlAh1PL8nBzTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:17:b8:5d:9b:14:85:4c:4c:e7:97:12:2e:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Jun 15 22:03:15 2024 GMT
Not After : Jun 16 22:03:15 2024 GMT
Subject: CN=5ba59ca3a439bfbbf2ddea9e4b1759778f92635e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:2f:5d:a5:88:d8:53:3b:b8:55:88:d8:97:
a6:d8:fb:ec:1f:cc:d8:2d:68:fb:fd:dd:53:e0:da:
4f:1a:f9:1a:d7:e9:21:e8:05:ce:0d:20:48:ca:2d:
14:d0:de:c3:41:eb:ed:95:2f:a1:44:cb:1f:ab:27:
83:b1:b8:15:80:53:b1:d7:f7:27:63:d7:7d:4c:f9:
49:c3:1d:5e:a2:01:44:0b:f7:10:53:0c:76:2e:76:
41:04:3a:22:6c:cf:e2:50:6e:8d:3e:b6:92:fb:a4:
3e:1a:d3:6b:50:43:a3:cd:5c:47:16:5c:33:b4:95:
d5:76:9e:98:8b:ba:2e:16:f5:37:72:7e:e1:6b:57:
4f:2c:de:14:6d:9e:64:29:17:b2:cb:ed:1d:d5:24:
cc:9e:d3:70:b7:f2:09:96:5e:2c:e4:05:d0:48:d9:
c8:f4:9d:53:5e:ef:06:1c:b1:27:71:77:9b:12:23:
df:25:3e:91:a9:f5:3a:98:09:e7:09:75:83:32:b6:
a5:37:93:10:9f:d3:f0:96:97:e5:94:29:d6:a2:dd:
4c:f4:ae:13:43:cc:e3:ca:08:5f:79:84:ff:b0:04:
fa:1d:fb:eb:66:77:3c:92:55:ad:fc:03:b4:d5:6c:
f5:03:39:75:a8:ff:bf:fa:d4:6e:db:64:24:de:57:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A5:9C:A3:A4:39:BF:BB:F2:DD:EA:9E:4B:17:59:77:8F:92:63:5E
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:35:bc:ba:ab:48:67:8c:ee:c5:2e:42:79:5e:f3:cd:ea:61:
e2:24:d3:34:fe:5c:91:7a:51:ef:28:44:e9:d0:e3:0a:94:fc:
c9:a6:b3:29:fd:d6:03:da:d5:78:8c:5c:3e:0f:e5:6e:19:07:
5d:cb:88:27:52:12:50:fc:36:c3:eb:60:a2:73:5d:fc:9c:50:
91:73:48:dd:b4:68:43:40:39:9c:9b:c1:71:18:ea:8c:b0:89:
eb:a1:4f:af:a0:62:9c:78:91:c5:32:db:10:57:63:6e:e2:5f:
53:66:a9:76:0d:dd:61:7d:da:bb:35:2c:e3:28:ac:92:fe:b0:
6d:8f:9d:93:fc:23:48:2d:12:6d:49:cb:85:b0:9e:f2:cf:f8:
70:40:fc:55:86:58:08:cd:2e:95:c6:32:c0:f1:e7:d6:15:58:
77:9c:73:87:13:d2:4e:a3:9d:f0:7e:1c:46:cf:9c:b3:cf:25:
88:8f:a7:af:40:a4:98:ce:3f:8d:73:1d:a2:dd:c0:47:a0:df:
e5:b9:ab:76:f4:6f:c1:fe:19:82:70:8c:43:d9:a4:57:a5:f3:
71:81:c6:70:ea:c3:c1:ba:c9:d9:9a:01:e8:bb:98:3f:3d:8d:
b1:b6:a3:3b:66:37:d9:b5:34:9b:1e:d5:ef:7a:cb:3f:4d:44:
92:49:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:53:38 2024 by rpki-client on console-ams.rpki-client.org