Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: HXkbgrs+kZh0t1VsP6RDL9xIwYI6sazUdz3/u6nQNbI=
Subject key identifier: 9D:C0:C5:5C:82:4B:09:CF:C9:D4:26:52:C7:17:A7:06:55:57:68:3E
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 01923700E478011D930E1719511C7E246A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 0AA1
Signing time: Sat 28 Sep 2024 05:00:58 +0000
Manifest this update: Sat 28 Sep 2024 05:00:58 +0000
Manifest next update: Sun 29 Sep 2024 05:00:58 +0000
Files and hashes: 1: QMG_1qznitDdCrUKHWUaYymDwd4.roa (hash: YpWrEA/DI6MK6bIOwCqbCskZTmz6UyP0aLWQFOBcO2o=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: xytvh1dwmXtDJXvSDxA5eMBVkFPZdVHlIPNCR9gAJ2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:37:00:e4:78:01:1d:93:0e:17:19:51:1c:7e:24:6a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Sep 28 05:00:58 2024 GMT
Not After : Sep 29 05:00:58 2024 GMT
Subject: CN=9dc0c55c824b09cfc9d42652c717a7065557683e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:bc:0b:9d:c4:84:13:5a:ec:ee:54:e6:c5:
59:f5:b2:17:e5:6f:9f:4a:de:d7:29:c2:5b:90:c6:
e5:40:86:7b:4e:f5:aa:fb:9d:04:3c:11:af:df:29:
25:96:75:57:ad:09:8e:fb:a5:e0:c0:8d:99:a2:3c:
7a:b4:2b:68:b5:1e:69:79:2d:19:23:88:a1:70:b3:
23:05:67:dd:58:72:6d:bf:71:29:f1:d8:7d:4a:76:
e8:c7:2a:d5:ea:06:06:d7:4a:1a:b0:2d:28:b1:29:
76:71:95:e9:36:e3:04:9a:5e:13:27:2c:cb:ca:4a:
aa:4c:fb:5d:d3:ad:71:f7:53:82:a9:33:98:cf:59:
59:f9:49:1e:f3:42:3f:ec:43:d7:19:1d:a6:7c:5b:
c8:42:44:b9:1c:04:52:94:36:81:bd:82:54:c1:1e:
55:ab:06:dd:a6:e0:82:1f:26:e3:ab:3e:fb:ac:eb:
83:24:80:51:10:e4:88:85:67:8c:47:5a:be:09:51:
ea:ff:65:15:10:ca:02:bd:73:e6:88:51:f8:96:6c:
1b:7a:5c:3c:ac:9d:fd:de:50:9e:4b:08:47:9d:6d:
0a:a4:45:ee:6f:95:c6:d0:c2:32:2b:d5:96:15:f2:
b6:0f:43:6b:5a:01:eb:f7:87:9d:51:94:74:d4:5c:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C0:C5:5C:82:4B:09:CF:C9:D4:26:52:C7:17:A7:06:55:57:68:3E
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dc:7c:28:9e:be:7b:5e:02:20:16:77:5c:9c:60:a3:21:c6:
50:d9:76:4a:8c:a6:72:a2:00:30:9b:7a:fe:5c:bb:f9:2c:be:
e5:c7:c9:74:cf:2f:bb:17:de:69:2b:33:0a:c1:6d:60:5c:c6:
6b:c5:30:b0:29:d9:c6:c4:c9:90:a1:de:e1:77:b8:38:25:c7:
83:6b:91:e1:25:d6:f9:40:fc:7d:50:a2:0d:9f:5d:8c:9c:cc:
0c:5d:f9:90:fb:a3:5a:7f:82:75:71:8e:de:af:ac:45:bb:ee:
47:87:f8:f8:72:34:91:77:cd:07:1e:1b:61:ed:c6:96:50:6f:
95:2a:a6:89:4c:79:b5:af:83:16:1c:8a:6e:58:5d:93:98:a8:
76:35:3a:27:1e:fd:b0:c7:94:ae:ca:bf:78:73:01:7b:93:af:
05:75:d4:82:26:74:03:f5:7a:63:db:6f:18:33:e6:e2:e0:87:
15:e0:12:03:c9:52:51:e8:10:af:1f:da:9e:e7:5e:d8:d6:a8:
4f:23:19:01:ad:d1:c3:ab:d6:be:3c:c1:05:59:a8:75:98:3a:
d3:4f:48:b1:da:6b:5c:cb:41:a1:b0:40:97:bc:a0:28:d9:89:
39:5a:05:b9:8b:78:c4:7f:a2:88:8b:4d:65:7a:e4:84:fe:ea:
66:1d:93:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:27:42 2024 by rpki-client on console-ams.rpki-client.org