Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: p7v3QE5rkWKj08jLSoojWEb/2wQuS10gIVYNI6vrPkI=
Subject key identifier: D7:61:67:F3:07:49:F0:91:42:9B:DD:64:C8:ED:DC:BD:06:08:C3:14
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 0190459D8AF754F84BEC74D451E90DA5EE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 11DA
Signing time: Sun 23 Jun 2024 15:01:10 +0000
Manifest this update: Sun 23 Jun 2024 15:01:10 +0000
Manifest next update: Mon 24 Jun 2024 15:01:10 +0000
Files and hashes: 1: 9Bu2KukT9oO2T-HhxjmWRL486Ro.roa (hash: falnHaE56jrNRZSXKez4heF7csC0OWl83vsJR+pPlMA=)
2: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: h2ill7mHpXVib2yxv3nUqszAtz1xAfc97gAdLYPG3F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:9d:8a:f7:54:f8:4b:ec:74:d4:51:e9:0d:a5:ee:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Jun 23 15:01:10 2024 GMT
Not After : Jun 24 15:01:10 2024 GMT
Subject: CN=d76167f30749f091429bdd64c8eddcbd0608c314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:1f:2b:a9:43:77:f4:6b:96:c3:cf:ba:f6:
01:21:b7:ad:22:1f:05:b7:2f:d2:33:03:87:48:49:
14:fa:49:85:10:c3:39:a4:13:c5:6f:f1:50:03:e9:
9f:88:64:f1:92:e9:88:76:b4:e6:d8:7b:db:e6:38:
b9:a3:fc:53:31:49:5a:30:59:14:d0:d3:90:06:c5:
d4:b3:f4:11:58:ba:ec:3b:87:29:d5:79:12:96:ff:
a3:14:bb:65:67:59:ef:a2:55:0a:63:b3:30:f9:74:
ca:bc:2e:e6:68:f4:56:5b:86:38:06:55:30:22:6d:
b4:45:a8:cb:d7:a4:99:57:e4:80:87:e5:33:ca:17:
d6:44:04:58:97:f4:45:8e:7c:57:69:25:76:80:3b:
e5:07:9c:87:ab:94:c8:db:73:0b:4d:04:38:6f:6f:
e4:63:ad:d7:38:3c:ed:65:1c:4d:f1:f0:e7:e8:8d:
4f:9d:6b:9f:37:4d:d7:0e:45:4c:12:17:0d:1d:63:
e5:a5:0d:11:03:19:37:48:d9:67:c0:f1:6d:20:ed:
a9:24:f8:30:16:90:74:3b:04:59:ac:f4:4a:f3:38:
e0:dc:12:a1:5a:d2:3c:d4:6d:ce:ec:c1:fd:23:69:
92:d4:7f:8a:67:07:0d:39:a1:50:e3:25:03:3c:e5:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:67:F3:07:49:F0:91:42:9B:DD:64:C8:ED:DC:BD:06:08:C3:14
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:95:3d:c4:57:62:ed:d1:0e:68:33:dd:9f:e5:5a:e2:6d:78:
c9:23:56:99:0a:f0:d6:b9:23:ef:b6:0f:03:f9:5f:e2:04:53:
9a:de:bf:e7:24:6c:74:47:df:a4:57:d6:e0:88:24:70:1b:62:
f8:f1:51:9d:4c:3b:f8:48:d0:58:46:6d:38:c1:2d:5b:c2:ec:
49:8e:b0:8d:44:73:f3:02:e7:ba:e5:39:7b:01:c8:87:c0:65:
a0:71:c3:ae:80:33:61:7c:c6:ab:ef:f0:54:0c:c2:f5:09:e4:
6b:55:f2:9a:2e:8d:6d:32:a1:fa:91:ed:d3:cf:ff:aa:0c:59:
7c:11:7b:4e:27:9b:f7:d5:1f:a9:0b:d6:92:cd:61:21:3d:26:
66:1b:15:b8:77:3a:07:17:8f:91:ea:04:46:04:7c:91:05:f4:
4a:f1:90:13:a8:70:34:b7:86:ac:91:48:6d:28:3c:78:31:f8:
94:8c:88:64:fd:88:b2:37:2e:a3:ac:13:6b:db:0d:3a:49:c3:
5d:5a:a1:03:b4:03:2e:94:17:75:6f:82:22:c7:02:39:5a:9e:
59:b1:49:82:f4:5b:43:69:ba:ab:28:47:ce:28:fb:b0:be:6e:
51:21:51:58:2f:58:af:fb:4c:f7:d6:26:fa:34:07:1a:3a:9b:
16:39:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:18:59 2024 by rpki-client on console-fra.rpki-client.org