Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: HLWMLbZ4MrXjFw9fagQdj0x1vTKM3pN+c1FvJSEoCP4=
Subject key identifier: 7C:2C:5A:54:5C:06:C6:02:CA:11:6B:75:16:4E:49:94:E0:A4:D5:8F
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 019239CB369C40D2123B4E6CD4B554CCFE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 12DF
Signing time: Sat 28 Sep 2024 18:01:11 +0000
Manifest this update: Sat 28 Sep 2024 18:01:11 +0000
Manifest next update: Sun 29 Sep 2024 18:01:11 +0000
Files and hashes: 1: 1-ReZPvkOTztKGt2-CNXGke3bqJc.roa (hash: ECK/xuj47qhMTL8iymR843T5yiByEH1iFt/jomjPejc=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: wzVmjz/Y1pnOtxWJqiRqJnVxtDvHFP8QoCOoLKy8XUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:cb:36:9c:40:d2:12:3b:4e:6c:d4:b5:54:cc:fe:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Sep 28 18:01:11 2024 GMT
Not After : Sep 29 18:01:11 2024 GMT
Subject: CN=7c2c5a545c06c602ca116b75164e4994e0a4d58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:75:39:af:6e:b3:e4:1a:60:ce:43:87:0f:
7e:e7:05:63:c6:df:4d:6a:c3:33:59:07:7d:4e:fb:
a8:6d:f5:bf:34:d5:f3:aa:fe:85:71:25:ea:ad:0e:
5b:0d:5b:46:e1:04:43:03:28:8c:1d:b7:e7:0f:e6:
13:65:ec:0b:0b:12:99:eb:b0:84:c8:5d:10:0e:8d:
02:6c:61:79:db:97:5c:0f:9e:a3:78:b3:69:83:49:
3c:3c:4d:4a:33:35:ed:24:d3:bd:b6:c0:5f:cc:90:
b0:8f:4f:c8:44:c1:41:e5:42:2c:4d:76:7f:98:25:
9b:bc:12:68:7e:90:4e:ae:9b:8c:33:2b:50:c6:38:
b9:7e:a2:d8:23:3c:4e:1c:a8:ef:c9:81:7d:f2:b0:
4a:c6:86:63:ac:41:e3:ab:11:c6:3d:ff:e4:0c:b2:
1f:f5:ab:27:7d:01:89:aa:c6:7b:c7:bd:8a:28:82:
9b:d9:42:c0:f4:4c:e4:da:6e:39:62:0d:9f:04:33:
29:71:43:b5:5c:0e:04:22:8c:25:f8:6a:89:c8:d6:
f7:3b:9f:83:1f:32:4f:0b:37:7c:f3:cd:0d:37:88:
1b:06:69:fd:3e:0d:da:9a:02:31:5a:85:69:62:36:
c1:6f:47:03:9a:1e:96:06:f0:8e:ed:7f:41:96:73:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2C:5A:54:5C:06:C6:02:CA:11:6B:75:16:4E:49:94:E0:A4:D5:8F
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b6:d2:f4:a5:6b:d9:41:19:8b:63:54:a5:cc:37:70:d1:3e:
3e:0f:19:c0:d1:d0:2e:5c:76:e0:61:fa:eb:5d:9b:b6:0c:18:
0b:1e:66:76:2f:f1:b2:0e:8b:4d:c1:6e:11:30:9c:2d:fd:ea:
6b:98:77:84:55:03:9c:bb:b0:55:8c:02:14:11:d5:27:99:23:
6e:65:59:68:31:7d:77:ba:f5:b5:82:7b:6b:f1:c5:ac:1e:a9:
7e:78:fa:3f:d2:33:f6:23:87:e4:08:ad:78:ec:f9:a0:1c:de:
ff:3e:7f:06:13:fe:0e:e3:a4:43:0b:94:02:dd:95:4b:f7:a9:
d4:b8:57:24:44:09:bd:cb:65:3f:05:56:6a:25:6b:dc:73:dc:
47:2b:96:2e:b5:b1:01:9f:35:d5:5f:79:4b:38:48:b2:89:33:
b0:a1:9c:b5:95:b0:45:ae:b2:35:c9:39:ee:f8:32:2f:20:38:
d6:83:10:ee:80:92:79:84:50:d4:a2:91:fc:20:d8:33:f7:53:
9f:f5:e7:7a:40:8f:e5:9d:37:a1:cd:83:cf:20:bb:30:a0:09:
1a:8c:7b:e9:28:23:23:b7:0f:e4:c8:e6:cb:0b:1f:86:00:27:
69:29:d4:b0:ba:f6:ac:1c:ba:2d:d8:a8:fd:5b:09:93:c7:68:
5a:b6:7f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:22:49 2024 by rpki-client on console-ams.rpki-client.org