Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier: nTbGlObuad388+F3vtsBHUIClFMFwa2St6mooB5dtWA=
Subject key identifier: 07:55:C6:8B:63:AC:EF:CB:E1:63:09:03:0B:9D:38:1F:C5:59:35:DF
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 01904868BDA334D2DB25927AE90DDD54CFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number: 0AEC
Signing time: Mon 24 Jun 2024 04:02:21 +0000
Manifest this update: Mon 24 Jun 2024 04:02:21 +0000
Manifest next update: Tue 25 Jun 2024 04:02:21 +0000
Files and hashes: 1: AkZ-PGvyoeZZivJmGZvwYqxk-lY.roa (hash: jvykhubOE/+95+Y/zQYp/7q6NpN6GKJg2M9Bga4SgCM=)
2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: SnsWyynrqQSvdIAhdwDZSXKwY6p49TBvWW3CPihlOgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:68:bd:a3:34:d2:db:25:92:7a:e9:0d:dd:54:cf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Jun 24 04:02:21 2024 GMT
Not After : Jun 25 04:02:21 2024 GMT
Subject: CN=0755c68b63acefcbe16309030b9d381fc55935df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:6a:64:a8:06:ce:16:44:52:f8:7b:09:af:
ef:65:da:b1:5d:79:b2:74:8e:b9:06:3d:f4:d4:31:
56:68:1e:fb:15:4e:8c:70:b9:fb:12:c2:94:ce:76:
e4:2d:c1:c3:a0:c7:46:48:5d:b2:23:e4:4c:a1:3e:
f6:0c:1e:12:8a:0a:a2:5f:4a:ad:cc:10:93:4a:b3:
ec:57:c4:ef:7c:97:2d:f9:ed:4b:c4:40:fa:28:ed:
1d:e0:b2:f5:40:e7:a2:f0:c3:7f:74:2f:f8:a3:29:
ca:1b:d9:b9:9c:0a:a7:ce:62:5e:56:75:36:dd:d4:
62:8c:35:e1:4e:44:7a:df:af:e5:d3:77:d1:de:4a:
75:52:92:8e:96:12:3c:8a:e7:41:33:61:fb:e9:74:
7d:f6:f8:bd:f2:a0:6c:dc:46:4b:62:11:e3:d5:a1:
2c:db:57:78:ad:14:33:9c:25:b5:3a:d6:c9:5e:db:
9b:b8:d2:0f:ec:90:e7:a7:78:37:0f:45:c0:f3:1a:
05:af:f4:df:1e:23:e2:c0:47:53:bd:d6:04:9c:48:
81:94:0e:62:0f:81:29:c8:dc:de:13:78:e1:f1:3b:
d4:51:af:b7:01:57:b7:d9:dd:b0:50:80:4a:00:51:
3a:e9:e7:37:45:bb:a4:4b:24:aa:b1:48:02:8f:5b:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:55:C6:8B:63:AC:EF:CB:E1:63:09:03:0B:9D:38:1F:C5:59:35:DF
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cb:1e:7e:ba:62:a8:ed:7b:d4:08:6a:e8:10:84:1a:a2:6b:
8b:52:79:9c:cf:2d:c6:3a:2d:19:90:e0:03:a3:be:f0:ea:69:
dc:ef:ca:1e:b6:19:4c:ae:54:51:d9:47:8d:34:d1:f0:42:8c:
07:7e:2e:23:0d:44:24:52:05:9e:39:ed:4f:4c:f4:35:c0:bf:
30:3b:5c:47:81:4e:01:06:7c:dd:5d:80:09:56:0b:8e:26:35:
bf:16:b2:18:e9:62:12:64:f9:a2:74:08:13:46:04:85:a4:85:
20:79:67:f0:62:b7:0e:52:d2:5e:54:1c:31:b9:14:0a:59:30:
c9:dc:ed:05:01:1d:5c:23:3d:fb:bb:4c:79:f7:14:ca:28:a2:
1d:b9:39:29:65:c1:0a:37:8a:03:ca:77:78:fc:0c:c3:54:93:
62:04:76:f1:ed:6b:f2:82:90:73:55:63:c0:a6:4e:87:7d:d2:
79:9e:76:61:0b:f2:50:98:e1:cd:7d:3f:74:3d:2a:06:6b:68:
ed:e4:b2:44:e1:e8:ac:c3:4a:bb:20:b5:b6:ce:70:d3:87:a4:
f3:e1:51:a3:2c:16:3b:b8:7d:62:99:7f:55:8a:7d:4f:5a:fc:
27:6f:50:42:29:27:ab:01:92:70:f6:df:d0:ab:5e:00:81:2c:
f2:c0:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:14:44 2024 by rpki-client on console-ams.rpki-client.org