Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
File: CFeH5l60_NZuM0C2Kt5HygCRnc4.mft (raw, json)
Hash identifier: 8ylZ+7v4STgEf4haAlBXfVEoQ0G8/CWiU7v78JWc/NQ=
Subject key identifier: 03:6E:18:F3:24:96:11:0E:97:92:D1:8A:9B:51:52:45:97:39:EB:37
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial: 019356F6AFFAA966BCA248EDF6586932FC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
Manifest number: 02E1
Signing time: Sat 23 Nov 2024 03:00:27 +0000
Manifest this update: Sat 23 Nov 2024 03:00:27 +0000
Manifest next update: Sun 24 Nov 2024 03:00:27 +0000
Files and hashes: 1: CFeH5l60_NZuM0C2Kt5HygCRnc4.crl (hash: yGVKdRe1u+0LhzNoqBGH9ocMTjSQ9F86jl02Z97hdKA=)
2: hNRI4S_udptfEHNLzR1cCdL0Fyc.roa (hash: aqWVSi2tbawPqoXxM+/JB/gKcBdcEu9o5eXepRCVXNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:af:fa:a9:66:bc:a2:48:ed:f6:58:69:32:fc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Validity
Not Before: Nov 23 03:00:27 2024 GMT
Not After : Nov 24 03:00:27 2024 GMT
Subject: CN=036e18f32496110e9792d18a9b5152459739eb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:b7:f2:60:1c:a5:26:99:2b:09:31:c5:43:
29:09:96:fd:7f:16:79:94:c3:ee:76:59:1d:eb:89:
6a:b1:a6:31:d8:3e:f1:7f:db:a3:12:cb:df:6f:1a:
66:c7:54:3b:ed:0b:12:1c:7f:0a:c9:de:14:fe:98:
56:a3:37:c5:98:5a:5f:5a:9e:04:b0:c4:29:2e:5b:
a8:a8:a3:a3:5f:5f:15:4a:1b:e2:1f:1c:7b:68:45:
53:35:5c:96:54:de:80:45:7a:ab:8e:cc:bd:19:45:
32:c4:eb:14:67:f4:7b:3e:34:e5:01:92:ee:53:bc:
d0:01:16:9b:49:6a:0e:71:16:f3:75:50:bd:f9:68:
f5:9f:dc:dc:09:6d:6a:89:f6:6b:90:77:4a:fb:ab:
b2:7d:8b:cd:b3:63:87:4e:e8:cb:71:1f:45:7b:b4:
9a:56:73:ab:b6:68:bc:8c:eb:43:b7:41:b2:b9:01:
1b:20:9d:9e:7d:56:4d:34:3e:fe:82:28:ef:2d:7d:
d9:e2:17:72:47:99:67:51:4d:4b:0f:b4:cc:4c:0d:
72:6e:97:22:ec:1a:cd:41:b4:8c:45:ff:64:06:75:
b5:92:f1:8e:77:34:fb:3d:88:1a:32:a3:48:20:50:
57:93:e1:c3:b8:75:04:6a:86:79:11:42:42:fa:b9:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6E:18:F3:24:96:11:0E:97:92:D1:8A:9B:51:52:45:97:39:EB:37
X509v3 Authority Key Identifier:
keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:44:1b:86:4b:c8:85:cf:5f:08:a7:ce:2e:3b:b9:a5:b0:8d:
05:93:b1:1b:2e:d4:f4:c1:ab:5e:f5:88:37:98:a0:6f:b6:6d:
41:8a:8a:49:58:da:11:e9:00:8c:97:22:5d:ae:ab:fc:73:f9:
e9:aa:ae:63:df:a6:23:44:a2:6d:28:e3:6a:67:90:97:1d:72:
2d:de:05:38:a1:b8:d0:4e:b4:b1:6a:04:76:7c:32:4a:9f:53:
93:2c:d0:e7:a2:58:20:7e:e7:0e:26:35:86:bb:f6:ee:4b:5d:
16:5b:54:43:bd:0c:0a:1f:25:8b:16:d5:53:f0:4d:3e:f6:0a:
e1:9e:dd:65:31:f9:c5:93:e2:2d:14:ec:dc:b7:94:7a:e4:1b:
45:c8:b3:31:56:70:f5:61:45:7f:13:73:02:10:60:34:65:70:
42:e7:36:7e:7c:88:2a:1d:85:cc:a3:28:41:b3:18:88:f4:28:
f4:dd:4b:f3:46:1d:8a:1a:76:dd:e8:18:e7:08:fa:58:d1:70:
f6:7a:93:21:6d:13:d9:6f:d4:f9:18:d3:db:94:ab:c9:59:61:
f3:4e:71:b0:73:4b:01:a1:93:76:60:d1:02:8d:e9:dd:07:c0:
43:2d:97:1f:99:60:54:10:93:0c:b7:eb:89:70:dd:06:59:80:
2a:46:fd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:42 2024 by rpki-client on console-ams.rpki-client.org