Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: nCX30vOsROutW/lIcHB0UPsjdpRlQ46Ufv5gyNaQO2Q=
Subject key identifier: 15:74:55:CB:3D:09:84:61:2D:A8:62:09:47:0F:3A:39:99:C5:10:BE
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 01935689A739E8FE30955C1818EF836CC604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 1134
Signing time: Sat 23 Nov 2024 01:01:22 +0000
Manifest this update: Sat 23 Nov 2024 01:01:22 +0000
Manifest next update: Sun 24 Nov 2024 01:01:22 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: rhNiMGmkSKBhnmDwpw8BfXRPEjWLXhxmW1pTJTwkLsM=)
2: CqF3S1r7RZl581pziuWVwT3iC7U.roa (hash: W2f6V8PnM4cG3N5ivtnJRYBxgpqcbJz4JFMYoIMExuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:a7:39:e8:fe:30:95:5c:18:18:ef:83:6c:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Nov 23 01:01:22 2024 GMT
Not After : Nov 24 01:01:22 2024 GMT
Subject: CN=157455cb3d0984612da86209470f3a3999c510be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:59:69:66:64:ce:fa:c7:74:8b:ed:52:d2:
d1:87:bf:e7:9c:4b:b6:f8:77:63:7b:ec:45:5b:e2:
00:1f:03:8a:f0:e7:24:df:34:c6:68:ab:9a:7e:8c:
d0:6d:2c:4c:cc:a0:96:13:e9:c8:d7:4e:06:77:38:
cd:54:df:3b:ee:d7:11:04:76:a7:aa:19:65:79:c9:
7d:6b:28:0f:67:8a:ee:d2:f0:46:08:fd:ed:ff:12:
65:de:b2:6c:42:76:ce:46:fb:61:4c:14:5b:22:80:
37:0e:96:9b:43:6a:1e:10:5d:92:b2:04:35:1e:8d:
b1:44:61:7a:8c:42:df:cb:da:b8:3f:81:51:a0:55:
d1:fd:08:2a:93:39:df:5c:80:97:fa:56:ec:ed:e7:
85:73:8c:ae:91:9a:6e:42:42:8e:bd:1a:2f:4e:ca:
81:cf:e7:52:4c:a5:10:e5:b4:d1:eb:73:dd:c7:e6:
8b:a0:92:bb:64:c4:3f:73:4f:8b:58:27:17:3b:18:
a5:b7:4b:ba:29:4f:43:d3:e8:c6:d8:ab:81:67:42:
52:61:2c:a0:56:0a:bb:c1:4c:18:a3:41:d3:0e:26:
19:77:f2:7d:fe:a8:59:cc:16:74:91:c3:56:37:84:
57:8e:de:f0:29:57:43:c3:dd:ed:b1:90:91:1d:af:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:74:55:CB:3D:09:84:61:2D:A8:62:09:47:0F:3A:39:99:C5:10:BE
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e2:29:cd:a8:ab:ce:6b:46:e1:e9:bd:54:46:54:ac:10:31:
9f:10:8f:0b:4b:b2:e7:72:6e:b9:88:fb:93:e2:6e:0b:ec:8d:
f8:4b:e6:57:f9:78:6f:48:50:d7:d2:a0:bc:9c:63:42:b0:43:
63:44:aa:6e:d6:b8:1e:53:8a:03:e9:a2:02:06:0a:79:7c:5e:
13:16:af:d9:3e:0a:6d:9b:29:72:a1:1b:de:c7:37:f1:8e:1a:
ac:dd:66:3d:79:08:86:11:85:ca:b3:60:3c:e1:fa:e6:0b:0f:
eb:24:b7:ec:29:4c:ab:70:fc:93:d3:c8:82:5c:80:c3:73:dc:
6c:4b:f6:6a:a6:6e:02:6b:ae:a1:e3:89:16:ed:41:9a:61:9f:
00:9f:d4:7c:ae:f5:3a:ad:4d:5f:89:34:bd:ef:28:9c:b2:72:
29:34:24:6c:ec:44:2b:fe:d6:72:fa:bd:d9:fd:80:a9:42:3c:
b9:e5:29:ee:e3:71:89:53:19:4a:f6:3b:49:3f:5e:38:de:28:
54:25:1a:4a:7e:7c:fe:e5:ac:95:ec:26:a3:35:5f:b0:a8:ef:
01:31:e6:8e:b0:0f:2c:93:80:9f:36:73:b3:e4:78:a0:09:81:
96:b0:07:ee:a8:c1:75:08:59:59:bc:34:3f:ef:13:a5:c2:f6:
0e:36:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:26 2024 by rpki-client on console-ams.rpki-client.org