Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
File: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft (raw, json)
Hash identifier: hQJmLnPZEZ03OXmizdVtWiiocEms8rSSsxVr23xBi9o=
Subject key identifier: 2B:8C:06:6F:A3:9D:13:D5:56:CE:45:7A:CA:5E:29:F6:70:54:F8:40
Authority key identifier: F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
Certificate issuer: /CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Certificate serial: 01906F74C2E7281F9063AC561330B2806108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
Manifest number: 090B
Signing time: Mon 01 Jul 2024 18:00:41 +0000
Manifest this update: Mon 01 Jul 2024 18:00:41 +0000
Manifest next update: Tue 02 Jul 2024 18:00:41 +0000
Files and hashes: 1: 1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl (hash: 8E0PaNj6noSfRHuXOlCKu9lLZ2f7cah0PVSJ9rtEWoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:74:c2:e7:28:1f:90:63:ac:56:13:30:b2:80:61:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91d20c92c6539ad66da87c7cfe65a9faacca063
Validity
Not Before: Jul 1 18:00:41 2024 GMT
Not After : Jul 2 18:00:41 2024 GMT
Subject: CN=2b8c066fa39d13d556ce457aca5e29f67054f840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:99:d5:06:42:9b:c2:7d:b3:04:06:5c:21:
d0:04:46:7b:0c:67:9b:b3:63:47:85:9a:7c:de:d1:
53:dc:f4:89:57:de:99:3a:15:4d:27:f1:c9:9f:47:
23:19:ac:d0:9d:2e:01:d0:04:31:ac:c4:f8:b6:62:
60:c7:d2:71:d1:f1:29:10:df:3f:26:2b:db:93:28:
8c:e8:1e:92:e0:67:23:30:3b:35:bf:ad:e4:40:b6:
33:4f:9a:ee:4d:67:1e:d7:ed:f7:31:0e:c7:59:e0:
b4:aa:f7:ad:88:90:c1:81:97:46:c2:7b:a5:ae:76:
98:b7:45:dc:0a:b1:5d:38:a9:e9:26:60:63:7e:0b:
1f:10:40:5e:88:63:e2:9a:cd:ee:31:f4:ea:0f:2e:
70:b0:80:fc:27:c8:77:c5:c4:5f:b9:0f:2c:02:f5:
5d:86:dc:a7:95:4d:a5:82:3d:fa:14:b8:ee:b2:80:
6b:1b:26:88:24:01:79:b8:84:33:d3:39:41:9c:57:
09:70:02:13:b9:86:44:a0:c5:11:c2:b0:c2:44:9a:
33:13:db:ee:3a:f9:29:96:ca:0b:47:33:ef:85:b5:
e0:35:b9:fa:6b:53:ac:da:50:b1:dc:f1:92:38:6a:
8c:09:ff:32:69:de:1d:0e:89:84:36:7d:f7:ae:f0:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8C:06:6F:A3:9D:13:D5:56:CE:45:7A:CA:5E:29:F6:70:54:F8:40
X509v3 Authority Key Identifier:
keyid:F9:1D:20:C9:2C:65:39:AD:66:DA:87:C7:CF:E6:5A:9F:AA:CC:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-R0gySxlOa1m2ofHz-Zan6rMoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e6513f-7175-463b-ae85-c18e47bd9c64/1/1-R0gySxlOa1m2ofHz-Zan6rMoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c5:4c:55:26:3b:a0:0e:50:92:03:3d:1a:6a:20:12:a4:e0:
76:d0:6e:b3:f3:4c:90:b2:0a:7d:e2:fc:c2:4a:48:af:e1:91:
bd:7c:1b:3d:08:9e:f2:92:60:ca:6a:f9:ed:81:8d:20:16:42:
f5:bb:53:5a:70:31:4e:a6:53:e2:5a:4c:7f:b5:1f:34:bb:81:
6c:ca:ec:c1:04:4e:db:01:bb:b0:3f:40:7b:03:0f:38:23:11:
aa:b9:e7:c4:c6:a5:5d:98:f2:0e:e4:ea:58:a4:3f:58:d3:3d:
fe:12:e0:01:ba:00:8e:da:b4:e1:ec:43:41:69:61:95:cc:02:
a3:83:b3:a6:17:f0:ef:6a:ad:c8:6a:42:da:0c:e6:95:64:d7:
ab:11:00:88:fc:16:44:e8:65:4a:e3:a7:5f:92:2e:70:f3:37:
c2:36:ce:d4:d7:8a:ee:31:90:ec:13:d2:47:e6:07:fa:45:c9:
67:24:f7:02:4f:c6:73:5c:b7:6c:2f:ca:0e:86:d8:06:bc:01:
ec:38:d6:57:78:42:6d:e8:85:0f:d4:3b:ee:fd:20:01:03:62:
0c:1f:2e:e4:6e:0d:4d:6b:98:0e:0c:1a:52:3e:01:9d:80:04:
fb:13:1a:8a:e1:00:9f:b3:42:59:42:29:2c:3e:08:7d:0a:31:
5b:3d:ee:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 19:32:52 2024 by rpki-client on console-ams.rpki-client.org