Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File: Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier: oQAHHuV1TScV9tPqUm/0btuNhhE5GAkJbjUZ3zcIWCs=
Subject key identifier: 10:85:15:06:80:D6:D9:BD:0B:7E:45:B3:1F:C9:E7:C4:3C:9C:DE:7C
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 019369DAFB6B45B7B24C6FCB2F5F08A09C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number: 09E2
Signing time: Tue 26 Nov 2024 19:02:59 +0000
Manifest this update: Tue 26 Nov 2024 19:02:59 +0000
Manifest next update: Wed 27 Nov 2024 19:02:59 +0000
Files and hashes: 1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: fYD0Yab9j6PBImWSxRv51mrhO0wSGzJjU2XcOCGNWy0=)
2: q6s8J7oPKF30WYZssj-P3xA29Kc.roa (hash: 5G/rZyucOxBSgEPTh+uOBQDqoOayTTbC2CG9jW8WSqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:fb:6b:45:b7:b2:4c:6f:cb:2f:5f:08:a0:9c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Nov 26 19:02:59 2024 GMT
Not After : Nov 27 19:02:59 2024 GMT
Subject: CN=1085150680d6d9bd0b7e45b31fc9e7c43c9cde7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4b:51:e6:b2:21:77:51:87:c9:3f:3c:8f:57:
0f:4f:67:e8:6f:da:47:92:2a:45:ce:b8:e4:ff:ee:
3d:c0:90:e6:0b:3d:74:d8:fa:5a:1e:66:29:51:da:
ea:96:8b:bc:19:58:5b:29:58:50:5a:0d:b8:0d:f1:
52:97:12:a1:6f:5c:f0:30:0e:9f:16:a1:a9:7e:cf:
83:90:97:6c:6b:44:a8:e7:f2:0a:01:9d:83:61:d8:
b9:81:0f:d3:47:ad:99:58:84:7f:d0:89:11:5a:03:
7c:af:65:8c:9c:bf:c1:ba:4b:c8:a6:64:5f:b1:5a:
e9:cf:a4:1d:9b:07:e9:64:28:53:49:35:81:17:03:
03:96:3a:9a:95:8e:2d:ad:47:ff:e3:78:44:d1:cf:
0f:0a:c9:b4:3d:f1:4f:5a:aa:73:5b:79:87:86:1a:
4d:d2:32:05:63:7d:7d:d5:4a:35:71:2b:8d:1b:43:
f7:3d:d8:50:ab:cd:4b:87:c0:4c:12:bd:23:fb:a2:
9c:4b:97:0b:8b:9f:82:46:24:0b:d2:49:43:7f:de:
3c:1e:0a:0c:10:d2:1a:a9:87:d5:f3:d1:ce:cf:cc:
03:3d:92:1d:e9:8b:8f:bc:09:c1:d2:91:9e:43:e1:
75:99:13:2a:e0:4a:27:00:c3:35:d0:3d:f9:9a:e5:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:85:15:06:80:D6:D9:BD:0B:7E:45:B3:1F:C9:E7:C4:3C:9C:DE:7C
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:da:ad:0f:e7:95:ee:22:f7:5a:9d:28:b2:15:63:ec:24:bb:
a9:4c:77:8f:d5:92:19:db:4d:3b:a0:e2:84:69:3d:eb:a8:c1:
69:34:8b:7b:37:b9:ed:37:db:62:60:31:d5:ea:14:96:19:13:
2f:67:08:02:1c:d2:c5:74:04:71:dd:77:66:f1:0b:81:5f:26:
30:a5:4e:31:fb:5b:ab:f8:89:d2:9e:d1:e9:ff:f6:aa:1f:40:
8f:a4:55:75:bd:f1:bd:4c:09:58:ec:8b:7f:15:b4:cf:46:11:
10:84:71:5b:cd:4d:63:e8:32:4b:e5:8c:1c:1a:c5:9b:89:ed:
3f:b9:67:95:7f:e0:4b:c1:8c:7a:a3:06:70:99:bf:e0:2b:47:
c7:ec:79:71:ca:26:6a:c9:49:d9:17:91:16:56:fc:1a:73:7e:
df:14:f8:94:87:85:26:28:f9:ab:cc:10:53:d7:11:07:b0:63:
68:a0:fe:8b:a9:06:36:95:1c:a5:a1:db:73:72:44:c0:e9:c0:
90:41:77:c4:e3:f1:21:3b:6d:ec:10:6f:39:d9:f5:37:64:4c:
c9:4d:83:5f:03:4f:39:2c:23:34:74:44:d7:60:6c:7e:eb:15:
0e:bc:5d:7a:8e:f2:c7:b4:37:de:32:cb:b1:34:a0:6e:cc:8d:
00:09:7c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:31:35 2024 by rpki-client on console-ams.rpki-client.org