Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: MYccSKFOoEzgkVSXELefVAeSIkuq0SeayjRDBzuOgGw=
Subject key identifier: 8D:F0:0F:19:EB:E6:CA:40:C5:D5:BA:AC:12:51:02:25:6F:DB:DD:A2
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 01905F9477A74823D5A1A37EF14DE745C9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 11E9
Signing time: Fri 28 Jun 2024 16:01:23 +0000
Manifest this update: Fri 28 Jun 2024 16:01:23 +0000
Manifest next update: Sat 29 Jun 2024 16:01:23 +0000
Files and hashes: 1: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: ENjFKzvJqaiezsyONavel/UKcH8o3FS6dlGh3Px7fxI=)
2: yAQi_JmZBYvY9Knr3ls8S3CRUls.roa (hash: A7usJXlUxK6zOrYK5gG5oqFRotiVPH23BXEtQz+qTh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:94:77:a7:48:23:d5:a1:a3:7e:f1:4d:e7:45:c9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Jun 28 16:01:23 2024 GMT
Not After : Jun 29 16:01:23 2024 GMT
Subject: CN=8df00f19ebe6ca40c5d5baac125102256fdbdda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:53:22:90:03:bd:bb:4d:97:c5:7b:1e:ee:
8c:3f:bd:2c:1d:90:d8:43:36:49:df:90:c8:f6:1a:
9a:fe:0b:06:a1:b1:42:52:e6:ef:cf:48:02:4f:59:
be:55:c7:af:57:59:10:2b:0a:2e:ca:f4:c1:c2:d4:
71:d8:fd:74:dc:aa:58:70:60:78:9e:15:e6:65:1a:
85:0a:b0:f0:40:3c:97:19:5f:cb:df:67:82:9b:4a:
5c:24:52:d6:cd:af:d0:ec:de:18:37:6a:54:a7:7f:
ac:6f:b8:4b:01:d7:05:08:f8:b7:3c:8b:8d:4e:74:
7a:37:37:f6:7a:c8:0d:8c:b9:2b:b0:84:0e:9c:6e:
90:da:20:2e:d2:c3:82:f5:31:fe:a1:18:95:86:18:
77:42:61:34:10:65:9e:6b:06:10:40:cc:b4:34:7f:
ba:04:4c:41:87:6f:75:a9:5b:fe:35:d7:2a:dd:a0:
82:a7:58:36:6a:c1:4d:d4:ad:1a:8b:1d:75:58:6f:
00:02:fe:c6:75:fd:a7:70:94:28:b0:1d:ca:52:20:
e7:05:7c:f3:df:db:3d:d5:d7:93:b8:3e:31:d6:13:
36:c1:0e:4f:98:2e:09:b0:59:45:92:67:d0:d6:06:
74:8b:7a:55:f5:8b:b6:f2:4b:ed:b9:5b:7f:6e:72:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F0:0F:19:EB:E6:CA:40:C5:D5:BA:AC:12:51:02:25:6F:DB:DD:A2
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:93:5d:fa:3d:02:f9:30:4d:1c:05:7c:64:2b:dc:19:53:17:
82:78:5b:86:cc:90:41:8a:ac:01:d9:0f:9a:6f:fd:95:da:3b:
6a:c2:72:f7:42:ad:ee:36:04:91:00:6c:7d:e9:f2:82:3b:5f:
68:19:32:a1:31:c4:7e:4a:b0:3d:2c:ac:5d:3d:86:56:bf:e4:
5a:b6:f8:d9:c0:c7:a1:0d:e3:59:6c:19:d9:6b:51:ba:ae:31:
73:ef:82:fd:32:b4:03:79:be:ad:68:d9:08:5e:21:2a:20:12:
ab:d8:f6:77:e6:ba:02:30:87:17:50:e5:00:a5:11:44:12:0d:
2e:d4:6e:c1:3b:f1:a5:57:be:8a:79:4a:56:9f:72:85:b0:ea:
91:01:e1:9f:7d:16:72:e3:39:cc:85:f6:08:8b:ff:18:cf:d3:
b6:f5:c1:01:72:86:32:31:ce:31:47:a8:03:8f:0b:be:0a:66:
55:db:da:ff:9a:74:9c:1a:50:ae:0f:13:a3:de:a2:3a:48:57:
92:38:f8:ad:51:26:88:0c:0b:c8:cc:10:a8:ec:4a:8b:2c:f6:
f4:b2:93:7e:d7:b6:b8:2a:1c:fc:0b:3a:ba:2c:bf:53:45:f2:
8a:ab:a9:7f:34:04:f8:04:56:d5:e0:a3:01:19:ac:cf:e1:2f:
f5:a3:1d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:40:37 2024 by rpki-client on console-ams.rpki-client.org