Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
File: yyDpqru2GRVGEQI1z3bEg4S0UdA.mft (raw, json)
Hash identifier: sarHXgFUZs5aogSNCtatHxJsv9hPg1zuotlJ1KHx0L8=
Subject key identifier: 90:43:D6:70:07:3F:27:3C:18:6E:2A:C3:75:96:96:F1:AC:8C:D9:9A
Authority key identifier: CB:20:E9:AA:BB:B6:19:15:46:11:02:35:CF:76:C4:83:84:B4:51:D0
Certificate issuer: /CN=cb20e9aabbb6191546110235cf76c48384b451d0
Certificate serial: 019034A9660783DFDF6A4191DE27A52BEFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
Manifest number: 011E
Signing time: Thu 20 Jun 2024 08:00:35 +0000
Manifest this update: Thu 20 Jun 2024 08:00:35 +0000
Manifest next update: Fri 21 Jun 2024 08:00:35 +0000
Files and hashes: 1: yyDpqru2GRVGEQI1z3bEg4S0UdA.crl (hash: r09ldRwJ1CLEad7vDXPbhDp1huN9htaxO0ZAoKfLBP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:a9:66:07:83:df:df:6a:41:91:de:27:a5:2b:ef:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20e9aabbb6191546110235cf76c48384b451d0
Validity
Not Before: Jun 20 08:00:35 2024 GMT
Not After : Jun 21 08:00:35 2024 GMT
Subject: CN=9043d670073f273c186e2ac3759696f1ac8cd99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:bf:86:12:f8:e3:a7:d5:3b:8c:1a:66:01:
9f:c9:32:cf:0a:8b:e2:cc:32:30:69:a2:f0:80:69:
be:ff:4c:38:16:35:db:b3:db:d5:98:55:b5:d5:fc:
58:c7:99:ce:68:87:67:be:ea:89:ca:c6:02:75:a9:
51:19:29:bd:83:46:30:bc:c6:88:67:33:31:50:ce:
a0:1b:37:31:63:15:af:2e:b8:b1:3d:68:44:40:6c:
a1:83:21:63:43:a7:26:ea:70:d4:07:49:93:3e:5e:
8c:c7:fb:cc:5e:32:9e:bb:08:de:0b:98:d1:23:37:
9c:4d:5c:59:0f:d8:c4:25:1d:81:08:e7:73:97:17:
75:18:19:30:b0:c2:68:89:68:19:35:1c:5c:57:40:
8a:4a:5a:7d:11:c0:ac:a9:5b:0d:a5:b8:92:cb:bd:
3c:d8:81:2d:d5:4d:87:e8:a6:45:c2:da:9b:a1:77:
bb:4d:30:b9:21:a1:95:d5:23:6a:be:e6:4e:15:e4:
ea:ba:46:3b:db:69:07:34:0c:28:74:f0:e8:50:66:
b9:e4:cd:e5:2e:40:53:c5:be:d2:d0:30:1a:ad:83:
fb:d9:eb:b8:85:c5:0c:10:fc:7f:9e:8d:cd:4a:48:
00:33:f6:0f:a0:69:1a:10:52:d8:7e:65:e7:e3:41:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:43:D6:70:07:3F:27:3C:18:6E:2A:C3:75:96:96:F1:AC:8C:D9:9A
X509v3 Authority Key Identifier:
keyid:CB:20:E9:AA:BB:B6:19:15:46:11:02:35:CF:76:C4:83:84:B4:51:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyDpqru2GRVGEQI1z3bEg4S0UdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8d9bb5-b4e5-4344-891b-0807f96ca4a2/1/yyDpqru2GRVGEQI1z3bEg4S0UdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0a:71:e6:f0:88:06:f6:c5:7d:ca:23:93:69:c5:21:1b:d6:
f7:34:35:60:bc:7d:b1:79:5f:b8:f0:c0:a4:9e:fa:64:cf:33:
17:43:e9:ec:71:73:e4:1a:bf:f6:11:74:b8:49:fa:07:40:86:
df:bb:25:24:6d:57:43:ef:8d:b2:23:e8:0b:54:ea:41:e1:77:
31:1b:23:c8:0f:0f:67:78:d7:c7:26:60:da:57:3e:48:b3:bc:
66:c1:44:24:ad:99:93:90:42:08:6b:d1:54:d6:4f:9e:d8:35:
ac:bf:8b:ca:e2:7a:49:a2:09:9f:da:de:19:70:e6:93:0b:f2:
a1:34:75:65:ec:62:ad:91:ec:47:ee:7f:98:c0:6c:92:b2:b8:
41:23:e1:9c:89:2f:c7:26:f9:59:93:12:f7:7e:ba:7e:95:22:
82:88:18:75:02:74:c5:5b:84:41:a2:cd:15:b6:de:6a:66:7a:
60:00:d6:37:ce:22:c2:65:f6:32:9f:de:9f:16:72:5e:24:a3:
35:88:9b:88:56:c9:d5:0d:a1:cd:68:6d:b8:24:06:51:f7:c4:
11:c0:aa:cd:f0:47:2d:6f:c6:27:9b:20:c5:cd:8e:e6:ba:a8:
91:04:ce:25:c6:ee:d2:3b:e3:b0:41:79:9a:50:c2:c9:4a:bb:
d2:0e:60:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:35:06 2024 by rpki-client on console-fra.rpki-client.org