Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier: brmj+XPddc1AWKtDQYlCMHWoZdKUjypiwd/RPoA7dTw=
Subject key identifier: 0D:D5:BC:67:93:A8:53:B3:F9:26:C3:69:F2:1E:8F:40:FA:35:7A:90
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 018F8748CB5AE4196E962BC2D1B3D99BFAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number: 0906
Signing time: Fri 17 May 2024 16:00:45 +0000
Manifest this update: Fri 17 May 2024 16:00:45 +0000
Manifest next update: Sat 18 May 2024 16:00:45 +0000
Files and hashes: 1: NPbE-DBAgincUT9QO450lslnoSs.roa (hash: s5dnKBU6lozKtZK3BlLvetvBSjQemUHp5ZjnM7Ycoxk=)
2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: 3mkJ9lwe6bDM1oy8Ijg6e3S9+/ROyFLfeFzQeFvO6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:cb:5a:e4:19:6e:96:2b:c2:d1:b3:d9:9b:fa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: May 17 16:00:45 2024 GMT
Not After : May 18 16:00:45 2024 GMT
Subject: CN=0dd5bc6793a853b3f926c369f21e8f40fa357a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f9:c5:26:df:02:6a:32:41:66:fe:5c:9d:a2:
0f:4b:80:0f:1c:f4:25:cb:2a:b2:9c:4d:3e:6f:f4:
20:a1:86:c0:58:6f:cb:02:5e:97:40:7f:da:47:67:
aa:37:c9:4e:f6:12:1c:40:fd:d8:9a:10:70:5f:d3:
53:5b:0c:80:af:ad:84:35:cd:49:2f:45:06:95:d9:
33:83:b6:25:39:38:c3:49:ad:80:59:bf:1c:6e:45:
5f:48:04:05:ee:09:ab:3d:a8:c7:78:69:fc:38:01:
bd:8f:d0:b1:5d:33:cd:07:4d:e4:3e:2d:b8:21:e0:
56:91:df:58:19:f0:c2:30:86:20:32:21:a6:33:b8:
71:30:1d:49:c8:cc:3a:02:6a:c6:e4:eb:bb:d7:6e:
d7:4c:ea:4e:04:70:6b:15:79:55:3d:79:33:86:42:
75:a9:8e:dd:a0:79:56:60:a4:9c:62:5e:d6:90:ba:
d7:88:f4:ac:0c:8e:d2:aa:e8:1c:19:f4:1e:72:e3:
13:ff:fc:d4:23:09:7f:25:f0:2c:46:98:b9:95:b9:
fb:75:73:22:40:a6:de:89:66:ad:2b:84:e6:09:a2:
ec:f4:bf:cf:21:6e:17:76:fb:b0:d7:c1:49:a2:42:
b9:2b:15:4d:40:e7:da:ac:ab:89:e7:c8:e2:7a:ff:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D5:BC:67:93:A8:53:B3:F9:26:C3:69:F2:1E:8F:40:FA:35:7A:90
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:25:d0:bf:e3:e5:6c:5a:af:d8:70:b6:5d:ba:b1:9c:b8:78:
c2:c8:04:ff:98:70:3f:5c:a3:ef:60:e7:84:1c:90:85:b5:e9:
69:54:a0:0b:61:23:0b:20:a8:fa:e0:94:31:22:0f:66:34:ef:
d8:87:87:63:f1:4b:5a:7a:ae:a0:c1:a0:20:65:bc:d1:e6:aa:
a6:6b:76:82:4b:9f:52:7f:c6:6a:c4:d4:da:71:c7:5d:26:c8:
c5:f5:f9:71:bd:c8:ff:ba:0f:86:eb:86:cd:07:fb:51:af:97:
5a:df:83:ff:b7:7e:0f:67:69:41:79:c7:c4:e3:fc:56:01:4b:
f0:c6:55:4e:4b:90:0a:6d:e1:b5:7a:47:fa:4e:6f:f6:8a:dd:
45:11:1b:52:e5:aa:da:a5:40:47:75:42:c3:d6:a8:d0:a5:1d:
50:61:ac:9c:d1:c7:eb:11:60:d7:62:c7:10:72:14:92:9b:35:
a1:db:31:e4:bc:54:fe:31:ea:e9:9b:73:91:02:3b:8a:95:61:
23:01:58:b2:52:b2:77:1f:15:ce:b8:29:a9:6b:e1:f0:3a:0e:
1e:bd:a5:b0:18:1b:fa:0b:15:89:cd:9e:f6:08:cc:1f:f3:5b:
1f:a9:4b:db:74:d0:d8:0c:b6:68:ce:06:06:74:ae:4e:55:93:
ea:05:86:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:36 2024 by rpki-client on console-fra.rpki-client.org