Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: MwENts6A+h+/gzghq6tEWlMaORD+Rnm+feh2DjQXUCs=
Subject key identifier: BB:B0:E4:18:E1:64:74:81:E7:36:13:C4:70:6A:DC:FD:2B:DC:AB:BC
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 019236CA0A1ABDD521215C919BB693B3911D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 12DB
Signing time: Sat 28 Sep 2024 04:01:03 +0000
Manifest this update: Sat 28 Sep 2024 04:01:03 +0000
Manifest next update: Sun 29 Sep 2024 04:01:03 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: Rj7kykOKx6+tlcsPfWJsKJa2hzwI1bnJeWUy8AU+ad0=)
2: RGHRxrJlh-6h2rprrSYR7ZgvVlo.roa (hash: Qqs5EMdLdAk+NwCsvyyT1AQBYo+26G7xXQiMkXKbCpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:36:ca:0a:1a:bd:d5:21:21:5c:91:9b:b6:93:b3:91:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Sep 28 04:01:03 2024 GMT
Not After : Sep 29 04:01:03 2024 GMT
Subject: CN=bbb0e418e1647481e73613c4706adcfd2bdcabbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:7b:7f:68:25:18:37:66:34:e0:6c:d0:c9:
24:1e:25:49:53:e1:15:7d:2a:58:88:37:fc:0c:28:
c5:4e:f3:2b:0c:43:df:bc:d3:07:29:52:f3:be:d8:
c9:01:dd:52:d8:af:b0:ba:d6:c9:ea:69:ee:46:89:
b6:cc:74:65:e8:5e:f8:5a:f2:1d:f2:2e:f0:11:f1:
ba:af:00:c4:a9:26:cb:cd:f6:3d:9d:53:e5:1c:e1:
c8:3c:1c:e7:85:c2:44:0c:05:92:12:44:6a:db:7a:
00:1b:23:25:e8:5b:a2:b2:1a:d8:30:f3:fb:bb:77:
57:89:77:37:fd:cd:94:ae:82:43:64:fc:e7:01:ca:
ab:bf:b5:97:34:86:ef:52:50:a4:37:ea:22:ab:23:
b6:24:39:00:c5:94:75:8b:0f:36:a0:93:49:e5:c9:
2e:4b:ad:a8:b1:2f:ff:77:d2:b2:49:c0:9f:49:99:
42:f7:de:76:a6:98:4c:d7:7f:96:68:4c:dc:c9:8a:
1f:ad:82:b2:93:44:32:9f:fd:7c:7a:1a:13:7d:5a:
95:1d:f6:b1:9d:d2:d3:26:1f:9f:b0:14:fb:0b:1d:
be:04:0a:85:a6:72:9d:3a:35:db:95:59:f2:b5:ae:
ee:c7:4c:4c:af:4f:88:59:8d:70:1e:9e:ca:74:4d:
52:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B0:E4:18:E1:64:74:81:E7:36:13:C4:70:6A:DC:FD:2B:DC:AB:BC
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:17:f0:d5:84:58:22:be:7d:cb:02:79:92:20:95:e1:e3:99:
2d:28:21:ad:da:c4:d7:e3:8c:92:3c:6d:e7:99:41:a1:cb:c7:
25:e7:38:ec:42:60:31:c3:a3:92:b7:55:4a:43:75:29:8d:a4:
93:b1:ea:9e:4a:4f:36:ab:b0:dd:15:89:d6:45:c8:7f:7d:05:
9c:f3:e9:38:3c:a8:4b:ed:ba:75:e5:14:18:47:11:9f:b0:cb:
d8:36:42:88:75:92:0e:ce:57:50:d7:50:d4:fc:c9:12:de:c2:
c6:7b:ac:73:3c:9a:74:39:c5:43:12:7c:20:66:2e:8b:8c:54:
55:b9:51:73:61:77:8b:d2:54:41:b7:5c:9b:cc:19:f8:83:eb:
8a:ad:01:a1:9b:65:d6:d5:29:32:72:47:7f:15:07:58:0d:3f:
0e:80:c0:dd:f8:52:83:36:4f:6f:28:85:39:0f:4c:95:44:d3:
47:36:f1:3e:26:e3:e2:86:5f:a2:11:e5:d6:b2:19:5d:2c:e5:
7f:b8:c0:a4:de:69:82:09:dd:f9:b1:ff:17:3d:86:be:36:d0:
2c:64:a9:0d:5f:cf:1a:a7:1f:ca:32:fd:ee:26:76:b9:c4:57:
01:5d:dd:23:2c:12:85:49:1a:27:36:6f:51:c5:1a:bb:dc:b6:
1c:c1:34:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:49:44 2024 by rpki-client on console-fra.rpki-client.org