Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: J3mzhcahS5iiT5rFt6omX+BDJ5Xe5Jk6SpRqIy5yTTI=
Subject key identifier: 23:53:3C:7D:EF:A4:7C:0B:CA:CA:B0:F4:3F:42:30:34:52:D2:B6:73
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 0191FA7E3642D3CF3B5D7BC7731266904C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: D7
Signing time: Mon 16 Sep 2024 11:01:00 +0000
Manifest this update: Mon 16 Sep 2024 11:01:00 +0000
Manifest next update: Tue 17 Sep 2024 11:01:00 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: ZXLCRy0m32RuOu1CxSCXN9suTaXEZbgJuwsSwro/L3Y=)
2: p5tBKUghHWsb19EdxY83uyIU0vQ.roa (hash: sZOdOOXoaxGjPBR2e+GMIluORT1zfhqnYql2FgQLsfg=)
3: x97d_JMCyeGi7dBsp7DGUfGejjA.roa (hash: VJmfjyuFPyLYCiqmge0XTUUrRK93zbftyt51gzIQ92Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:7e:36:42:d3:cf:3b:5d:7b:c7:73:12:66:90:4c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Sep 16 11:01:00 2024 GMT
Not After : Sep 17 11:01:00 2024 GMT
Subject: CN=23533c7defa47c0bcacab0f43f42303452d2b673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:4a:4e:69:3a:42:c9:a6:da:ed:c9:8b:b2:
5f:99:fe:95:ac:7d:3a:4d:90:2a:ea:df:88:6f:db:
e5:8e:3c:bc:4b:1d:6d:44:ec:2a:5d:67:86:0c:8f:
e2:ab:14:17:f1:ec:ff:e1:9d:b0:5c:33:da:bc:d6:
f1:86:4d:de:ce:8a:f4:a6:65:7b:de:4a:37:09:6d:
e0:4b:d2:69:9d:b9:eb:51:a3:4b:52:8a:48:ed:cd:
a6:c3:99:e0:a9:19:ac:0e:fa:7f:a2:df:ad:c7:95:
aa:5a:98:78:9f:ab:4b:55:89:76:99:91:bd:2d:e3:
e3:6a:6e:ac:72:eb:61:b1:86:ea:9a:a9:ef:a5:f7:
a0:87:b6:0a:ba:d8:b3:db:c7:e8:9a:bf:cb:e3:46:
dd:a7:c8:92:74:ef:b4:e1:5b:df:3f:38:22:ff:ef:
ff:1a:00:bc:ef:f9:93:f6:5c:a8:58:55:09:99:e3:
81:d3:ac:ef:e2:37:54:dc:82:a0:c2:3f:3a:db:b8:
3a:74:fd:39:03:de:69:91:d1:3e:27:31:c0:70:5f:
2e:79:df:6f:3b:38:92:31:58:32:5e:e1:f7:47:56:
94:5f:21:3f:df:a1:13:2f:58:73:57:60:e0:23:b6:
f9:5f:de:3b:60:b7:b0:b7:a9:cf:8b:f8:52:b4:6a:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:3C:7D:EF:A4:7C:0B:CA:CA:B0:F4:3F:42:30:34:52:D2:B6:73
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:57:98:87:bb:36:76:8c:16:9d:b4:d1:bf:95:a8:37:31:f0:
db:87:31:05:25:11:62:c1:4e:92:52:fb:a4:fd:18:da:66:92:
c5:22:2f:d5:17:3e:4f:4f:5e:25:d4:13:1a:bc:29:a9:28:4f:
47:c6:d9:f0:4b:91:cc:38:5a:e6:9b:5a:98:bc:ad:d3:6e:b3:
68:58:e3:13:7e:bf:44:8f:be:73:56:cc:a7:41:39:09:e2:bb:
77:18:de:4f:dd:49:65:2e:75:53:1d:52:46:1b:d3:29:ac:70:
ea:2b:ad:48:51:05:10:af:7b:25:6d:3e:91:ce:04:d2:35:b5:
1d:56:e7:7c:34:1e:9b:8f:0f:85:e2:50:5b:14:46:81:0d:d9:
15:15:d6:bf:f7:37:52:9c:1e:0e:43:56:f6:cd:4e:fd:56:5f:
25:14:c8:6f:4b:46:ec:1a:15:4c:e0:c2:ba:48:1d:02:08:b5:
17:35:6b:da:40:da:4c:6c:9d:56:33:4e:f7:03:ae:8f:46:9f:
68:9c:b1:ba:ce:9c:f4:7c:b1:0b:6b:61:e7:cc:69:f8:4e:24:
13:9d:f8:d8:8f:00:05:a7:de:da:5e:91:67:5a:f5:fb:91:4a:
32:3e:c7:20:58:3c:d2:82:a1:a5:c8:1b:66:e8:31:ca:b6:eb:
0e:1c:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:32:02 2024 by rpki-client on console-fra.rpki-client.org