Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: Ph2Kass+WxWwSwFUU9ustLSCwGwZgevTjggALiN+2RI=
Subject key identifier: D2:65:13:90:10:3D:95:39:D3:DA:50:41:CA:AD:C3:0D:EF:06:7F:A6
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 018F5515588DF25B91F8297D5E650BECEF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 0CA7
Signing time: Tue 07 May 2024 22:03:33 +0000
Manifest this update: Tue 07 May 2024 22:03:33 +0000
Manifest next update: Wed 08 May 2024 22:03:33 +0000
Files and hashes: 1: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: xjTsS9aUYA2ORFVeSu7tmk6HIjP1KMpUjmrRUXz08dM=)
2: gGe0nYIlD7jJjayzwKOJVt7klS8.roa (hash: BmV0J5rcQhabjfmYGR4QzsetfQFlQxcgd+4BQKeuJ7s=)
3: pwDAzNcHMV_I_oqD1tgh6fFX8SM.roa (hash: jPr+1uwvxqwwGvYG31GyAoJ9FMAEt+s771XPKXdMFNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 22:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:55:15:58:8d:f2:5b:91:f8:29:7d:5e:65:0b:ec:ef:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: May 7 22:03:33 2024 GMT
Not After : May 8 22:03:33 2024 GMT
Subject: CN=d2651390103d9539d3da5041caadc30def067fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:f9:2c:6c:56:2d:9b:7e:33:44:6e:df:37:
9d:9e:e3:11:d8:1f:0c:fa:70:61:32:c1:ab:83:e1:
98:6e:9e:79:05:9a:41:95:48:b9:04:c0:7e:8c:1e:
64:75:cb:c7:a7:4f:da:df:2b:e9:b5:3f:91:d3:ba:
40:a3:b0:29:58:ba:a1:ca:ef:dd:b1:f5:5c:b2:c1:
b8:ba:92:68:70:fb:be:33:82:e1:a0:17:3b:81:67:
f2:a4:9a:32:c6:8a:a5:62:5c:e2:b8:f3:75:2c:b7:
03:d3:d8:a9:44:1c:d8:62:e3:9a:0f:41:9c:ce:0a:
55:47:3e:e5:24:6d:9d:06:d3:5e:55:9d:0f:42:db:
df:a1:dd:4b:09:d5:9c:7f:3a:fe:db:63:29:be:79:
39:38:da:7c:be:9a:de:92:c8:52:b5:3a:4a:bf:64:
03:c3:dc:a5:e6:ea:0c:56:03:53:b4:78:e9:77:ee:
05:c1:99:cc:3f:48:99:ed:7b:98:04:31:74:ae:37:
e5:5b:1c:99:b4:d2:6e:2d:36:a7:58:b7:50:87:10:
39:a8:95:ac:5a:75:ba:c0:f2:1b:df:96:7d:1b:d2:
37:f5:46:fb:93:18:67:20:47:ce:db:1e:ba:02:b1:
33:47:8c:28:4d:a9:e0:b9:ce:e4:dc:37:28:7d:44:
d7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:65:13:90:10:3D:95:39:D3:DA:50:41:CA:AD:C3:0D:EF:06:7F:A6
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c0:f3:d3:1a:9f:e7:91:6f:ee:3d:d4:f3:da:9d:8d:43:87:
a2:84:a9:d3:ec:67:49:d5:0d:47:2f:19:a7:da:10:17:63:21:
4c:42:fc:94:0b:5f:04:93:07:e2:16:50:9f:17:29:c7:73:86:
fd:44:64:ed:d8:ef:1b:46:5e:2a:47:9e:c6:70:30:56:1a:1e:
cf:87:a1:5b:6e:95:ad:72:49:14:d7:4a:e1:74:77:e0:c7:2b:
9d:f7:b3:8c:b5:f2:07:cb:17:2b:cf:3c:2f:b3:bc:40:21:ea:
34:17:3f:7b:6c:49:5f:9f:d3:ce:0b:4c:47:03:3e:a7:c7:fe:
73:96:c9:74:e9:ea:2d:e8:09:f3:7d:b6:62:d6:71:42:1b:c8:
43:72:16:97:20:41:22:37:18:8f:ee:5f:45:df:0f:f2:99:18:
b0:78:a9:1f:87:5c:2f:29:3d:09:0c:c8:ad:7d:d8:ef:da:35:
8a:29:7e:be:e2:6b:c9:a8:d2:35:31:1d:e3:a3:2c:54:f2:59:
99:89:e5:bc:1b:a4:d7:81:f1:af:a9:db:54:1a:25:2b:7f:28:
94:8d:6c:bf:e7:a5:cc:e2:0f:80:f3:28:41:62:ef:3e:5d:cb:
a3:35:64:aa:b5:07:45:04:c1:2e:67:60:ef:74:8e:69:fa:e9:
f8:ff:67:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 07:55:54 2024 by rpki-client on console-fra.rpki-client.org