Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: TIVNi1etO0l7PNppoMnpQIa6jkJXtgwJl7X4oNn6QPI=
Subject key identifier: 99:C5:02:8F:B8:84:E1:80:76:26:90:57:A6:C0:65:09:FB:CD:27:76
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 0191F9D955019D4BD553ABA5A6BBD718CD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 0139
Signing time: Mon 16 Sep 2024 08:00:55 +0000
Manifest this update: Mon 16 Sep 2024 08:00:55 +0000
Manifest next update: Tue 17 Sep 2024 08:00:55 +0000
Files and hashes: 1: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: hnK5cOk2lqTUPlG3zxKYCHQr6/vsaCvH/zMF3sIjkFQ=)
2: qQfqPmvwMb8lXAOinWFml__ZEqA.roa (hash: ZF2Ed+3AlZx31pdfIz7tzjUv8o6P1u5TWuRwlRBbUjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:d9:55:01:9d:4b:d5:53:ab:a5:a6:bb:d7:18:cd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Sep 16 08:00:55 2024 GMT
Not After : Sep 17 08:00:55 2024 GMT
Subject: CN=99c5028fb884e18076269057a6c06509fbcd2776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:a2:37:c7:fc:70:45:b2:03:4c:54:4c:ff:
61:97:ae:de:1d:2a:84:bf:51:c7:a7:22:c6:55:6e:
f9:47:65:d8:9a:72:7f:6f:d0:52:bc:a3:ea:5d:92:
dc:4e:a3:b4:a6:46:73:2d:a4:9a:34:c1:1b:7c:5e:
63:e0:3e:8e:38:fb:51:55:a1:71:1d:9a:69:3a:73:
f5:42:ae:56:b1:82:38:e6:15:ee:66:4a:29:c8:80:
4c:f2:40:05:7f:c0:58:87:28:90:8f:c0:35:48:89:
f6:18:6d:ff:5a:b0:a3:7b:77:82:01:3c:88:cc:06:
72:9b:d1:31:a7:62:13:72:3f:9e:ba:7a:e4:8c:3c:
46:b5:c9:32:40:ab:5d:a4:c0:ac:23:e4:64:b0:da:
8b:f5:41:ad:d3:33:d9:e5:c0:19:db:cc:63:18:9e:
52:c9:c8:ef:cf:63:43:90:99:15:ba:74:e8:15:f8:
62:36:be:a3:6a:ed:90:be:a1:d8:3a:84:6c:7d:b1:
17:95:ce:7c:d2:7c:d0:97:4c:8f:11:1d:8f:f8:7b:
47:7a:60:9e:61:aa:8f:91:cc:34:84:6d:b7:1e:49:
19:29:8c:f7:94:80:ae:da:a3:a4:f1:aa:9a:3b:29:
ad:16:27:ef:8e:a3:9e:34:ac:c4:5f:83:0f:1f:15:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C5:02:8F:B8:84:E1:80:76:26:90:57:A6:C0:65:09:FB:CD:27:76
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:20:60:10:9b:87:e0:39:ab:94:c5:ef:9f:92:0a:5c:39:26:
3d:c9:e9:d4:1a:be:ac:20:d1:ef:4c:ff:c9:04:43:0a:f1:d6:
4f:f0:b7:58:a4:0d:2a:95:f4:d9:c7:9e:a4:02:9e:c7:54:74:
e1:08:47:3d:bb:60:a1:a1:b8:8c:c9:23:1a:c5:a2:08:ab:2a:
8e:e6:5a:f5:61:e3:2d:00:8e:47:d8:66:de:58:2b:60:1f:0d:
90:d6:19:aa:86:46:79:45:3e:1d:b8:19:a2:64:99:cc:b2:6b:
2e:d8:d5:82:10:8c:68:3d:ba:7d:41:fb:dc:e7:00:cc:ed:61:
a5:57:10:0e:cc:45:bf:1e:44:5b:a8:f5:04:8e:b2:55:57:31:
4f:7c:59:19:5e:28:cd:f5:1a:1d:58:a8:8e:74:aa:6f:c2:88:
61:66:b7:2c:1e:bc:65:1d:3c:de:0f:4e:a2:52:42:7f:24:92:
27:d1:fa:6c:20:db:63:65:c5:8d:33:9e:ac:69:12:5b:3b:a7:
95:c8:23:cc:61:c0:ca:85:5c:a9:61:78:b4:63:c1:cc:5b:0c:
11:53:34:ac:3c:3b:b2:ff:3d:7e:4d:43:c6:2c:63:98:06:45:
24:a6:88:51:1c:8a:08:cf:e4:ba:a6:f7:9e:0b:71:e0:f9:a1:
58:9a:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:21:16 2024 by rpki-client on console-ams.rpki-client.org