Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
File: cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json)
Hash identifier: iVx/b78jYzobNfDonl9wqtIcPv5ReriP3f2gdlPS+pE=
Subject key identifier: 37:48:1D:A9:1E:3E:7D:10:56:26:41:F2:5F:02:A2:EA:7D:FB:84:72
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 018F8892642542DE7B46A50111A61AAD806C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
Manifest number: 059D
Signing time: Fri 17 May 2024 22:00:46 +0000
Manifest this update: Fri 17 May 2024 22:00:46 +0000
Manifest next update: Sat 18 May 2024 22:00:46 +0000
Files and hashes: 1: O3LgnyoJ62jAW5vSsIkRVNHDLEk.roa (hash: gAcBBXryQw7q2rs/OjPUn5Y/9UldyG0YZsHWtHsnEHY=)
2: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: xLbro4z3c2hVxw57T2ZotrLUgsDeSw2ieT050whlL7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:92:64:25:42:de:7b:46:a5:01:11:a6:1a:ad:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: May 17 22:00:46 2024 GMT
Not After : May 18 22:00:46 2024 GMT
Subject: CN=37481da91e3e7d10562641f25f02a2ea7dfb8472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:05:4a:7c:bc:15:8a:43:2c:00:4a:2a:fb:98:
14:76:67:ca:56:3d:43:6a:ad:2a:b2:de:66:d4:15:
14:d7:64:32:7d:ac:b6:9e:1e:14:fe:bd:de:9e:86:
5c:0b:0e:e3:c1:52:8c:e0:c0:d4:c0:ff:db:69:53:
7f:16:ac:3f:a0:45:3a:a2:b2:ec:3a:b0:37:c9:f6:
54:5b:83:87:27:22:a2:04:17:8c:1e:3c:81:19:8a:
90:4f:84:30:e7:c4:7b:ea:9d:f2:21:14:f7:dc:e7:
61:1d:88:e4:24:f3:ff:fc:ca:07:25:58:13:4d:56:
72:d7:52:95:94:ab:d5:52:67:4e:1a:d3:89:8d:3c:
ff:47:17:fc:a5:aa:a0:e3:17:18:45:bf:ca:81:35:
45:ff:0e:c9:9a:c2:5b:ea:cf:44:cb:b5:7a:f9:db:
19:9a:90:c9:22:d6:29:65:d7:fa:47:70:76:5a:24:
f8:66:31:75:d9:dd:2f:54:44:ca:37:d2:a0:63:0c:
c4:ea:6a:fb:c7:a9:06:62:0b:6f:af:df:66:f7:92:
f4:45:31:90:b9:99:21:a8:b7:bf:a4:bb:db:f7:21:
e1:fd:11:a8:fe:0d:d9:53:3d:36:69:e5:81:5d:6a:
d4:7c:b3:99:8a:51:b4:85:d1:3c:51:db:c0:d4:32:
23:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:1D:A9:1E:3E:7D:10:56:26:41:F2:5F:02:A2:EA:7D:FB:84:72
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7d:e3:eb:82:78:55:57:a3:e0:f4:cc:75:a2:7c:11:8b:03:
71:b1:76:44:df:00:a9:50:e6:01:88:96:6e:f1:d7:64:61:cd:
ec:30:e8:ed:66:f8:77:24:ce:26:a3:28:36:09:a9:ed:1d:10:
f9:dc:7d:63:db:15:d7:ef:5e:41:b5:12:58:79:74:f8:ef:c5:
cb:e3:68:8f:f3:79:99:41:03:7b:28:9c:70:c4:35:11:53:5f:
35:aa:f2:4a:cd:3e:bb:5c:33:d1:04:36:af:3d:80:a3:d5:80:
1e:86:d7:46:77:0a:9b:28:06:36:ac:6a:c4:7c:7a:ca:17:89:
9f:64:a9:76:5e:4d:aa:d0:ae:2b:9d:8f:6a:f1:f1:b9:36:9b:
53:1d:a8:39:b1:8e:ca:a1:82:b7:8a:7f:b0:47:57:57:b4:b7:
c9:51:8e:6a:f4:7c:8d:b7:fd:d9:f0:0d:5d:b9:3a:3a:51:58:
13:dc:2d:da:14:c8:1f:42:29:fd:64:45:fe:7e:7e:4a:59:03:
e1:41:a5:a8:13:3d:e1:c8:8b:37:21:5a:3d:ac:a4:34:66:e1:
0f:10:e5:e2:a3:83:19:02:ca:ff:02:46:0b:fa:a9:39:22:c2:
73:a3:d6:00:00:c5:8c:f7:ae:2d:15:54:65:55:92:72:e7:15:
94:ec:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:56:12 2024 by rpki-client on console-ams.rpki-client.org