Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File: CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier: 78l5F4eh++jhNWfLzWPP/ifgziCvjEbecetixZOiFm8=
Subject key identifier: CA:22:A3:5A:9C:67:03:E4:1E:F8:60:A5:D1:04:6B:BB:0E:93:30:B4
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer: /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial: 018F5701E97931FCEE3D90DFE8C0BC827CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number: 082A
Signing time: Wed 08 May 2024 07:01:34 +0000
Manifest this update: Wed 08 May 2024 07:01:34 +0000
Manifest next update: Thu 09 May 2024 07:01:34 +0000
Files and hashes: 1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: SXpWpG3GI/+dec8Gy8dwW5IGWd7UZuH2wGwgj7q3DXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:01:e9:79:31:fc:ee:3d:90:df:e8:c0:bc:82:7c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Validity
Not Before: May 8 07:01:34 2024 GMT
Not After : May 9 07:01:34 2024 GMT
Subject: CN=ca22a35a9c6703e41ef860a5d1046bbb0e9330b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:aa:bb:c5:10:da:7c:35:4b:e3:ad:96:66:
27:a8:61:9e:80:e8:e2:c9:76:fe:00:bf:6a:53:82:
10:99:1c:2d:65:58:62:96:99:a9:60:2b:0e:f2:5b:
c3:ec:09:40:71:6a:62:f1:5d:4a:06:e4:41:8e:65:
eb:a0:46:98:e1:76:18:93:98:47:e9:9d:7c:83:1c:
ae:53:2c:45:e1:87:f0:71:dc:77:f9:62:77:3a:54:
66:f3:33:24:4e:6f:be:36:1d:d4:77:8b:0f:9e:8f:
68:38:b3:e4:96:31:22:be:b1:7c:1c:26:8e:dc:44:
80:5c:2c:30:c5:72:47:4b:07:b6:bb:a0:ca:a1:f2:
5b:42:69:73:8f:dd:bb:8f:fa:c9:d3:27:8d:49:9c:
eb:74:dc:dc:b2:fd:a7:7f:4e:05:60:4a:d0:5c:bb:
54:10:6c:e5:b4:4a:16:d3:4e:bd:db:c4:39:04:97:
1e:e3:55:74:af:8d:a2:28:e8:f9:84:29:75:47:9a:
8f:d6:23:43:a3:e1:73:73:44:26:df:b9:3b:07:54:
34:fd:a3:b9:2a:46:81:7c:10:9c:ac:da:54:6c:5d:
87:19:fa:5b:34:cc:e5:51:f9:d4:4d:9f:93:d2:c0:
57:a0:42:ec:1b:9f:84:bb:e6:a3:99:d0:28:69:40:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:22:A3:5A:9C:67:03:E4:1E:F8:60:A5:D1:04:6B:BB:0E:93:30:B4
X509v3 Authority Key Identifier:
keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e5:6c:06:c2:4d:8d:89:93:62:fd:60:b2:ae:fb:d2:7e:9b:
6d:ba:e6:8b:59:9a:3b:63:c7:32:5e:fa:a5:dd:1c:74:ab:64:
7d:ec:9d:fb:72:33:9a:97:3b:50:54:4e:cd:28:19:17:a2:bd:
b5:20:d6:7a:01:93:ce:67:ba:0d:25:7d:a8:4f:29:7f:f9:cd:
d8:33:9f:de:6e:70:aa:a2:19:a0:d3:a3:c8:c8:f1:4d:09:92:
81:ae:ff:a8:63:51:70:fd:07:cc:7d:92:98:42:d4:32:f2:97:
0b:89:99:8f:ba:cf:88:e8:10:0d:b0:7e:ff:35:92:90:db:92:
24:31:02:a5:e4:36:54:77:16:86:56:c8:d2:b0:86:81:07:f7:
8a:d7:27:78:67:cb:6d:5b:d3:02:cb:3c:ca:7e:64:51:4d:e8:
a8:86:9d:7e:5a:aa:41:75:b4:c5:24:6a:a0:f9:e1:48:e4:6a:
8a:93:8f:24:e6:e4:da:8e:44:b3:c2:9e:7f:57:d3:d5:63:4d:
6e:e6:38:25:40:19:40:3d:c2:31:75:fc:fa:31:0f:65:1d:26:
8a:7f:8a:0e:80:00:4d:c4:54:c9:97:c1:49:e9:16:85:65:25:
f6:f5:49:7c:b9:1c:4b:db:d8:f3:0c:31:a5:eb:1b:63:88:09:
54:f5:3c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:43:29 2024 by rpki-client on console-fra.rpki-client.org