Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: 1odoH/2r3xyOMHNoPJtwdHf/LpHYP8xK1Td63ToGZkE=
Subject key identifier: FD:C3:17:15:5F:09:13:17:2A:A9:42:DA:31:80:D2:0E:29:A7:CE:F7
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 01935F5577BE8D32BB19DE88E1255321710B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1376
Signing time: Sun 24 Nov 2024 18:00:56 +0000
Manifest this update: Sun 24 Nov 2024 18:00:56 +0000
Manifest next update: Mon 25 Nov 2024 18:00:56 +0000
Files and hashes: 1: HFx9zh_n81uskVMiZzVwMjSMEwk.roa (hash: cHQiHKXtTA5s7R1cKIuz+dGZ8QT/vuWIrjPXNwtfclQ=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: QfGhHPL9RXfAkMwNREQNyaZtpcqa2vD4KEvhm2f3m78=)
3: pYpy0y4-gyn4kxpR5rfxZ8y43IA.roa (hash: D6GxiV73MrMInGkPISEWZyR97QTKxev/Joz1STUUkvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5f:55:77:be:8d:32:bb:19:de:88:e1:25:53:21:71:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Nov 24 18:00:56 2024 GMT
Not After : Nov 25 18:00:56 2024 GMT
Subject: CN=fdc317155f0913172aa942da3180d20e29a7cef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:22:d8:e9:6f:c2:96:c3:4e:2f:f3:5b:4f:
36:89:e8:c6:18:b8:b5:92:b7:ea:04:7e:30:88:4b:
bf:7b:d0:f9:66:f9:f1:33:72:f5:14:ad:1f:3d:7b:
73:00:7e:74:f8:31:9e:27:60:d0:57:79:32:c6:81:
ec:0c:a5:88:2d:9e:a3:50:90:08:82:e4:3c:7c:69:
15:a1:b9:aa:11:4e:64:70:70:18:48:c2:7b:63:32:
20:49:a3:57:05:3b:0f:94:c0:d5:32:b8:b5:04:e5:
45:d9:da:e4:67:3a:2d:bd:16:7b:86:61:4f:cf:40:
a9:df:46:64:2d:cd:2a:e9:e3:a5:23:90:85:e8:e6:
66:35:46:5d:22:dc:82:cd:08:ff:bc:a2:4b:a0:af:
d2:43:51:cd:f8:86:ba:07:89:27:8b:76:09:65:7a:
f5:cd:c0:22:04:f0:ff:af:a1:99:b4:b0:64:80:2c:
2a:4e:8a:20:5e:1a:1e:d9:c2:ca:9f:7e:fd:94:45:
34:47:ce:ff:3c:a4:b4:c5:57:f5:7a:12:03:7d:81:
9e:73:74:33:2b:9a:4b:86:9a:96:de:ae:95:0d:b3:
9b:a1:7b:a7:df:8c:7b:95:72:24:2b:76:32:eb:5f:
ef:96:df:f5:ff:f5:6d:0f:80:57:d7:ed:0f:93:dd:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:17:15:5F:09:13:17:2A:A9:42:DA:31:80:D2:0E:29:A7:CE:F7
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:75:c8:0e:36:8b:ed:1e:d9:e8:aa:a3:5e:fc:b6:96:a9:cb:
d7:ca:14:ea:78:73:9f:b8:91:1b:8e:c3:6d:7f:2b:15:20:85:
95:6c:92:8d:51:7d:28:09:19:be:93:14:61:63:c1:d2:e3:ac:
16:05:4e:2f:b2:59:ef:d2:08:9f:94:d7:56:ec:ef:d2:52:6e:
94:d3:79:66:bd:e5:1c:ce:bb:40:a5:8d:fd:17:e7:2b:4f:5a:
61:8b:69:33:8b:6d:9b:3e:06:f2:ab:82:e8:cc:d4:bb:46:1c:
a5:38:6b:e9:8d:f8:ea:00:c8:13:42:8f:4f:91:ee:53:03:53:
d5:1f:42:51:d0:8c:33:4a:ca:c2:23:59:f7:3b:16:19:78:11:
94:2c:49:cc:bc:5d:3f:11:47:08:47:37:33:6f:36:db:03:6f:
71:5e:c8:09:9d:f9:92:9e:01:2d:09:53:5f:70:15:d0:5e:0f:
cc:74:58:c5:07:13:92:da:51:5a:75:67:54:01:3a:7e:61:ed:
5c:89:3c:51:f0:d6:0e:de:32:d7:22:d3:05:63:e7:91:aa:06:
91:28:8f:e5:fc:6d:74:b1:21:71:e5:8f:8e:70:2c:cd:0e:79:
f5:31:cc:9d:52:30:32:82:e0:06:4d:75:47:47:e8:42:fd:84:
bc:25:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:33 2024 by rpki-client on console-fra.rpki-client.org