Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: T9vE8TxmOjS0tjTZcinBfT5I3ezy3CMA55+dkf0cwcE=
Subject key identifier: 29:67:69:C3:3E:5D:F2:02:E2:BA:08:98:08:3C:1A:43:95:55:84:5D
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 0194064672BEDFD9DA6FF19D23EB2FEDBD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 06BB
Signing time: Fri 27 Dec 2024 04:01:07 +0000
Manifest this update: Fri 27 Dec 2024 04:01:07 +0000
Manifest next update: Sat 28 Dec 2024 04:01:07 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: yHacuhqrhKzamiqpuxuoPeFunX0GF8oyeFBiNvRASvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:46:72:be:df:d9:da:6f:f1:9d:23:eb:2f:ed:bd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Dec 27 04:01:07 2024 GMT
Not After : Dec 28 04:01:07 2024 GMT
Subject: CN=296769c33e5df202e2ba0898083c1a439555845d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:e1:3d:79:b1:f3:9e:0d:38:4b:fd:60:57:
71:28:bd:15:8a:a5:b5:e8:bf:45:cd:07:fe:25:b0:
43:f1:65:40:6b:10:e5:60:e5:73:6f:da:a4:4e:12:
e1:c9:f0:ca:43:4f:c1:d2:b4:4e:85:a2:ad:44:7c:
49:96:5a:11:35:2e:87:69:d0:1e:96:3a:9c:62:13:
d7:e1:cb:38:6a:ac:8d:dd:25:50:0b:86:fd:11:5f:
2e:66:fd:24:35:c6:83:da:c0:3b:af:24:d4:9f:dd:
e1:f5:9e:88:b6:28:bd:12:15:f0:30:8b:b5:57:40:
a1:99:36:f8:38:54:e4:0a:83:d7:ec:47:83:71:36:
60:60:d0:e8:eb:c3:67:70:fc:6d:4b:6d:52:47:71:
31:61:f7:95:79:b7:1a:3c:ec:cc:f5:26:9b:d1:e7:
74:04:41:fe:02:8a:d8:8f:65:26:0e:21:44:49:ee:
f9:8b:d1:5a:98:5e:73:a8:b0:25:c0:6c:14:d6:d5:
e0:d0:2e:97:24:fd:25:1d:63:03:af:30:e6:74:fb:
41:f0:fd:93:fc:12:e3:25:9d:ea:7b:ec:3a:27:71:
59:f7:0d:77:eb:63:24:47:c2:ad:ab:b8:3d:9b:ac:
13:ae:94:fd:ed:fe:d1:8d:5d:6b:d0:4f:15:77:9e:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:67:69:C3:3E:5D:F2:02:E2:BA:08:98:08:3C:1A:43:95:55:84:5D
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:01:09:67:71:fb:c7:be:88:d5:6f:ef:e9:38:82:cc:c3:4e:
1b:dc:f4:f3:d0:10:cd:10:46:a4:5f:6f:44:74:22:07:29:fb:
16:bf:ff:cb:97:fa:59:46:3f:fa:f7:be:8e:ef:7a:11:73:93:
69:d0:ae:b4:37:79:ee:9b:ef:77:59:c2:eb:8f:c7:3a:d4:7f:
74:cf:3c:bb:14:92:02:f6:00:41:c2:a5:ae:dc:41:39:6a:ac:
4e:b5:91:20:34:47:74:4b:d6:4b:f0:c9:3c:53:27:d8:f1:a1:
2d:eb:43:02:ea:e5:9e:d6:31:90:32:f4:ac:41:66:b3:26:2a:
63:6e:53:50:29:12:90:48:e4:82:98:61:36:b2:d3:53:87:95:
cf:84:bb:1f:d2:e1:96:79:c8:d3:48:c1:44:33:97:92:17:6f:
ed:27:88:49:e7:35:e5:44:e8:04:67:86:d7:c6:d9:66:e4:00:
99:b2:c8:91:01:7d:cb:99:59:ca:a1:9d:ea:35:2a:5a:33:5b:
d9:28:dc:36:e3:bf:a9:54:97:a1:52:d1:c6:6d:9a:f7:92:01:
b5:2b:19:b3:b7:ca:90:8d:e8:07:50:15:85:85:c6:9b:eb:42:
cc:ab:bf:01:e0:a5:98:c7:fb:fb:2f:6b:66:3c:db:17:61:a7:
d4:2a:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:07 2024 by rpki-client on console-fra.rpki-client.org