Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
File: _ypds7oz42wW2_UmCy_idK5_siI.mft (raw, json)
Hash identifier: 0fQjyWbpa9dW7jkB0Z20uZnCo2sfdIgsdUBd/+PGIlU=
Subject key identifier: D4:11:22:FD:2C:B3:39:99:79:99:82:11:18:E2:66:22:65:E5:83:D7
Authority key identifier: FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22
Certificate issuer: /CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222
Certificate serial: 01901F34740CC122DF426D610E0474C36F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
Manifest number: 08A6
Signing time: Sun 16 Jun 2024 04:00:49 +0000
Manifest this update: Sun 16 Jun 2024 04:00:49 +0000
Manifest next update: Mon 17 Jun 2024 04:00:49 +0000
Files and hashes: 1: _ypds7oz42wW2_UmCy_idK5_siI.crl (hash: MQt88YPXADCHTeQ9quI3YHASQ4AKfUSL0Cp4gBFkvZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:34:74:0c:c1:22:df:42:6d:61:0e:04:74:c3:6f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222
Validity
Not Before: Jun 16 04:00:49 2024 GMT
Not After : Jun 17 04:00:49 2024 GMT
Subject: CN=d41122fd2cb339997999821118e2662265e583d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:8c:2f:5a:d9:c8:29:1b:12:69:4b:f3:73:
ae:98:5b:0b:47:b5:80:4c:03:6f:8f:51:81:a2:3b:
96:d0:97:48:e8:8d:bb:66:55:ea:34:d5:e7:fa:00:
3d:6f:bc:31:f7:38:84:74:25:4f:45:21:d8:df:08:
3b:94:31:9c:ff:69:bd:70:9a:ca:29:d5:ed:45:11:
e2:f2:d2:d9:69:a6:98:91:21:05:7c:4a:dc:d0:28:
e0:09:71:05:3e:a2:ac:a6:38:e2:ab:12:27:4b:c4:
1c:b4:84:e2:5f:cd:3d:b5:2d:1f:9c:5f:3d:df:de:
5b:06:42:87:39:c6:61:79:76:6d:79:23:02:54:54:
09:4c:f5:82:88:26:0e:fa:1b:d0:ea:36:c5:3e:e4:
b3:02:ab:08:9f:ca:50:5a:e9:2a:9c:07:b0:a6:21:
be:c6:1c:a1:d4:d2:87:ee:1e:27:f0:df:ce:bd:32:
60:e4:de:12:7d:46:53:78:4f:94:c1:c7:0e:1a:f9:
23:d4:0d:15:31:d7:5a:03:8e:41:6f:79:41:f9:ec:
2d:f9:d6:3b:c3:19:e3:85:ed:c5:22:40:72:cd:d1:
0f:09:83:81:83:2c:bc:db:95:e4:64:08:ee:fd:5d:
5f:cc:ec:41:5f:75:18:48:8f:54:87:18:b0:b7:2f:
82:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:11:22:FD:2C:B3:39:99:79:99:82:11:18:E2:66:22:65:E5:83:D7
X509v3 Authority Key Identifier:
keyid:FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:52:c9:d8:1e:a4:38:15:34:38:8c:17:bf:ea:d9:e4:3e:35:
5b:55:d7:d8:82:e3:93:ef:66:0e:fa:89:e2:61:5e:0c:25:33:
20:1e:e2:f9:37:a4:c6:dc:73:6e:fa:21:ac:77:8b:5d:a0:70:
8b:a2:e9:31:dc:d4:22:cd:38:8d:c6:49:fc:24:8b:a0:bc:f6:
26:17:0a:5e:49:68:0d:ea:b9:42:33:e9:1f:c2:8b:ca:75:12:
9d:18:bd:47:67:44:ef:4c:69:21:7e:2f:69:72:db:25:c1:b8:
9e:9b:e4:0a:af:7e:cd:bd:e6:86:eb:f1:e4:74:7f:8d:ab:a2:
6b:6c:d6:48:a6:27:25:e3:3a:d7:4d:a2:fc:d8:42:70:f7:8c:
2c:32:d8:1c:1a:f9:da:f5:55:92:bf:87:96:60:9a:69:34:9b:
1f:b9:da:01:52:4d:8c:6f:56:58:6e:b5:e7:81:1a:08:3b:ad:
21:87:c1:39:37:92:87:4a:6b:f1:e4:9c:6e:6e:85:fb:6f:8a:
a3:98:2f:1f:50:5d:48:a3:fa:8f:ab:f4:ad:8c:13:6e:2c:12:
69:c9:05:21:81:1d:cf:65:65:e0:d0:09:5e:00:fe:f4:d2:21:
7a:ae:95:1b:88:12:62:63:5c:f4:ac:02:23:59:fb:61:91:f6:
b1:3e:15:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:51:32 2024 by rpki-client on console-fra.rpki-client.org