Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: EvsWW8PNlAdZve3AG7rkCZUaZeFomwrydFhfBtmbW88=
Subject key identifier: 6B:09:8C:F6:AB:E6:1F:8D:C4:68:76:2B:13:9C:D8:AD:ED:7D:E8:56
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019355E3C4BE69205B042A61E452636B124F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 22:00:10 +0000
Manifest this update: Fri 22 Nov 2024 22:00:10 +0000
Manifest next update: Sat 23 Nov 2024 22:00:10 +0000
Files and hashes: 1: Q0EpOpbMx0436uoo_Bg9AxxtIJE.roa (hash: wfRm8vVzwhX8cLAm+sg4QNXNUaRfRyENc4LDojAUhwk=)
2: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: GIPnxsFX6G2sAdy6c3Av9Z+hnVGDWVFEz3zFhp4fGg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e3:c4:be:69:20:5b:04:2a:61:e4:52:63:6b:12:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Nov 22 22:00:10 2024 GMT
Not After : Nov 23 22:00:10 2024 GMT
Subject: CN=6b098cf6abe61f8dc468762b139cd8aded7de856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:fe:10:98:a4:a1:e3:9f:7e:6d:7f:4f:5c:
9f:58:88:14:99:81:13:b9:ab:52:09:60:0f:41:0c:
9e:eb:a2:05:83:a7:29:be:80:2d:b9:fa:d4:66:93:
c2:9d:91:89:8e:ae:4e:31:97:5e:92:1c:6a:95:08:
a2:8a:16:33:35:3f:7b:0a:49:bf:cd:e4:dd:f6:21:
7f:b9:5a:44:e3:9d:f6:61:80:32:cc:ae:c4:75:07:
1e:6f:4b:73:28:85:90:da:75:29:c2:78:39:95:9e:
bf:be:28:6b:1a:a2:1b:10:95:35:e9:5a:eb:f7:25:
24:e0:68:6d:3c:b2:26:48:9e:b0:4a:53:16:60:a3:
79:67:ce:23:53:db:76:f2:30:1c:60:5e:35:db:de:
b2:a1:64:9f:c4:43:8e:05:b2:49:d4:5c:a1:49:18:
93:2c:02:c9:67:bb:4a:f1:65:46:28:2a:a8:26:9d:
60:d8:b3:25:23:e8:1a:56:97:d6:04:66:bb:6f:bd:
91:00:c1:65:63:ca:1f:2e:6c:b6:d5:f1:33:9e:47:
81:ff:94:f8:7b:31:f7:55:fc:aa:2c:ea:21:2f:1b:
88:de:a6:76:2b:68:db:18:cd:45:31:11:c4:8a:da:
61:59:ad:e1:e6:67:47:e7:34:b8:a7:29:7d:e9:68:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:09:8C:F6:AB:E6:1F:8D:C4:68:76:2B:13:9C:D8:AD:ED:7D:E8:56
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:aa:7d:29:a3:df:b7:52:b1:cc:19:d4:27:55:13:3b:1d:06:
fc:61:b9:31:62:a7:68:2c:3a:39:5c:3b:0b:0e:25:61:27:00:
6e:c9:35:8c:6d:a0:bb:d7:44:37:c6:69:15:c6:fa:00:97:ee:
01:02:16:f8:49:b0:fb:bc:54:af:7c:8f:f0:31:9c:4a:1c:29:
a7:0d:37:0f:d6:2d:e2:b5:d6:b7:69:fe:f0:f5:61:50:36:e1:
37:ee:d3:f7:77:86:20:1c:f1:10:0f:aa:9a:a2:28:55:e3:28:
61:3d:09:89:d1:ce:21:81:0c:26:e5:58:a8:f6:3b:e5:9f:eb:
5e:11:94:89:e0:36:74:4c:21:63:c8:74:95:81:63:8f:ea:4f:
a1:f8:f1:8e:c9:8a:98:1b:27:95:ff:d0:52:34:da:8c:e5:a2:
9f:15:8e:81:6c:d7:d2:1a:5f:07:e5:8e:fc:ce:dd:72:18:3c:
b8:f4:0d:e1:5d:b0:c7:17:05:60:6a:ec:4c:ed:30:a2:c9:bc:
cc:e0:95:92:ed:5c:e6:b0:58:46:d6:18:fe:f5:21:7c:4b:bb:
83:14:99:51:b3:52:a7:d4:15:f7:fe:aa:b3:f6:98:fe:72:25:
5b:83:3f:07:47:3c:f9:55:97:34:5d:9a:59:16:48:b1:3b:07:
79:21:c0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:13:18 2024 by rpki-client on console-fra.rpki-client.org