Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: 5G2554Tn5C1SwU0KbhbgH4oTbOgaUATc/ACe2ahUGlU=
Subject key identifier: CD:DB:5E:D4:8E:35:2F:D1:E6:13:DF:D9:2B:23:89:F6:E2:ED:96:9A
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 019353F59499623E5397272F8C3EC842FE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 1002
Signing time: Fri 22 Nov 2024 13:00:23 +0000
Manifest this update: Fri 22 Nov 2024 13:00:23 +0000
Manifest next update: Sat 23 Nov 2024 13:00:23 +0000
Files and hashes: 1: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: l6azufwhEqLnza9DuM8bQkNCkORPRhtPxA/SjaOM3dM=)
2: lpCeyP0b1SZnvza4DIOxu_Ymu1U.roa (hash: pV9sb6nYPcj/K4xUu4d0tNk7+kgSgxoW30SJl1yP5WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:f5:94:99:62:3e:53:97:27:2f:8c:3e:c8:42:fe:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Nov 22 13:00:23 2024 GMT
Not After : Nov 23 13:00:23 2024 GMT
Subject: CN=cddb5ed48e352fd1e613dfd92b2389f6e2ed969a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f0:99:12:2e:33:49:3d:e3:ec:69:be:01:30:
30:25:35:85:29:3b:91:21:ff:da:02:9b:e6:69:c6:
8c:b3:c5:c3:29:9d:38:a9:a6:f8:07:a8:34:63:61:
bd:0d:78:cf:19:9b:42:17:69:d6:54:ca:8c:30:46:
53:71:23:4e:1d:a4:f8:7c:87:87:d0:53:45:09:c3:
46:f6:79:03:13:25:ce:37:f2:cc:7f:1d:ad:9a:e8:
fb:89:8e:96:05:98:b0:86:e8:8d:c7:c5:70:19:96:
59:44:f2:0f:3b:57:a0:c6:cb:8a:f5:89:4a:85:30:
ab:3c:68:bf:f5:18:94:79:9f:b5:51:db:33:4a:a7:
ce:d5:be:27:60:ff:b7:71:a4:f6:9c:c5:6f:99:4c:
02:29:bb:01:94:cd:d6:81:bf:21:e5:57:1a:36:24:
0b:06:5b:ef:12:ba:c7:06:28:12:83:63:2c:94:a7:
8f:a0:51:81:e5:e9:19:07:97:29:11:57:44:ac:0f:
11:32:37:11:7a:d4:85:f4:84:8d:bd:7e:41:17:a8:
dd:fa:a6:65:4f:3e:0a:95:33:42:b3:c4:27:f6:9f:
72:9c:cf:2c:c2:01:17:6a:1a:cf:ec:96:a9:c4:12:
2a:a7:9a:8b:7d:80:63:7a:b1:2b:ef:b4:5b:ac:36:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DB:5E:D4:8E:35:2F:D1:E6:13:DF:D9:2B:23:89:F6:E2:ED:96:9A
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:bd:5e:6c:93:a9:e8:b2:cb:67:54:69:b0:05:80:9d:61:cd:
08:b8:ba:df:bd:54:f7:79:16:88:96:26:94:7a:ed:b6:ca:3b:
63:db:9b:0c:28:e7:68:7d:3d:8f:fa:ae:27:34:f6:0c:93:c4:
c1:bd:22:08:6c:93:01:75:e6:ca:e0:40:91:79:59:4a:7f:97:
01:2c:50:fe:68:5d:42:09:d8:b8:c2:47:06:54:f3:60:a9:77:
1a:fe:98:65:35:13:10:1b:22:08:01:05:a4:ba:37:9b:18:26:
c4:1a:79:a6:5b:e9:01:01:fb:54:f2:cd:5f:4c:ea:3d:6d:94:
db:b9:63:ba:65:97:6f:71:ae:97:34:23:2d:d2:fd:cd:c0:42:
1a:0f:d4:18:bb:c6:3f:80:13:e1:bd:36:21:65:75:46:cf:36:
a6:2d:52:82:d7:9d:8d:21:ec:a3:ee:e3:9f:04:49:33:57:44:
d8:db:be:04:00:c1:63:b0:83:22:e0:33:11:01:22:75:5a:f8:
a2:4a:63:0c:bc:fa:1a:9c:a3:94:dd:72:5b:99:8c:08:cc:e1:
85:82:c3:58:2b:95:26:56:a3:64:c0:a9:85:87:43:57:42:68:
89:69:27:74:c0:76:e0:da:c6:66:cf:54:11:42:94:50:ab:4d:
f2:8e:0f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:28:28 2024 by rpki-client on console-fra.rpki-client.org