Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier: Ijdk0LCRhaxIfZWwR6EY0bLpBxh/syCwk594fSsCHHI=
Subject key identifier: FF:47:5B:20:59:0C:19:63:5B:D0:93:AC:A3:3E:1E:10:61:39:41:93
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 018F4B6BCBB91C5F27F487279D13754E4F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number: 04B7
Signing time: Mon 06 May 2024 01:01:46 +0000
Manifest this update: Mon 06 May 2024 01:01:46 +0000
Manifest next update: Tue 07 May 2024 01:01:46 +0000
Files and hashes: 1: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: A8j2IFkYOfRZGLKiA03TwyHLDgtAeCwbvK23JYvPJaU=)
2: OvGVQhQjMoPcZtPiWXUCcutEbPc.roa (hash: 2klkCoyGu3c8t4Ahz2fLJtQPbORdPXW7J6tS71Ip0C4=)
3: dThs0Y_gEV2FJQMxKlBWQyThSuo.roa (hash: 0hGFY4oC5PIsKVQtr7DEIpGbJ6P6Z+FxEOTxWqNM/aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4b:6b:cb:b9:1c:5f:27:f4:87:27:9d:13:75:4e:4f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: May 6 01:01:46 2024 GMT
Not After : May 7 01:01:46 2024 GMT
Subject: CN=ff475b20590c19635bd093aca33e1e1061394193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:30:4d:1f:80:07:b1:ba:8e:48:91:1d:7a:
66:54:e9:cd:12:30:aa:82:af:31:4b:5b:85:8b:d2:
2a:70:a0:39:e6:ca:e4:9d:78:5c:63:42:eb:3e:6e:
fe:76:92:b6:53:c9:ca:b8:96:25:78:5f:c4:e1:bf:
78:3b:3a:ed:da:e0:34:cf:61:d3:0d:11:4d:52:21:
2f:b5:a1:a9:5b:c3:86:a3:30:ed:cf:0a:0c:d0:67:
66:b3:6e:1b:e9:c2:2c:b3:7f:e9:50:9e:fe:c5:9e:
38:c8:00:72:84:31:27:0f:79:d6:8f:f9:a5:55:73:
c4:c9:5d:e1:87:96:c7:37:42:d4:19:41:a4:a1:fe:
2e:56:74:37:d1:69:f3:37:06:f0:12:14:16:c9:d0:
59:16:67:e4:52:0c:61:f1:b0:65:b4:d7:6c:d8:30:
08:9e:4f:59:62:2f:99:56:2e:b9:2f:d6:db:eb:a5:
8c:81:25:36:42:71:b5:28:ce:55:a3:f4:36:6c:40:
61:ec:a3:1f:ca:f4:51:19:f1:06:b3:09:53:49:7e:
2d:38:dc:d7:1f:ab:42:5b:f2:73:87:a1:5d:b7:89:
2a:07:f8:01:2d:33:e1:31:26:e3:a4:73:dd:ed:dd:
18:41:2c:82:7d:4f:6c:fe:b3:71:16:5b:51:73:ae:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:5B:20:59:0C:19:63:5B:D0:93:AC:A3:3E:1E:10:61:39:41:93
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c1:4e:51:44:bc:b4:b3:fd:51:3a:1c:85:32:8b:0e:6d:ff:
13:2a:9a:f0:ab:32:50:3c:08:e5:5e:a1:5d:32:88:22:b9:29:
16:a7:1e:1f:9d:5a:b5:16:86:c5:99:ce:16:ea:a8:6d:06:31:
41:02:b4:bf:70:ac:98:ea:37:c4:ba:8e:a4:77:31:ac:69:c2:
07:c6:69:4a:84:c1:02:27:4b:16:06:8b:52:1e:a6:20:2b:b4:
3b:7e:b9:0b:f1:8e:e7:f8:34:ab:49:2a:4f:92:68:4b:c2:a8:
97:cd:f4:2e:6a:06:71:3f:19:ae:f6:c6:23:8d:b4:bb:be:7f:
df:e0:f9:c5:1f:87:ab:62:e8:7c:95:05:5a:cc:c9:a9:3b:d4:
6a:49:74:c2:e6:31:74:c3:20:b9:54:4e:79:cf:72:60:9f:48:
ec:ad:92:f5:ce:4f:11:3c:3b:63:b3:a6:29:71:d4:3f:6a:80:
25:b7:df:55:8d:cf:c0:b3:ae:18:e9:ef:1a:6c:59:9d:ab:9f:
d7:40:7a:c6:46:f1:64:c6:f9:cc:7d:d9:bf:c0:51:f1:53:85:
e7:9a:d1:da:3f:f6:3b:b6:6a:ee:3b:c8:8b:5f:5c:b6:08:fb:
60:ed:4c:c6:3f:60:06:5c:2d:f0:ed:5a:c4:83:1c:c9:c9:df:
02:74:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:39:31 2024 by rpki-client on console-ams.rpki-client.org