Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.mft
File: cgYG7dvOx6VyEZQaZ8xym0KRXF4.mft (raw, json)
Hash identifier: ganPrKH9EgsDRkt/qibjib4jmtyFGsEaQFiqQDFlWrI=
Subject key identifier: 29:83:F4:C0:89:7F:50:11:11:49:B9:FD:52:E9:B1:06:A8:0A:3A:E9
Authority key identifier: 72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
Certificate issuer: /CN=720606eddbcec7a57211941a67cc729b42915c5e
Certificate serial: 018F87113C7F7C6AE06745C7B99AADFB5483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.mft
Manifest number: 0917
Signing time: Fri 17 May 2024 15:00:04 +0000
Manifest this update: Fri 17 May 2024 15:00:04 +0000
Manifest next update: Sat 18 May 2024 15:00:04 +0000
Files and hashes: 1: cgYG7dvOx6VyEZQaZ8xym0KRXF4.crl (hash: tIw2PNOl/xZYhvkzV2VnveJ6+ySDvYK/bHhFTSs60Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 15:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:11:3c:7f:7c:6a:e0:67:45:c7:b9:9a:ad:fb:54:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720606eddbcec7a57211941a67cc729b42915c5e
Validity
Not Before: May 17 15:00:04 2024 GMT
Not After : May 18 15:00:04 2024 GMT
Subject: CN=2983f4c0897f50111149b9fd52e9b106a80a3ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b7:55:c5:aa:88:0d:57:29:45:bf:ba:bd:74:
f5:32:40:c2:4a:e0:cf:11:a2:9d:c4:ff:37:7d:37:
12:60:4f:47:14:b5:21:73:eb:6d:82:28:7c:5c:ee:
2a:4b:41:fb:11:27:83:29:6e:21:05:b7:b8:81:bc:
bb:db:64:4e:41:7a:b0:5b:b9:74:72:98:f4:f4:cf:
02:49:0d:c9:e6:c4:c0:f2:00:fd:ec:56:9f:e5:2d:
59:30:e5:6d:2f:fc:0f:8e:6e:d1:59:a3:32:05:5b:
3e:07:dc:12:67:43:08:57:5b:f5:cf:9c:d9:a2:dd:
5c:2d:9e:25:9e:63:83:4a:93:1b:33:14:db:7a:f7:
10:bf:e7:82:51:38:e5:59:54:87:29:2b:12:7c:de:
5b:e1:96:56:f4:74:db:9d:37:ee:fe:f3:c8:9c:73:
c6:c7:41:d0:6c:0e:84:1a:74:4d:51:f8:3e:a3:fd:
df:05:b3:eb:4a:6b:2f:7c:13:ae:ea:4d:6a:05:ee:
21:62:4d:6a:99:9a:78:59:de:9e:5b:35:cc:94:91:
0a:1a:8c:50:7c:b6:ad:cb:82:c7:f7:0e:e6:99:04:
89:bc:2f:80:89:1c:cb:61:3d:45:b3:8c:f0:a5:7b:
5e:e4:c6:81:f7:40:5a:a5:a5:14:d8:e3:26:0a:0b:
35:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:F4:C0:89:7F:50:11:11:49:B9:FD:52:E9:B1:06:A8:0A:3A:E9
X509v3 Authority Key Identifier:
keyid:72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e4:ad:fc:37:00:37:b8:a5:49:0a:87:54:0f:a3:0a:ec:2d:
ba:c3:75:02:82:15:57:f5:48:5a:6e:ff:5f:87:a1:eb:cd:bf:
8e:85:34:02:8f:72:8a:25:75:0a:6c:74:34:38:63:52:34:6c:
6b:55:1d:ce:cb:fd:10:16:d4:6e:1d:b7:26:68:10:ce:5b:58:
bc:a6:4d:d1:f4:73:c4:ab:ba:9d:a5:23:aa:b3:68:70:9d:71:
a3:04:91:a2:76:a1:93:fc:b3:05:0d:f5:50:e0:c6:f9:f7:61:
3f:26:57:3b:81:02:94:f2:4e:09:b6:79:66:cb:52:da:85:47:
1a:1c:d2:d1:c6:4b:1f:a6:b8:60:05:d5:86:34:44:94:22:c2:
26:c7:72:d0:d5:c5:9c:08:09:b5:6a:3c:1e:fa:16:25:a4:07:
2f:4e:9f:95:ac:84:c0:52:5c:12:23:3d:43:1c:4c:5c:4c:60:
11:26:db:b3:fe:11:15:9d:3b:87:2f:9e:c1:95:da:9f:86:a4:
d3:c0:fd:a6:8f:23:82:6a:c5:3b:0a:d9:f5:f1:aa:9b:43:75:
d7:63:a3:72:30:80:35:64:57:b3:f0:64:b4:db:35:65:73:21:
7d:4d:55:40:44:7e:de:7f:7f:1f:78:3b:c3:e4:44:2e:1f:2c:
cb:52:42:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:56:42 2024 by rpki-client on console-ams.rpki-client.org