Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File: Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier: 2QqJC/IeSbAgySwJGRpInf/yOrHZc1pc+nsjr5Q+vQY=
Subject key identifier: 7A:52:DB:50:B6:A0:53:7F:5C:D4:2B:97:D9:1B:01:83:9E:39:0D:13
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 0190343B888C98EC90725A04061C5EDE2881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number: 11D0
Signing time: Thu 20 Jun 2024 06:00:34 +0000
Manifest this update: Thu 20 Jun 2024 06:00:34 +0000
Manifest next update: Fri 21 Jun 2024 06:00:34 +0000
Files and hashes: 1: L93-dKXn3yDHd8ebsoeCv7n3YnM.roa (hash: IjUJMPFwaNZIdM5Whssz2L+0D1ZSLYnS89Od5Fcghys=)
2: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: GYBOx6Ga1qJpfcXq6tGHGP4/RUj0Y6SQYYDTvvJ0ssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:3b:88:8c:98:ec:90:72:5a:04:06:1c:5e:de:28:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: Jun 20 06:00:34 2024 GMT
Not After : Jun 21 06:00:34 2024 GMT
Subject: CN=7a52db50b6a0537f5cd42b97d91b01839e390d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:43:e6:3f:e1:fb:95:b1:53:12:41:7d:b9:
ec:0d:68:76:43:5c:e2:31:7b:59:12:eb:8f:74:e9:
f7:a3:ce:b0:e7:01:1a:99:ab:46:60:da:7a:fc:66:
c0:29:b8:d7:08:d4:ef:47:d4:86:ed:7a:c2:0d:d5:
a6:fe:0e:41:b4:b3:98:0d:f8:a8:df:6c:57:2c:35:
66:42:6a:da:1b:f2:03:d0:a0:0d:c2:9a:2e:4f:86:
69:c8:ce:d2:b5:08:e0:96:a5:ba:41:5b:63:4c:60:
5f:51:51:ea:4e:d6:a1:a9:d2:97:cc:59:8d:13:48:
f7:7c:7e:0c:07:2a:95:a1:d5:cd:9f:b5:1a:4d:e9:
fd:68:9b:fc:97:8f:d1:41:c5:31:86:8f:89:b2:cb:
74:58:39:91:ae:d2:65:2c:72:cc:6a:7c:34:e4:32:
e7:cb:be:ea:22:75:2e:ed:b9:48:15:cc:da:3f:53:
c6:1d:03:cb:49:ca:ac:80:9b:be:06:29:d2:a9:1e:
a9:94:bc:e3:fc:16:17:ed:5c:53:31:5c:58:5c:f2:
80:5a:eb:4d:01:0f:c4:25:b4:86:a0:19:98:0e:4e:
55:bf:7a:ef:82:e1:ba:f2:87:3c:f3:1d:e9:e2:ff:
66:90:42:49:9b:7b:2d:19:29:09:71:01:84:e8:03:
c4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:52:DB:50:B6:A0:53:7F:5C:D4:2B:97:D9:1B:01:83:9E:39:0D:13
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4b:70:6b:b9:52:8d:66:2e:c9:28:df:ca:6f:cd:b6:d3:6b:
57:28:a5:a1:0e:49:5f:e9:40:e5:74:2d:16:c8:2e:4d:08:e2:
49:70:09:0e:d0:78:26:3e:1e:8c:aa:e9:36:70:a9:fe:a5:9c:
4f:3b:de:cc:d8:29:40:6f:34:15:ab:63:d9:b1:fd:a6:96:20:
91:bc:c0:e1:83:41:65:2a:72:1b:8e:41:d4:31:6a:6b:80:b0:
52:81:17:64:42:bb:a0:99:bb:28:f4:bc:d8:98:cb:ce:84:da:
7f:c3:fd:43:6a:8c:f0:a6:9f:7b:85:f9:1f:5f:5f:d0:f2:f4:
aa:8c:f1:3a:c4:ff:8b:fe:76:de:2c:30:1e:67:ce:37:95:b9:
b5:fb:6a:32:0d:22:aa:04:2e:f0:2f:28:dc:49:75:2b:b2:e3:
64:a1:53:df:75:69:65:16:42:52:5f:23:a6:7b:c5:ce:40:28:
36:7c:7d:39:71:44:cd:a2:b0:ad:8b:09:05:a4:88:f3:1b:37:
a2:91:66:2a:9f:7e:04:ad:c8:34:c0:e3:e8:3d:fb:98:aa:5b:
54:c5:29:75:fb:21:63:e2:7f:64:8b:56:ce:21:e7:11:85:bc:
2c:70:fa:f1:b5:5d:af:42:46:f3:0e:3b:2a:0d:8b:97:f1:37:
c5:e3:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:32:03 2024 by rpki-client on console-ams.rpki-client.org