Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
File: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft (raw, json)
Hash identifier: XfO7HI4hL9asnh72Bdf67JMPBjFB9YzdH+NYfBeTDeA=
Subject key identifier: 9F:1D:E7:D4:33:F0:92:73:01:3A:73:1B:1A:F0:E2:03:23:6D:4C:90
Authority key identifier: EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
Certificate issuer: /CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Certificate serial: 019367EB473AD86637385E76EF9992CB5A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
Manifest number: 09E6
Signing time: Tue 26 Nov 2024 10:01:32 +0000
Manifest this update: Tue 26 Nov 2024 10:01:32 +0000
Manifest next update: Wed 27 Nov 2024 10:01:32 +0000
Files and hashes: 1: 7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl (hash: Oitn7M8IsClxXfn0Zua+H8pDv9Ra0OwM52Rpo4UZNgs=)
2: YPw1-ebVcxZm9dzraArn2Eeq7ZQ.roa (hash: nVAPtubCFlxJn24d+K75yT36a1qRX+izhXTQQRSNPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:eb:47:3a:d8:66:37:38:5e:76:ef:99:92:cb:5a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2918069b21e165f8cc942a6793fde5b1655be6
Validity
Not Before: Nov 26 10:01:32 2024 GMT
Not After : Nov 27 10:01:32 2024 GMT
Subject: CN=9f1de7d433f09273013a731b1af0e203236d4c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:c6:06:fa:0e:5e:fd:c8:d4:9b:d4:11:da:
b9:ac:91:f9:3c:04:53:ab:ee:fb:b0:b7:80:6a:82:
ab:6a:e0:a1:d0:da:b0:1b:75:5b:10:8a:bd:5b:66:
92:75:ed:ad:65:de:06:7c:11:bc:05:df:1d:ac:bd:
ab:31:3b:89:68:a9:6e:03:20:cd:6e:21:91:a8:29:
5f:7c:be:a5:c6:79:31:7b:5e:2e:ad:f7:73:dc:02:
a2:58:05:17:79:37:32:8a:55:01:31:20:1c:1d:fe:
33:f4:6f:c8:c7:99:33:94:fb:16:95:a4:46:93:79:
1c:5c:6c:b1:51:89:67:e5:bc:87:67:bc:ab:ff:11:
1e:d0:b4:00:f2:cf:21:2c:9d:b8:e7:3f:27:53:79:
32:5e:de:8b:28:4c:64:39:3e:ef:0b:9c:d5:80:14:
ba:c8:25:c4:a7:01:39:14:76:5b:78:04:44:42:61:
6c:61:98:ad:31:fd:6e:22:5e:8a:42:ba:63:9e:a1:
28:02:41:6f:32:2d:27:73:3b:5d:61:91:0c:75:f3:
99:ea:fb:59:9f:36:cc:c1:6c:43:f1:9e:45:d1:77:
fd:1f:c0:53:3c:e1:49:c4:4f:8d:a2:be:3f:aa:84:
42:f1:31:22:d0:47:37:3d:b0:16:34:eb:ad:bd:1d:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1D:E7:D4:33:F0:92:73:01:3A:73:1B:1A:F0:E2:03:23:6D:4C:90
X509v3 Authority Key Identifier:
keyid:EC:29:18:06:9B:21:E1:65:F8:CC:94:2A:67:93:FD:E5:B1:65:5B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/36ccba-85f0-4001-b939-5f6980b8c467/1/7CkYBpsh4WX4zJQqZ5P95bFlW-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:40:9b:86:b9:a7:b3:47:2c:af:f1:ba:eb:79:49:a6:42:3e:
ce:a5:6f:e6:6f:67:06:59:6a:b5:a5:27:d3:59:62:75:6f:e7:
a5:ee:79:ed:76:66:4f:b9:f2:66:d5:9e:12:68:87:56:25:ed:
a2:58:de:8d:5e:23:5c:dd:16:99:fe:65:df:09:c1:69:df:12:
d8:99:9d:00:33:ec:3d:6c:32:67:41:01:6f:b1:1e:8f:7a:bc:
ef:10:2a:ad:1d:da:35:ec:86:cf:9f:fc:73:c9:82:46:d9:03:
9e:e3:a3:a7:2c:de:1b:00:42:c8:e3:2c:cb:40:8f:70:7e:aa:
12:ce:1d:ad:80:35:33:c0:bc:a5:0f:ec:05:46:c6:eb:e4:9d:
56:8a:d2:85:7b:2c:ca:76:45:1f:ac:1b:b4:61:a8:1b:5c:48:
d7:75:c1:12:16:92:e9:36:4b:ce:7d:91:40:03:9d:19:83:c9:
40:ba:73:4a:6d:a5:48:b1:9c:de:60:63:eb:c3:d7:3f:43:41:
bd:54:ea:35:ca:06:fa:7e:2d:35:62:38:05:3c:8e:bc:b4:47:
59:51:a4:42:cb:a5:43:43:d4:94:f0:cf:aa:24:15:b5:07:5c:
4b:5b:8b:08:ea:c0:93:81:ae:90:db:d4:5d:1a:45:ec:dc:02:
91:08:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:28 2024 by rpki-client on console-ams.rpki-client.org