Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: U9iy8ltd8eW+jokWSm6+CthmdfFBKHPoi76g2ojY5Cc=
Subject key identifier: BB:21:58:CC:A4:26:1A:79:8C:31:F0:1D:D0:7E:AF:9E:E1:E2:B9:93
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 018F86A37E195AA64E599F5F73A3358EE680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 117C
Signing time: Fri 17 May 2024 13:00:12 +0000
Manifest this update: Fri 17 May 2024 13:00:12 +0000
Manifest next update: Sat 18 May 2024 13:00:12 +0000
Files and hashes: 1: 1-pwiJ07OCSLpkXrLleDm-jkQqCY.roa (hash: HEnUlkEkRtS0K77fRjqmp07xZjGWsFTl1dVsszYghK0=)
2: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: qp9n5S+Ifh8yCZRO71icTaXcQi6szpdNUkEBXMo1SJA=)
3: jfmMlPqFOdf8CqytGu5LKyPRsY8.roa (hash: d/BME/oHNQOQEKJzlhOBrDYyCFn4Gnp2rp6jyoPGXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:a3:7e:19:5a:a6:4e:59:9f:5f:73:a3:35:8e:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: May 17 13:00:12 2024 GMT
Not After : May 18 13:00:12 2024 GMT
Subject: CN=bb2158cca4261a798c31f01dd07eaf9ee1e2b993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:e0:9f:fc:ae:b9:6d:aa:f3:57:8d:0e:41:
8a:70:ed:ce:9e:ab:87:36:6f:90:a8:77:ba:0b:7e:
0d:9c:0c:b6:31:3c:d2:18:44:59:d2:5c:dd:b3:7e:
39:50:04:22:fe:2c:8d:8b:cc:87:23:3b:3c:2f:a4:
a7:da:1a:54:cc:22:c6:e3:12:5a:b4:25:e9:ff:f7:
d7:16:87:12:9b:7f:cd:87:19:f7:69:a9:95:19:4b:
c2:82:97:49:3b:06:b0:af:33:cd:2e:6d:d9:a7:3c:
20:57:8f:62:e4:c0:40:cc:04:60:9d:6d:79:32:3d:
b5:ec:ab:ec:98:ac:5d:70:7f:67:b0:0e:5d:a4:1e:
4f:4a:df:d6:86:85:55:7f:aa:6c:b5:2f:03:31:a1:
55:f3:87:19:ae:d3:1b:8d:22:26:90:6c:8c:c8:eb:
83:ba:8f:d9:26:5c:52:8b:47:45:47:48:79:ad:a8:
a3:78:3b:2c:6f:ac:76:b4:fa:9b:08:96:15:d7:7e:
dc:83:76:c1:fb:45:b4:91:fb:ee:99:87:00:08:33:
95:6f:e4:e6:b5:f3:2b:82:1b:f9:53:3d:ca:17:89:
89:7f:c2:f7:56:6f:ef:cf:ce:df:f4:90:06:51:f0:
29:38:47:d1:4d:a6:0d:11:21:ff:ef:c3:2b:26:61:
39:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:21:58:CC:A4:26:1A:79:8C:31:F0:1D:D0:7E:AF:9E:E1:E2:B9:93
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:58:12:c4:f9:e6:8c:d6:03:24:8e:e6:61:e2:ea:27:28:ed:
62:11:c0:b5:95:37:6d:94:43:10:11:65:c7:58:b6:f8:b3:02:
e6:5a:82:72:08:c0:c9:d0:66:5b:8b:4e:0d:fa:60:e2:77:fa:
40:02:cd:c0:9d:76:e0:ca:b2:e7:27:59:33:ea:38:66:83:c4:
0f:e4:a0:5d:f4:33:5c:c0:57:bd:d8:49:39:a3:c3:6e:42:3e:
8d:72:ab:2e:cd:b3:21:32:d8:71:8e:25:8f:63:0c:25:ce:a8:
89:c8:93:42:f6:d2:f5:19:6e:84:cd:04:8d:4f:2b:5c:84:ae:
43:a6:f0:f3:3f:1c:30:a6:b8:b4:2a:1b:7b:59:db:72:e9:5f:
6f:51:3f:88:f1:5a:11:76:1d:94:bc:40:ae:f1:f3:fa:80:df:
f6:c7:7d:ae:93:54:c1:18:85:db:65:63:c7:cf:bd:a2:2b:94:
3f:fd:ae:aa:d8:19:9c:24:43:2e:17:87:6c:93:5d:2f:f8:da:
c9:e3:da:78:14:af:5e:86:89:f5:c8:bb:78:f2:a5:05:ed:5c:
30:a9:d1:20:e9:69:83:b0:ec:f1:b3:07:80:6e:13:c9:52:2b:
3c:a7:40:15:a1:00:44:34:58:23:04:27:19:5b:ff:27:22:9d:
80:05:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:37 2024 by rpki-client on console-fra.rpki-client.org