Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: NXw5Ddgju5PFqekNpnT5J1pmx7gSycvfRLFuCEdtTeE=
Subject key identifier: 61:E2:F7:13:35:D7:97:CD:7D:52:6B:8C:06:2E:87:03:B2:33:02:14
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 018F497CCE90626DC8910FA3B725206D611E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 05F3
Signing time: Sun 05 May 2024 16:01:07 +0000
Manifest this update: Sun 05 May 2024 16:01:07 +0000
Manifest next update: Mon 06 May 2024 16:01:07 +0000
Files and hashes: 1: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: wQoAVxunoQ9etxNsmTJqw281J/1wN3v9j/mI5d6SEME=)
2: pLxraMGdusqRgDUPmIqQpTjC5rg.roa (hash: oQP9uooU1SmBPrFPPbMEGdSjQ4ZgaWwwD2HyEpBZRok=)
3: rDQAIL2I66VyyKAsV_XGkUpmyY0.roa (hash: vAfoOn31LmsqMHN9AUqFBwdv1mG9CFwKLxlyrjkFFqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:49:7c:ce:90:62:6d:c8:91:0f:a3:b7:25:20:6d:61:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: May 5 16:01:07 2024 GMT
Not After : May 6 16:01:07 2024 GMT
Subject: CN=61e2f71335d797cd7d526b8c062e8703b2330214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:52:b2:87:81:cc:e8:e1:a8:ab:bf:bc:14:
27:92:98:ce:30:03:1f:b9:5a:da:f8:6e:b6:59:03:
3e:d2:38:59:79:9f:35:41:31:50:97:16:1d:1e:10:
5f:85:a0:22:fc:81:16:43:0e:00:38:7d:1f:80:c0:
14:44:81:72:01:af:bc:c5:23:b8:d0:9b:34:a3:f3:
3f:5f:dc:37:f8:32:44:3b:8c:b8:4f:0c:5f:e1:50:
40:0c:a8:1f:cd:59:6b:b1:08:8d:c4:1b:cc:c2:5c:
fc:bd:15:84:6d:3a:33:05:bd:e1:3d:7b:f2:31:bc:
58:a1:eb:7c:fa:f6:64:db:2b:2c:61:34:32:2b:1c:
01:82:08:88:4d:c9:c0:7e:f6:f4:c0:27:c3:ce:63:
2c:80:e3:11:de:d3:0d:9e:a1:bd:9a:19:1d:ca:54:
cc:f7:9b:4d:35:cb:52:b0:ee:2e:13:11:0a:c2:e2:
b9:6d:78:4c:4f:70:d8:91:47:e0:f1:5a:c3:6c:c6:
32:02:b6:63:12:d8:65:76:26:a8:20:f5:85:de:5e:
e0:c9:06:a8:56:d4:4c:3c:c8:b8:15:ea:25:3c:c9:
1a:e1:63:7e:05:7a:a1:bb:23:88:45:ec:bf:1f:83:
e2:97:87:13:2c:12:ae:8a:d5:f9:9a:0a:1f:4b:d4:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E2:F7:13:35:D7:97:CD:7D:52:6B:8C:06:2E:87:03:B2:33:02:14
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:44:67:9b:67:28:6f:cf:ea:a3:68:ce:4f:fd:ae:e0:11:ed:
77:6e:f1:73:87:6f:d3:8b:ad:0c:85:56:af:8a:94:f5:0e:4b:
65:e2:0c:1e:92:18:75:af:44:69:47:c3:ee:c0:eb:7a:5c:81:
d0:a3:55:13:80:44:46:4e:76:d2:e3:3e:f8:b6:09:49:80:3a:
d8:a7:53:ee:89:fa:70:07:5c:c6:9f:fc:fc:1d:c6:2e:80:8a:
f4:c2:7a:8f:56:8d:7c:b8:42:13:1c:d7:23:2e:02:5d:08:d4:
42:96:4a:ec:80:d0:85:9a:b6:b0:8d:35:9d:98:04:f4:b6:ce:
18:c8:94:0a:71:2b:66:e2:bf:a0:6b:c5:60:ce:c0:d9:35:88:
49:9d:9d:b0:8e:6e:79:11:7f:77:76:b3:95:af:55:1b:75:a4:
bb:a3:51:04:11:7e:7f:4b:79:09:f8:23:73:5f:b9:1b:1a:44:
26:0d:93:82:36:e5:25:57:1f:c7:12:8c:1c:b5:81:cd:67:0a:
60:2d:9e:8b:73:19:a4:75:96:71:2d:21:d3:84:01:fd:7b:a3:
ad:fc:23:e1:15:34:fc:c7:a8:91:db:f0:9a:b3:e6:58:ce:3f:
ab:57:1d:70:9a:77:83:4b:e0:fe:e1:5a:78:d0:85:90:98:98:
71:3b:49:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:46:12 2024 by rpki-client on console-fra.rpki-client.org