Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: /kdp/vf63yVgYrODlQgGU/AjxMPYHmE9NcnW70fufDk=
Subject key identifier: 86:F8:4A:F8:95:0A:E0:93:6A:39:16:AE:01:F1:3A:E9:5B:1A:7C:70
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 018F8B92FF6AB8AA1F943747C115BB3CDE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 0EC8
Signing time: Sat 18 May 2024 12:00:17 +0000
Manifest this update: Sat 18 May 2024 12:00:17 +0000
Manifest next update: Sun 19 May 2024 12:00:17 +0000
Files and hashes: 1: 2VcrzTDFc4YQRvBAgwl-d4zGSwU.roa (hash: AscayusFIQTmwsfbFnL1o9gqepFZI/tbbMuQ72C4Q6o=)
2: L9sXF2HXav_I5OgFCiumVXHeWvc.roa (hash: W76ZEL1VuxZDvZvNA/iGcL8WNrLs4wLN5CvrY1eSfCQ=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: fh9vR8nlkJQaCdPicEC8NMc8Q1G9RiMWjsXSkCwEhAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8b:92:ff:6a:b8:aa:1f:94:37:47:c1:15:bb:3c:de:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: May 18 12:00:17 2024 GMT
Not After : May 19 12:00:17 2024 GMT
Subject: CN=86f84af8950ae0936a3916ae01f13ae95b1a7c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:6f:3e:5b:ac:69:4b:e3:9c:66:72:59:2f:
14:fb:8b:13:8b:37:87:37:e0:90:d6:94:ff:6f:5e:
6e:9a:2e:19:61:af:f3:01:5c:2e:c7:1f:d9:ec:1f:
f0:3e:71:c3:bf:88:d5:61:6d:c7:c4:45:b1:07:13:
60:26:4c:7e:28:bf:89:b8:0c:36:b7:00:7d:58:52:
0c:5e:fb:93:d6:a7:15:f2:61:ca:6b:5f:45:31:05:
2b:90:ea:6e:be:8c:b5:34:df:83:3c:48:1c:78:f7:
29:56:70:2c:3e:cb:10:65:40:41:5a:fb:2d:ab:b1:
9d:48:3f:61:41:3c:95:7a:38:73:ab:a4:0d:86:19:
2e:96:87:7c:d8:08:19:92:3f:cb:a6:cf:f6:68:b2:
89:0f:62:80:cf:ae:db:5a:e4:c5:d9:a7:bd:f4:f2:
4a:0c:ad:00:83:47:a0:ee:d4:86:e9:d8:78:e9:8a:
39:66:df:01:e0:45:53:a6:df:1b:5e:11:29:52:c6:
99:09:4a:2c:bd:70:62:fc:2a:cf:36:95:72:b3:ca:
86:5a:2b:ba:d8:ae:9a:3a:e1:1a:e4:78:d8:76:5a:
e3:0a:9b:6b:94:0f:06:e0:12:55:f0:22:c7:57:5d:
ae:be:31:66:af:5f:67:3e:6c:63:14:51:0b:b5:59:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F8:4A:F8:95:0A:E0:93:6A:39:16:AE:01:F1:3A:E9:5B:1A:7C:70
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b5:83:5a:49:d9:67:a1:20:93:7f:ac:75:ce:51:44:0c:02:
a2:59:40:b1:88:d5:ff:84:93:07:27:62:51:52:89:d1:d8:36:
e5:bc:a3:91:b3:15:48:b9:f8:d5:5b:d2:0d:04:34:24:79:61:
58:41:a4:af:7a:38:d4:86:bb:b3:1c:f2:e7:6e:65:bf:28:2f:
be:6a:93:77:04:a5:bf:9a:4f:ef:75:94:75:5d:be:ec:5a:5a:
b5:d3:7f:47:ef:d1:01:11:9b:ed:86:25:bf:bf:75:10:79:06:
be:37:ee:8d:2d:6e:b8:4e:c6:a4:fe:70:90:5b:39:30:fe:d0:
42:40:76:43:e7:93:34:92:ee:20:ab:9e:1c:a4:1c:59:4e:34:
5e:2a:a1:51:0a:4c:4e:36:2d:21:38:78:0f:47:32:77:20:26:
80:89:c4:f1:f9:8a:ab:2a:69:1a:cd:e5:a8:1e:6a:fc:b4:2f:
ca:1b:bd:cf:b0:52:8c:33:dc:72:c7:5e:1e:3b:20:8f:c1:af:
7c:bb:84:82:d9:00:27:f7:d7:9b:29:c5:0b:16:96:12:6a:ba:
22:bf:06:9b:31:ef:25:34:1e:fc:0c:90:84:3f:bc:69:fa:40:
58:59:fe:86:1b:3b:31:4b:e0:f8:58:b4:0b:3a:f4:57:4a:6d:
25:56:1f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:02:58 2024 by rpki-client on console-fra.rpki-client.org