Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
File: yRh69xD2KF4TVTBxMoudmUhSxHE.mft (raw, json)
Hash identifier: 6lD52FvxJLhVB6Vy0CQl13VSoZ/MlabSriifWV/LnSk=
Subject key identifier: BD:C3:EE:CC:EB:3A:9D:11:5B:48:E8:E1:6D:64:84:5E:B4:5F:95:70
Authority key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
Certificate issuer: /CN=c9187af710f6285e13553071328b9d994852c471
Certificate serial: 01901DEC30A649454533341EE9EFA3D1C2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
Manifest number: 11C1
Signing time: Sat 15 Jun 2024 22:02:16 +0000
Manifest this update: Sat 15 Jun 2024 22:02:16 +0000
Manifest next update: Sun 16 Jun 2024 22:02:16 +0000
Files and hashes: 1: yRh69xD2KF4TVTBxMoudmUhSxHE.crl (hash: knl53jV3oCZ5GB2AGzJ/rAKGDksl6/feuogf7/KrjOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:30:a6:49:45:45:33:34:1e:e9:ef:a3:d1:c2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9187af710f6285e13553071328b9d994852c471
Validity
Not Before: Jun 15 22:02:16 2024 GMT
Not After : Jun 16 22:02:16 2024 GMT
Subject: CN=bdc3eecceb3a9d115b48e8e16d64845eb45f9570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:4a:ab:b0:ef:8d:14:52:67:f7:99:02:d1:
70:c6:20:c9:5d:38:0e:b8:87:2d:e2:2d:cb:32:e6:
6b:c1:28:f1:14:c0:0e:a9:56:6c:cd:17:41:d9:36:
37:d0:96:a8:1c:a1:1f:44:e5:05:0d:80:ee:9c:c0:
2f:9d:0a:92:64:a6:d3:9c:f6:73:ad:57:6b:a7:46:
77:03:42:35:05:21:59:8a:87:b6:2a:95:6f:72:2b:
d3:f1:9f:b3:2a:51:db:3f:94:23:c5:4d:fa:1e:80:
5a:e8:16:95:6c:cd:70:2c:a2:4a:3d:2c:10:a3:5d:
8b:94:6f:d8:63:af:9a:48:f7:80:b8:38:c8:33:36:
29:5a:eb:c4:fd:04:19:9f:49:72:fc:6c:49:10:a9:
05:f0:61:b8:12:a0:15:08:c4:6f:4a:e5:ac:73:67:
c8:65:8f:db:7c:36:9f:4c:ea:a0:9d:32:34:05:c7:
88:05:fe:6a:c4:70:51:97:f9:31:71:0d:94:cd:f2:
41:71:a2:d0:a8:2d:0d:43:84:79:d3:89:6f:41:da:
0a:ba:15:98:ab:cf:6e:2a:c8:3c:fa:07:ce:63:42:
a1:a6:c1:4e:0b:36:5b:d7:0d:69:ee:af:b5:3e:d3:
89:b9:ac:04:f5:7c:9c:89:74:33:e5:8f:07:b0:10:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C3:EE:CC:EB:3A:9D:11:5B:48:E8:E1:6D:64:84:5E:B4:5F:95:70
X509v3 Authority Key Identifier:
keyid:C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:07:57:05:1e:aa:d4:a2:6c:67:d6:d6:70:9f:65:04:80:26:
72:1e:f7:af:0b:8a:ac:2a:95:cb:73:bb:96:d4:3f:ef:ba:6a:
91:e7:d4:28:aa:c5:70:c1:71:a2:f6:f7:14:5a:dd:b3:f2:10:
a8:f9:6c:63:88:22:38:71:a8:57:c7:cd:64:07:0d:8e:7b:81:
3a:2a:c2:6b:1d:9d:07:be:d2:6d:6b:cb:80:6f:7a:da:fd:07:
a3:69:cb:f2:4e:76:07:e8:2d:11:fa:e9:9a:bc:41:ea:06:fa:
48:59:97:fe:7a:19:9d:fd:d6:32:b4:df:55:1a:18:38:b4:cb:
ce:24:0e:18:c0:55:2e:0a:ba:3c:9e:2c:94:3a:5e:a8:fd:df:
d9:bb:a2:14:65:2e:c5:95:43:6a:84:ed:78:4b:2c:72:cd:a2:
63:bc:55:22:7c:3b:99:50:7d:39:12:51:2c:75:f3:c6:93:63:
0b:23:4c:ce:cb:0b:15:e2:28:34:f2:f8:f3:f1:69:a4:6c:03:
8e:87:92:59:d0:cc:9e:b0:da:b4:8a:b9:d2:e7:b9:94:bb:20:
c6:0f:b2:95:c4:fc:83:5e:24:04:15:39:51:e8:69:fb:10:5e:
4a:87:2d:59:7e:56:d6:50:13:e4:6a:91:1a:15:c2:68:79:be:
42:b0:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:57:18 2024 by rpki-client on console-fra.rpki-client.org