Manifest
$ rpki-client -vvf rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
File: 7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft (raw, json)
Hash identifier: 5JN/3FqPU/I/Gb0R+TJ7xtOjqsaqYe+vXExT3f0o/KQ=
Subject key identifier: F4:90:53:53:A0:10:04:5D:EE:E5:2B:4E:4D:C0:B3:0E:96:38:15:AD
Authority key identifier: 7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
Certificate issuer: /CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Certificate serial: 3ED03DF01132868E4429E683A455647C863B69C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject info access: rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
Manifest number: 020F
Signing time: Fri 17 May 2024 11:53:38 +0000
Manifest this update: Fri 17 May 2024 11:48:38 +0000
Manifest next update: Sat 18 May 2024 13:06:38 +0000
Files and hashes: 1: AS212666.asa (hash: sWLA0PbVZoxyluc8kD/nY4qfHc9Xtk58G3QVlLOo/hg=)
2: AS209557.asa (hash: G4JztwvtApI4XJoDUN8pC9UctK5+XCbDNWxHv0AF5qc=)
3: 7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl (hash: ynTS4mls4HWb61fPR0zhkx53SihWoB1r1pj1JSgfTAI=)
4: AS60614.asa (hash: EXDWC1bEGxxr8g+h1hYm1rpMUeKOzfvRb6iH5QnqwWw=)
5: AS7480.asa (hash: u66VbTtGwi8f3Ww7mEFxHDyPuh5CKEuYH2iR/m9bZMU=)
Validation: OK
Signature path: rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d0:3d:f0:11:32:86:8e:44:29:e6:83:a4:55:64:7c:86:3b:69:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Validity
Not Before: May 17 11:48:38 2024 GMT
Not After : May 18 13:06:38 2024 GMT
Subject: CN=F4905353A010045DEEE52B4E4DC0B30E963815AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:be:e7:90:e4:be:eb:f2:29:59:97:0c:11:
73:2b:34:6b:92:27:21:c1:35:07:e0:ce:f8:21:f9:
1a:84:2e:d4:d0:a4:92:9e:6e:2a:47:63:ec:ac:4c:
a3:7e:4a:ab:01:4e:95:57:d0:e6:85:9d:bb:2e:5a:
65:ef:8b:84:6a:67:e6:ca:b9:49:43:ba:bf:9d:b3:
bf:df:11:e1:7b:12:f4:fc:b8:a8:2a:e3:d8:78:9c:
9c:7a:d0:21:1f:b0:6b:e0:ce:d2:73:f7:52:26:9e:
36:31:bc:96:cd:bc:81:4d:75:50:16:1f:07:8a:a9:
08:ff:a6:12:35:2e:6a:57:90:f5:21:cb:31:fb:e4:
97:ad:6e:63:d9:27:f3:41:67:8f:29:52:7a:3e:2c:
10:10:ed:85:b5:56:67:21:8d:26:eb:8b:66:b4:70:
ac:75:55:3c:6b:a6:27:d9:f8:ad:25:f6:fd:23:72:
a5:68:2d:d2:49:28:08:df:ec:15:ea:35:c8:4c:1f:
54:cb:f7:c2:5f:1f:d9:15:ce:d0:20:93:00:4b:f9:
ee:06:d8:26:9b:ac:04:25:5d:d6:40:42:39:1f:da:
dc:f6:2c:29:2b:f2:ba:d7:02:53:83:ff:91:c2:d1:
83:f3:34:f2:4c:76:52:6a:ed:95:f4:1a:f7:e5:9e:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:53:53:A0:10:04:5D:EE:E5:2B:4E:4D:C0:B3:0E:96:38:15:AD
X509v3 Authority Key Identifier:
keyid:7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:13:fd:e3:1f:ba:f8:47:91:fd:27:90:b8:76:9c:53:56:09:
3b:22:33:6c:e7:e1:d7:55:ed:bd:e7:52:96:cc:d0:e6:2f:7e:
51:bd:0c:52:f3:02:7d:cf:ae:7f:69:18:cb:56:db:0c:99:32:
03:94:5a:de:92:41:79:bd:8c:c9:23:e1:ec:e7:ba:92:a7:29:
96:28:9b:cf:3a:a6:e4:8a:11:fa:00:f1:d3:58:56:4a:bf:34:
2c:30:01:4f:e6:3c:a1:ea:d4:d8:96:5a:49:3f:2b:70:24:d6:
26:67:7a:35:01:90:ab:c2:c7:0b:4f:2d:04:50:74:b8:0e:a7:
f6:dd:2e:dc:b4:f6:c0:ec:92:d6:cb:a2:2c:90:86:e3:a0:50:
fc:71:51:34:3b:5f:0a:05:5f:06:66:84:a1:a2:ac:2f:72:ee:
92:07:d5:da:86:96:dc:e6:19:89:99:00:11:c7:b0:e3:82:02:
1f:69:00:ca:3c:db:d6:f7:ef:7f:e2:7a:4a:29:60:26:c3:69:
84:98:51:d6:4d:64:22:8d:10:b3:2d:6c:59:7d:2d:44:e2:ea:
12:9f:27:f7:23:94:69:85:31:4e:51:54:cf:19:95:0a:5d:4f:
d5:c8:ff:a3:6b:e9:c3:9a:f4:a6:a3:e9:00:33:51:ec:85:5c:
da:23:bd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:11:51 2024 by rpki-client on console-fra.rpki-client.org