Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: q1oD88WFJzbHX2gyt6IcPjjby4Q/+zxTj5fVUpgnIxs=
Subject key identifier: F9:FC:E8:7A:71:A2:53:72:70:94:DC:72:93:56:AC:AF:5C:A8:6F:9B
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 01935877423FDCE161C40EE4DDC1AAE9C4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 10:00:30 +0000
Manifest this update: Sat 23 Nov 2024 10:00:30 +0000
Manifest next update: Sun 24 Nov 2024 10:00:30 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: mihjFlqSI+/1MdvUoaOKoXBEYgTF6eotR/X2Oe7OpfE=)
2: yJaTd3auacSUdgRFCqoOvuQw5p8.roa (hash: sIFQu/AXPg680FikaxA1Ly8IKILv9WECEYptQJA9K/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:42:3f:dc:e1:61:c4:0e:e4:dd:c1:aa:e9:c4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Nov 23 10:00:30 2024 GMT
Not After : Nov 24 10:00:30 2024 GMT
Subject: CN=f9fce87a71a253727094dc729356acaf5ca86f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:4a:5a:6b:cf:4b:a7:fa:6d:35:0d:b7:20:
02:0f:58:0b:7e:c6:c8:fb:74:0d:a8:a3:be:64:67:
c5:3b:c2:32:b1:95:c3:78:17:9b:05:ea:d1:a4:ea:
8a:33:36:11:a6:6b:e3:c1:68:a1:53:85:2c:97:65:
22:9e:8a:18:58:c3:6d:a0:0e:0a:12:15:62:3f:28:
39:fe:24:7d:77:33:e6:20:69:bc:0c:e6:2c:c7:04:
2d:a3:43:60:0e:12:b9:da:8d:42:ce:1d:97:ed:ed:
21:56:23:d7:9f:fa:3c:e0:d1:65:d2:e9:69:2d:5c:
68:e9:2e:0c:be:07:74:ad:fe:16:b7:d1:39:e8:fc:
aa:c0:4e:ab:aa:bb:a4:4c:d5:84:ac:a3:3d:9d:b7:
46:34:6a:bd:51:9b:fe:30:05:28:99:13:db:22:80:
9a:e9:2e:d3:df:fa:ed:8e:62:97:e8:2d:c6:ed:61:
a9:24:4d:32:41:1e:56:33:dd:16:52:59:af:09:2c:
00:90:f7:12:b0:e9:d9:58:a8:89:9e:3e:38:a3:a5:
aa:d8:43:48:eb:8e:61:49:84:6e:1d:ce:aa:ea:f3:
96:ef:99:22:9a:9a:64:44:04:fa:97:02:85:fc:ce:
77:b8:46:48:19:a9:95:8e:fe:e6:9f:62:f1:cb:09:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FC:E8:7A:71:A2:53:72:70:94:DC:72:93:56:AC:AF:5C:A8:6F:9B
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e0:07:1a:0a:e0:97:25:79:c0:34:35:62:6a:5d:6f:0c:1a:
36:9c:92:ef:1c:5d:a6:e6:96:9b:ce:09:6f:5c:61:12:5b:91:
af:9d:c6:3d:28:e7:5b:fc:b2:8c:a5:cd:3d:6d:e5:b3:d2:0b:
90:2a:4a:d4:5d:fc:b0:73:fa:52:33:83:06:53:79:4f:51:84:
29:6b:51:d0:2f:62:56:9a:37:6d:20:19:2e:76:3d:38:57:43:
39:95:d8:75:93:61:84:2e:aa:e0:50:0f:83:dd:64:26:71:78:
c2:48:1f:19:01:9e:4d:87:86:53:c5:ab:5f:f4:95:48:22:ee:
84:85:bb:81:fb:28:91:10:1f:ec:86:86:8a:da:ec:23:c3:cd:
69:11:73:bf:d6:d3:3a:22:fb:e4:bf:37:e4:f5:a7:d7:88:cc:
fb:7b:93:48:71:63:0a:3d:a7:76:f2:1c:59:ec:0c:05:bb:33:
7d:ff:81:1a:f6:8e:bf:7b:75:b0:2c:53:a8:e9:8a:89:19:aa:
e5:af:e6:ab:8f:2e:f2:7a:ca:78:df:1a:68:06:39:1e:3f:48:
f9:d8:85:3c:c5:89:d6:f1:c1:8a:52:fe:0a:2c:0d:fe:b9:27:
a4:08:7e:7f:08:b1:06:e5:84:b9:ce:ad:1a:36:0a:c3:f4:65:
54:9e:2c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:57:09 2024 by rpki-client on console-fra.rpki-client.org