Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: 4WRJ390dkYrVQGkQbbsJXBdX2IZHJj1ox94hGstNMQ8=
Subject key identifier: 2B:75:4A:CE:38:57:2D:E5:C1:A4:E6:FA:30:12:D2:5F:9C:BB:8E:12
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 018F8C00BEB1614339F0CC4627CFBE9A3DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0574
Signing time: Sat 18 May 2024 14:00:10 +0000
Manifest this update: Sat 18 May 2024 14:00:10 +0000
Manifest next update: Sun 19 May 2024 14:00:10 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: 0DxGhUzLLYDJgiwEQVhN8p2eLGuqHpz1/9clTcyzlXw=)
2: XHTIV5GFr2GwbJP-Mv_nJHnOEsQ.roa (hash: caXXXOz/PWqCRjDafgEWObIs+edXTsj287rNJ0g9tK8=)
3: o56-xbCEnLsH6EdcMKB8jX6PHGk.roa (hash: aGvZQcL6KBWzikqZTJd1lTqnDEJbaFhlB4ZOi0CoBss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8c:00:be:b1:61:43:39:f0:cc:46:27:cf:be:9a:3d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: May 18 14:00:10 2024 GMT
Not After : May 19 14:00:10 2024 GMT
Subject: CN=2b754ace38572de5c1a4e6fa3012d25f9cbb8e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:ea:14:5c:cf:90:4a:9d:3e:b1:dc:ed:34:
87:16:86:b7:92:29:2a:86:19:64:d3:dc:13:25:ff:
06:86:d7:4c:e3:9f:8e:7f:2a:aa:e2:6e:8f:c7:7e:
21:22:d7:8e:f4:f9:8b:d2:43:27:f2:39:69:86:b6:
67:5b:49:d3:fe:47:49:6d:d7:30:32:8f:2f:cf:74:
b6:30:a5:82:b1:7a:6e:5f:c9:3e:36:39:dd:f3:ef:
e9:9b:70:ed:65:c0:de:81:0e:52:85:af:59:5e:ed:
b8:e6:21:a9:52:39:f7:83:21:29:ef:29:08:16:2f:
5b:4b:d6:71:11:f2:20:68:c2:92:0a:d6:3a:a9:8b:
09:7b:13:85:e6:a6:40:c8:9b:d7:f4:c3:8c:08:94:
b4:6c:8e:e8:73:02:24:a3:d6:5b:63:10:41:3d:1d:
2f:54:e5:30:17:86:fc:ed:8d:54:76:98:70:1f:4e:
84:df:cd:e2:b4:1c:17:21:c1:f4:6f:88:1a:c6:a0:
4c:90:68:15:70:37:d7:be:28:7b:44:a7:98:cb:35:
bd:51:ce:8b:75:d5:8d:af:b3:32:17:6e:52:dc:34:
18:f1:52:48:86:74:ea:06:34:8c:65:76:32:6e:9e:
3f:dd:f0:6e:16:df:f8:4b:ce:40:e6:cc:d7:fe:aa:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:75:4A:CE:38:57:2D:E5:C1:A4:E6:FA:30:12:D2:5F:9C:BB:8E:12
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:de:a8:42:f7:fb:99:f4:db:fb:12:2a:27:c2:90:03:11:a4:
37:e7:87:e1:93:4d:65:7e:64:7e:71:53:93:36:72:63:4a:f8:
98:ca:99:2d:c8:ce:bc:b3:d7:70:5d:fb:d7:ea:b6:16:0d:ff:
ca:d5:14:2b:5c:08:33:cc:6a:6c:f5:79:92:06:11:3b:13:32:
46:93:ee:05:53:d7:d0:2c:02:c2:66:87:f0:79:9b:5d:b3:b0:
39:8b:37:13:1c:7e:c3:fa:d6:fe:2c:3e:46:b3:2f:f8:ab:ca:
ec:ba:91:98:e0:0e:4d:63:7f:d6:a8:05:ce:40:11:50:03:2a:
60:d5:4f:84:61:c5:f8:e8:03:da:57:c4:f7:19:19:24:0c:f3:
e2:59:bb:18:6d:c2:ad:1b:b8:ba:5a:0c:90:95:7a:e0:93:cf:
f7:05:e2:41:e1:44:6e:db:b9:e7:37:81:6a:79:17:b8:2e:d1:
4f:b6:1f:5d:c8:b8:8d:fd:bd:ea:7b:15:5f:4c:4a:16:ed:34:
90:29:16:38:5e:5d:f9:3e:10:d4:6c:8f:c7:7e:5c:a1:67:92:
31:e8:ae:1a:6b:65:f1:3a:70:07:64:de:6b:56:2b:8c:5b:03:
ec:ca:3a:94:69:60:f3:df:93:59:5e:76:5d:52:d6:37:32:57:
6f:81:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:25:49 2024 by rpki-client on console-ams.rpki-client.org