Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: rEzObjYF/u0TPdecStd81IZZiOV/aFjtjHEGVmrSb2w=
Subject key identifier: B2:BA:00:40:06:C7:8E:6D:85:B1:99:77:02:D4:19:C4:CA:C8:0D:EE
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 019463667598C504A452FD782ADA1149D0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0B0B
Signing time: Tue 14 Jan 2025 06:00:46 +0000
Manifest this update: Tue 14 Jan 2025 06:00:46 +0000
Manifest next update: Wed 15 Jan 2025 06:00:46 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: 4MeYI0i4bqP9ZxeRT7RKBLoPTnqcl1/NgscPF9wqbJM=)
2: a9IIp-lXURHEn6uSzx2MIUjwzYE.roa (hash: YetmOWjx1SbjgITF8TkhpSIqAkvzS7Zo40g3IaxEfoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jan 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:63:66:75:98:c5:04:a4:52:fd:78:2a:da:11:49:d0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Jan 14 06:00:46 2025 GMT
Not After : Jan 15 06:00:46 2025 GMT
Subject: CN=b2ba004006c78e6d85b1997702d419c4cac80dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:a2:14:f7:65:f2:82:c5:0c:4c:fb:07:bd:
9d:49:73:e4:dd:d0:95:fa:fb:0d:50:b6:dd:24:c6:
c7:62:19:e7:ee:78:bf:bf:5d:fb:27:85:81:a5:0d:
27:f2:90:ed:6f:53:7c:ed:43:4d:b8:ea:ba:f5:56:
82:ff:c0:cf:93:21:4a:ce:09:c4:d9:ad:66:10:cb:
18:05:f1:75:32:c8:e5:c3:ea:8f:2f:77:7d:f9:9c:
21:30:91:d3:f0:84:1d:d7:8c:88:ec:f7:bb:0a:b4:
ed:26:19:a2:24:1a:e8:d5:32:26:8a:8e:c4:4b:46:
e4:ec:b6:b4:77:64:89:0d:3e:aa:c3:f3:c4:27:c2:
15:a4:47:76:ba:99:a7:a0:0f:83:23:40:61:cf:a7:
de:5b:33:de:31:4c:0c:c8:3a:a1:eb:ac:dc:68:6f:
01:e0:fd:cd:82:fb:c5:83:00:b1:50:56:77:c1:89:
44:ac:ca:52:e0:3d:f2:45:88:3b:94:90:0b:87:f1:
b3:d6:13:e7:61:44:ba:d7:f4:ca:87:13:c7:99:40:
b6:8d:5c:b7:b2:24:fd:dc:bd:46:84:68:49:2b:36:
9b:e3:d8:91:1c:65:b1:68:c3:e3:ec:ad:85:3e:9c:
f1:65:2c:d8:46:49:47:0c:af:7e:2f:5e:36:9e:8b:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BA:00:40:06:C7:8E:6D:85:B1:99:77:02:D4:19:C4:CA:C8:0D:EE
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2c:56:83:35:46:3a:ab:0d:e7:51:b7:9c:2e:bd:4c:2e:13:
c8:db:78:cf:f5:91:66:5e:39:df:5d:12:95:51:8b:d9:46:7f:
83:1b:d4:af:2f:47:31:80:1e:c5:8f:6e:8e:6d:0c:48:4d:0d:
46:7a:21:da:f8:77:bf:3c:f8:d3:2b:2c:af:93:a0:17:e3:46:
21:a0:6f:d4:10:63:20:73:fc:85:9c:8b:ef:83:37:c5:dc:11:
1a:77:93:68:27:b3:8a:22:b2:87:c9:02:a4:20:a4:fd:09:85:
c2:19:a6:10:2f:05:86:92:86:9a:c2:c7:77:eb:32:50:8c:2d:
bf:72:3c:fc:1c:65:95:84:b7:bc:41:d7:2f:dc:af:3c:cc:01:
91:1d:d4:4c:27:db:cc:6e:18:9e:8f:14:51:28:2c:2c:89:61:
94:d9:4b:bd:30:20:2b:3f:b0:9f:e8:62:08:4e:a3:ff:c1:55:
b6:bf:d1:2c:e9:36:05:12:ab:b9:d8:6e:06:a5:35:30:9c:69:
b7:45:d7:9b:da:4c:0b:3d:8b:64:2d:af:1d:99:7b:c9:8b:51:
1d:2e:5d:4f:13:b9:08:eb:4d:b7:6f:75:b5:f6:8c:24:b8:9b:
9f:30:69:e2:08:6b:5c:45:ca:33:a5:8e:8c:b6:8e:50:9b:3e:
35:5b:6a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 14 13:46:01 2025 by rpki-client on console-ams.rpki-client.org