Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: C3awk1x8Y3CfKcK/sTAjWCKN13aEWvrS1Zlgofw1aJA=
Subject key identifier: 36:C6:61:8E:DE:CA:8A:E9:B1:B3:27:FB:BD:B5:E9:49:C9:FB:27:31
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 018F8CDC6A49C0821E083A0AC828FFA26E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 9C
Signing time: Sat 18 May 2024 18:00:06 +0000
Manifest this update: Sat 18 May 2024 18:00:06 +0000
Manifest next update: Sun 19 May 2024 18:00:06 +0000
Files and hashes: 1: sFBBsVTJ0wKU3wqQ3RdEonpAFsQ.roa (hash: oXLY9YVbQ51sltpcenBm9dkZe73Ldv3pRi/W5K4xXYQ=)
2: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: tw3BzQ/BdZ7lSV4Wga2YSe0iSaxdnSLKWCtk9OKA7lU=)
3: zUJDwWtarPud5bzFNriDRdjYULw.roa (hash: uQCnIUvCCS/Bxuvfpbjp/X3ojiWwT0fuya+j+HU4fFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 18:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8c:dc:6a:49:c0:82:1e:08:3a:0a:c8:28:ff:a2:6e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: May 18 18:00:06 2024 GMT
Not After : May 19 18:00:06 2024 GMT
Subject: CN=36c6618edeca8ae9b1b327fbbdb5e949c9fb2731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:83:0f:30:da:d4:e7:87:64:76:c7:5c:d4:
1c:5d:90:9e:44:d3:f3:64:c2:ed:ec:f5:a4:2c:bd:
58:2d:e8:3e:a1:56:ff:34:83:85:e3:4d:f0:35:da:
3c:64:fa:96:5c:40:16:fa:f6:92:e2:ca:46:4d:14:
28:00:1b:ba:05:86:40:49:7c:06:3d:d4:b6:0d:eb:
7c:bf:81:50:77:22:d9:81:2a:21:e3:e3:65:58:dd:
86:9c:af:c0:65:49:18:f5:ec:cf:5a:40:e4:39:c9:
b8:c9:c5:12:9f:4d:e0:bd:8b:3e:cc:ca:94:fd:07:
e2:2d:50:e4:df:25:91:80:18:b8:2c:a9:13:b0:f8:
a2:bf:97:20:2a:25:2d:43:18:46:61:8d:23:d7:01:
41:65:a6:40:95:52:dd:4f:8e:77:43:f0:22:9c:95:
9e:f2:6c:6b:81:03:a3:1e:5b:9b:08:3e:12:e5:79:
bb:91:b7:9b:1e:ea:75:6f:88:92:4d:6e:25:3f:a9:
45:26:22:aa:d5:03:7b:41:27:63:8e:98:bf:55:e3:
72:63:ce:b5:2a:27:2c:e8:c8:54:d9:e0:95:18:51:
a8:e8:3b:18:83:59:9f:dd:e9:63:5a:a6:4b:8d:e5:
ad:d3:de:6b:3e:b1:bf:e1:92:b9:98:94:30:7b:60:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C6:61:8E:DE:CA:8A:E9:B1:B3:27:FB:BD:B5:E9:49:C9:FB:27:31
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d2:25:13:d2:bd:42:aa:2d:7a:4e:d2:73:84:3c:65:78:2c:
f0:0c:e8:da:57:75:a8:9f:7a:94:fd:c3:72:e8:72:94:ea:35:
51:ad:c7:75:19:61:05:00:8e:a7:17:98:50:43:26:78:db:d5:
17:0c:7b:59:79:b0:84:7b:85:13:70:eb:2c:3a:ca:77:10:05:
7e:75:5e:7c:00:0d:b8:e3:48:77:94:7e:79:2d:ae:c4:11:15:
d6:41:56:e7:a4:0c:91:98:3d:bb:71:a8:75:ca:e0:39:01:46:
5b:e6:b7:9e:b6:11:4c:7e:41:a1:b1:c6:8e:f1:60:84:a0:44:
2b:3b:bc:b5:b5:7b:46:7d:5b:71:fa:86:5a:08:fe:d5:47:30:
4f:4a:a4:1e:31:23:d9:2a:ed:5e:80:d2:21:93:98:43:d8:55:
a6:aa:be:30:a7:41:4e:e4:0a:04:b0:9f:38:d3:43:84:89:48:
b7:34:37:7f:ed:fc:1a:f3:50:9a:be:87:6b:d3:fe:5b:13:96:
de:d2:5a:b0:07:59:b0:31:c7:72:9c:05:97:0d:9c:01:3d:7d:
9f:63:a2:21:02:72:1c:6a:47:8f:3e:da:c9:22:ad:12:14:a3:
14:66:7e:89:2f:cf:08:28:b6:1d:66:2e:64:74:5e:17:4c:c5:
d8:8c:3b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:28:46 2024 by rpki-client on console-ams.rpki-client.org