Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.mft
File: y_b4rqvrMWfRGS1ihIDH4r_Zckg.mft (raw, json)
Hash identifier: Yh7+5udoZeW6jDKib9yuDckjIXnBAfQqPO19CeiGlgE=
Subject key identifier: D8:C3:8A:35:E9:E2:39:AB:39:77:16:0C:D5:FE:4C:45:C2:13:64:59
Authority key identifier: CB:F6:F8:AE:AB:EB:31:67:D1:19:2D:62:84:80:C7:E2:BF:D9:72:48
Certificate issuer: /CN=cbf6f8aeabeb3167d1192d628480c7e2bfd97248
Certificate serial: 01904566480445C5E32906A2AB615792612E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_b4rqvrMWfRGS1ihIDH4r_Zckg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.mft
Manifest number: 11D8
Signing time: Sun 23 Jun 2024 14:00:49 +0000
Manifest this update: Sun 23 Jun 2024 14:00:49 +0000
Manifest next update: Mon 24 Jun 2024 14:00:49 +0000
Files and hashes: 1: jgL9i6k6hUTzexxKi9nSwm4QtOQ.roa (hash: vihQJGIfXAFdhrwbbg3f4EsLUrkCRO5GYA3+ibJDENA=)
2: y_b4rqvrMWfRGS1ihIDH4r_Zckg.crl (hash: 1ZjLsMs3PESlv5tKXYwqWOCa3VAHtNy/F7Y88wjeAK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_b4rqvrMWfRGS1ihIDH4r_Zckg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:66:48:04:45:c5:e3:29:06:a2:ab:61:57:92:61:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf6f8aeabeb3167d1192d628480c7e2bfd97248
Validity
Not Before: Jun 23 14:00:49 2024 GMT
Not After : Jun 24 14:00:49 2024 GMT
Subject: CN=d8c38a35e9e239ab3977160cd5fe4c45c2136459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a5:c8:0f:47:b9:2c:c6:4d:f5:68:88:23:f5:
c9:8d:1f:f4:73:04:31:1c:8e:bb:50:d5:8c:ef:33:
b2:d9:53:fb:8a:c7:37:51:45:ad:f0:ae:76:ea:50:
bf:76:48:d1:cb:46:df:ff:e4:37:67:79:57:20:aa:
12:e8:a6:33:d9:bf:47:b0:a3:2e:d8:c3:a9:7e:b6:
26:3d:af:32:75:7d:35:11:e2:85:61:c9:c2:92:dc:
13:55:9f:43:31:d4:fa:17:bd:6e:6f:8f:79:f4:92:
90:bd:96:27:41:a4:f2:91:a5:bb:81:0e:f7:19:f6:
0c:57:00:a9:d5:6b:f1:fc:c2:e4:b4:19:c5:ce:d7:
e7:29:56:81:b1:1d:34:64:94:e0:a0:8e:66:c7:30:
84:3e:32:7f:10:b0:d0:db:1b:e2:ee:21:69:59:cb:
81:c4:23:ec:65:98:5a:75:e5:7a:cf:1b:c9:f4:c8:
45:53:17:e0:fd:cc:79:9c:49:84:46:c5:12:64:5a:
a6:68:31:4b:08:8e:6a:7c:06:8f:59:8e:96:10:27:
56:27:96:e2:70:9c:aa:05:df:06:b1:a3:80:3d:62:
09:10:44:74:23:52:ff:d2:5b:18:e5:df:76:cb:da:
9a:55:13:9a:a1:b7:a4:a8:06:cc:a4:e8:99:f4:31:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:8A:35:E9:E2:39:AB:39:77:16:0C:D5:FE:4C:45:C2:13:64:59
X509v3 Authority Key Identifier:
keyid:CB:F6:F8:AE:AB:EB:31:67:D1:19:2D:62:84:80:C7:E2:BF:D9:72:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_b4rqvrMWfRGS1ihIDH4r_Zckg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:aa:1e:7c:15:f8:cc:35:39:0b:e1:29:7f:49:9e:57:58:3d:
7e:59:80:2e:cb:b2:88:84:ea:0a:56:52:12:a2:27:13:d6:0e:
cd:b5:e9:ac:5d:0b:85:1d:2b:30:99:9f:db:8e:46:99:e6:2a:
6c:b1:fe:9c:3e:b4:3b:7f:cc:46:5f:20:dc:01:87:69:c8:15:
1d:57:d7:56:8e:8e:e3:42:f1:bf:3f:8e:2a:3b:3f:a3:c6:9c:
08:c6:f9:ed:20:61:83:8b:0d:54:13:bf:f3:1d:0f:9e:7d:f0:
51:b6:86:da:23:53:d5:74:ca:15:b5:51:51:91:63:70:30:8c:
98:0b:29:5b:a8:f8:0e:3d:2e:05:c4:32:6a:06:c1:60:ba:a6:
c5:36:11:c7:e9:6c:70:8c:b5:60:8c:49:f0:bf:8e:89:f4:2c:
5b:ab:4b:d6:26:a5:49:88:05:17:f0:1f:03:50:cd:a4:5b:84:
b5:0a:71:fa:44:a0:c5:55:2f:ee:a8:47:a4:a1:c6:84:e9:41:
c8:09:3f:6c:23:99:dd:e4:f7:eb:48:c5:03:95:9e:fe:c7:fd:
10:52:2a:c6:f2:4b:57:f7:fc:4e:86:e4:4c:b0:3a:a1:ca:23:
b0:2e:e4:d4:58:88:0c:b9:95:c1:1c:0b:9e:84:92:bd:99:91:
b9:9d:46:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:55:06 2024 by rpki-client on console-fra.rpki-client.org