Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.mft
File: YFmTc7C28EMZ0Ivsta1XkqE72pI.mft (raw, json)
Hash identifier: A8TbMSWjvUCxRYNjFBfB6e0efXTz45ofaSDYukCSMBM=
Subject key identifier: 89:20:A0:A3:38:EE:AA:90:51:AE:45:CE:03:E6:3C:5F:EE:B8:FF:BA
Authority key identifier: 60:59:93:73:B0:B6:F0:43:19:D0:8B:EC:B5:AD:57:92:A1:3B:DA:92
Certificate issuer: /CN=60599373b0b6f04319d08becb5ad5792a13bda92
Certificate serial: 019044C146739DA901FBB2B6D480031DCC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFmTc7C28EMZ0Ivsta1XkqE72pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.mft
Manifest number: 0DE7
Signing time: Sun 23 Jun 2024 11:00:35 +0000
Manifest this update: Sun 23 Jun 2024 11:00:35 +0000
Manifest next update: Mon 24 Jun 2024 11:00:35 +0000
Files and hashes: 1: 1EZ2cqVLIoynCYa-wnKi0wLMays.roa (hash: 7zSX4rrSmtQfFRAaQZOd98qa86Uxa8uae78uZ3+o+g0=)
2: YFmTc7C28EMZ0Ivsta1XkqE72pI.crl (hash: NdKUH0pEwan0NZ9rqmdTF4+0ZB65VXARV9lOdP8/TU8=)
3: iNceDSdpaiQUoMzgtG9pp1ducas.roa (hash: n3QPtyZ6PKNMBZWE0I+8yEeprhqRdNErkD7c5BxCwrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFmTc7C28EMZ0Ivsta1XkqE72pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:c1:46:73:9d:a9:01:fb:b2:b6:d4:80:03:1d:cc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60599373b0b6f04319d08becb5ad5792a13bda92
Validity
Not Before: Jun 23 11:00:35 2024 GMT
Not After : Jun 24 11:00:35 2024 GMT
Subject: CN=8920a0a338eeaa9051ae45ce03e63c5feeb8ffba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:79:47:d7:81:5e:72:ad:e7:91:03:d5:74:
be:86:c2:1c:ec:a3:74:76:37:00:a0:8c:e1:3f:f5:
cd:d8:a8:a9:36:ec:43:14:f9:d0:5f:f9:9a:39:b4:
2d:4a:22:35:c1:d4:38:23:0d:34:ac:13:3d:67:f4:
6f:fc:1f:a4:11:a4:7d:c0:63:06:1b:ea:05:da:0f:
59:3e:4c:56:38:25:3f:04:83:92:d9:8c:30:e2:dd:
47:0f:74:f6:af:b8:82:ae:f9:76:b6:85:23:b1:c6:
1c:31:88:04:45:80:97:72:f3:30:3d:53:10:d2:a7:
61:60:16:51:c5:13:be:13:c2:45:8f:76:51:22:d1:
e0:50:d3:eb:29:cd:c9:0d:5a:9e:c9:fe:88:9d:91:
e1:49:cf:02:42:6e:ab:c7:b2:86:85:79:c8:65:18:
3d:4b:e7:3a:6d:72:9d:f9:ed:47:92:7d:c7:b6:f9:
c7:a9:fd:dd:c5:52:dd:7b:f0:84:25:c7:1e:09:a7:
91:81:fa:fe:0d:1b:5e:3a:45:fe:6c:66:63:63:6b:
d3:39:e3:d1:08:f7:4e:bc:06:81:08:cb:84:fd:ac:
96:23:57:3b:76:e9:fd:f9:ea:48:52:2c:2d:c4:91:
4a:f8:16:11:4c:56:77:7e:aa:3e:d9:f4:8c:0c:0f:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:20:A0:A3:38:EE:AA:90:51:AE:45:CE:03:E6:3C:5F:EE:B8:FF:BA
X509v3 Authority Key Identifier:
keyid:60:59:93:73:B0:B6:F0:43:19:D0:8B:EC:B5:AD:57:92:A1:3B:DA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFmTc7C28EMZ0Ivsta1XkqE72pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f27b3-7110-4d8c-a0d8-03109c15510d/1/YFmTc7C28EMZ0Ivsta1XkqE72pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0b:35:a5:77:b1:28:64:6b:0c:6c:5b:5f:d8:85:3f:fb:80:
5f:3d:19:a5:67:d7:5e:2b:67:41:0d:92:2c:6b:d3:6e:61:1e:
02:9a:15:eb:df:3c:b4:1d:01:73:b9:67:2f:f9:b0:69:5b:48:
76:37:10:88:c7:75:e6:83:8c:43:90:5f:03:e3:11:67:9c:9f:
ba:4a:2d:2e:72:62:9a:35:66:61:a7:49:8a:1d:fe:5d:39:0e:
c7:0f:06:59:b1:dc:aa:e8:49:a3:ea:ef:8d:b3:14:98:a2:82:
c3:b0:8c:b0:8c:b0:dd:46:b1:29:a9:c6:53:97:b0:d3:eb:97:
02:9d:51:fc:5f:bc:80:9a:41:6b:34:43:ae:97:1e:58:a1:fe:
78:6e:1c:11:d9:f5:9c:76:54:37:98:ec:5d:d9:af:47:84:89:
56:b0:ba:b0:a6:42:6d:74:1a:8f:b7:d2:26:5c:3e:88:6c:64:
d1:59:3e:1e:2d:9f:90:b3:5f:25:12:2e:5c:89:9e:14:47:79:
5b:21:83:b2:75:9b:b2:28:cf:41:b8:5c:d9:e0:8a:b4:1b:d1:
64:64:80:29:21:bc:53:fd:a3:dd:8c:d4:8e:fd:e0:80:8c:7f:
ab:5c:83:fc:2f:14:f4:eb:ec:2a:8f:25:6b:48:8c:5b:57:a0:
46:3b:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:56:15 2024 by rpki-client on console-fra.rpki-client.org