Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: M8fRbBzho6gARFnnSVT17tQJxMf7fHhhOPReECJiKik=
Subject key identifier: 62:A5:BF:A6:55:B7:59:91:A0:B0:FB:CA:11:73:9A:F3:2D:63:D5:46
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 019358773B74C640D6F42B3EEA3A6784FDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 1377
Signing time: Sat 23 Nov 2024 10:00:29 +0000
Manifest this update: Sat 23 Nov 2024 10:00:29 +0000
Manifest next update: Sun 24 Nov 2024 10:00:29 +0000
Files and hashes: 1: IPeB_4oFUosWM_xpZez_bTsnFr4.roa (hash: uGGbyq/v5AW/NTT8wHa5ucEHEe+2ry5QXVT1i+SbQlw=)
2: vK-Xsy_lxlY2UwmSEVNVXo5cJSo.roa (hash: hKMGzMk4nuJMT7X2pKv7bDghCdHa03TC4wFkoY766lY=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: yP2dkwSDHHbUw9iDmw5oMjP0kpLU8P1kjpgSHnTq8Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:3b:74:c6:40:d6:f4:2b:3e:ea:3a:67:84:fd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Nov 23 10:00:29 2024 GMT
Not After : Nov 24 10:00:29 2024 GMT
Subject: CN=62a5bfa655b75991a0b0fbca11739af32d63d546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b1:bc:4b:c5:1f:be:b6:81:f6:2f:22:64:b9:
02:6b:2c:d8:f2:90:63:44:93:17:f4:f5:79:e8:a3:
d8:04:c4:69:1e:ae:64:07:1f:61:22:b0:d1:9c:5d:
83:d1:5f:cf:27:d7:d0:8e:4f:d4:27:93:17:a1:36:
85:30:66:4c:7e:90:7a:bf:6c:37:4d:e2:f6:bb:e0:
db:47:8a:88:84:8c:17:bb:53:c0:0d:95:80:10:8d:
f8:28:de:05:53:b3:30:f8:ac:d4:84:00:5e:d5:02:
75:1d:52:8f:65:d4:ca:a8:71:89:14:70:50:17:23:
ee:ca:17:83:fe:d8:53:57:ea:22:ed:91:2a:62:ee:
37:f4:11:99:6c:bb:2a:05:4c:b0:a9:f8:66:7a:10:
cb:73:65:31:74:af:08:c4:a1:95:d0:07:f3:a1:20:
1c:73:59:38:c1:3a:9d:36:1d:06:9b:9c:6e:2f:46:
19:2c:9b:7c:98:db:6b:aa:09:3d:0b:36:39:74:c7:
92:1f:90:ea:bc:40:53:f5:de:24:ac:07:07:fe:e1:
dc:73:90:0c:3a:64:23:f2:d6:f2:5b:05:09:4a:d7:
16:08:5e:c9:5e:21:ac:dc:5b:b0:33:8e:5c:7e:7f:
69:4f:c8:30:65:c0:9f:ef:b9:06:eb:fd:e8:a8:06:
ed:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A5:BF:A6:55:B7:59:91:A0:B0:FB:CA:11:73:9A:F3:2D:63:D5:46
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:11:f3:d7:8b:d2:9d:b7:93:c5:ac:a7:4f:0b:73:3a:70:88:
aa:60:06:ac:68:a1:ca:7b:8f:8f:3e:09:47:d3:34:07:f6:81:
33:ef:64:7e:a0:25:c9:1d:47:6f:80:6a:e2:a3:a1:d3:6c:a2:
33:eb:c5:e1:2e:61:02:16:69:3d:64:28:64:ab:aa:a5:d3:f4:
5c:7b:de:09:15:f4:d6:93:4a:7a:39:3a:df:bf:c6:7a:67:7c:
41:6f:33:2b:b1:cd:d9:73:9b:29:b6:f1:44:c1:97:75:4a:f6:
91:ce:87:24:04:b7:c1:bb:83:70:a4:a5:65:98:e5:b5:44:62:
08:1e:cb:7b:0a:e5:cf:8c:91:8e:eb:5b:a7:47:7f:48:fb:4d:
d0:b4:e4:6a:a1:5b:3c:49:9e:72:43:92:2c:78:28:4d:a7:9e:
71:41:ea:4c:84:f1:d6:3f:e4:7a:6f:7f:9d:76:63:87:e6:8c:
b9:f4:8d:a6:c6:32:4e:ec:e9:4d:bd:ee:84:46:8c:6f:99:0e:
6b:c6:68:d6:9d:c4:8b:dd:43:58:b7:a4:0e:59:33:1f:d6:05:
2b:90:bc:03:ee:da:0a:30:20:a2:33:0c:b2:65:1b:96:73:80:
70:a7:1e:80:92:4e:5c:46:fc:cc:18:78:82:d5:7a:42:51:ca:
f2:2e:52:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:04:30 2024 by rpki-client on console-ams.rpki-client.org