Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft
File: lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft (raw, json)
Hash identifier: k7huQAKef9Q0Wlz/Fav45pAX2gVPrEgV6XU5RkZADqM=
Subject key identifier: FA:E7:4A:08:04:BB:A7:4F:4B:5A:58:4D:8E:39:CD:23:75:9C:D3:2B
Authority key identifier: 97:20:6B:52:01:DF:70:EB:91:66:69:B4:55:84:96:47:79:7A:B6:79
Certificate issuer: /CN=97206b5201df70eb916669b455849647797ab679
Certificate serial: 0193531A3B62EA4E894AF66F85C610EA9A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyBrUgHfcOuRZmm0VYSWR3l6tnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft
Manifest number: 02E6
Signing time: Fri 22 Nov 2024 09:00:48 +0000
Manifest this update: Fri 22 Nov 2024 09:00:48 +0000
Manifest next update: Sat 23 Nov 2024 09:00:48 +0000
Files and hashes: 1: XcPmUFJ8bKg2bA3t96XXVSrN2Ag.roa (hash: FbwTi22PZGVU1q9JYAS8Qvt6AanUb8SNUN6htl193zs=)
2: lyBrUgHfcOuRZmm0VYSWR3l6tnk.crl (hash: ScQ7qVIhBD6F9Mikiyqii+jGCbdRuq+jj3SJb4tzJi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lyBrUgHfcOuRZmm0VYSWR3l6tnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:1a:3b:62:ea:4e:89:4a:f6:6f:85:c6:10:ea:9a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97206b5201df70eb916669b455849647797ab679
Validity
Not Before: Nov 22 09:00:48 2024 GMT
Not After : Nov 23 09:00:48 2024 GMT
Subject: CN=fae74a0804bba74f4b5a584d8e39cd23759cd32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:2e:6d:85:da:a7:4d:52:5f:9f:f3:80:16:
3f:0b:66:15:90:c8:73:a1:75:d6:95:81:5f:56:f7:
3e:77:8a:88:1d:94:67:a4:0b:4e:90:cc:6a:35:f3:
7d:72:ca:ea:43:dd:2e:ac:d1:19:11:c9:06:10:85:
b3:c8:5b:d6:40:87:4e:87:74:fa:f6:62:8b:27:0c:
53:47:05:e8:b0:ba:05:11:19:ea:bb:5a:f9:35:82:
17:34:4c:c4:60:00:37:cc:2c:02:37:48:74:05:66:
99:7d:cf:59:26:87:78:c0:23:43:e3:54:a6:1c:34:
ca:8d:82:57:12:7c:48:1c:66:57:5f:03:eb:a8:9a:
93:0f:45:04:14:95:23:10:10:e8:41:7e:1a:f7:1a:
fc:a0:2d:46:1d:3d:48:74:c0:c8:1a:b5:06:9e:7a:
b0:7e:ae:f2:dc:ce:0d:38:e8:2b:25:07:72:4a:97:
90:f9:83:9c:b3:11:51:ce:51:67:bb:0a:50:d5:e6:
8f:86:c1:6a:80:64:3f:ff:43:0b:ef:0a:a7:26:fc:
60:60:a4:96:1e:c8:f6:75:f6:21:eb:0f:f3:04:a6:
e1:13:60:2f:df:f2:e1:cd:e6:04:96:96:b3:d0:19:
44:0a:d3:65:9e:3f:a2:05:4b:c0:5e:65:69:9a:1d:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E7:4A:08:04:BB:A7:4F:4B:5A:58:4D:8E:39:CD:23:75:9C:D3:2B
X509v3 Authority Key Identifier:
keyid:97:20:6B:52:01:DF:70:EB:91:66:69:B4:55:84:96:47:79:7A:B6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyBrUgHfcOuRZmm0VYSWR3l6tnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c6:da:9e:f3:01:3d:c2:56:04:55:04:20:b4:82:6a:19:b4:
0c:82:d8:7d:e3:eb:8e:75:27:a0:ab:8e:54:c3:72:d9:2b:b6:
80:74:2d:ea:f1:96:98:93:4a:45:f1:c4:f0:a1:d9:88:09:42:
c6:94:0c:a2:3e:1f:44:11:a1:bc:65:42:60:78:04:64:08:93:
94:d6:a5:2e:a8:01:18:a0:00:80:96:dc:2c:c8:e3:96:8b:57:
a0:8a:87:73:cf:71:64:35:10:a7:a2:4c:5c:26:e2:4b:d1:5f:
72:56:38:4e:7d:ef:e1:6d:b1:bc:d5:a1:d6:c3:85:18:fa:73:
ec:fc:36:85:ec:ab:6e:f0:4d:53:99:d7:e4:79:c0:4d:c1:13:
a2:55:13:f0:fc:99:72:56:66:9c:2b:d5:43:89:8e:58:c4:20:
0c:a3:7f:fc:ab:9f:6d:71:0d:c7:2e:0b:a9:5b:e9:fb:11:c0:
ac:f1:e3:23:7d:db:bd:92:56:13:7d:03:97:dc:da:11:d0:c3:
a0:d7:c6:9c:6d:b0:9c:10:22:df:d2:93:ff:c7:6f:16:70:cb:
61:d5:ad:71:4c:99:6f:5a:bc:be:ed:58:a2:66:b9:39:ce:46:
99:01:8b:1a:68:d0:22:aa:8c:b6:7c:54:3f:9e:a4:e4:19:70:
8b:08:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:38:22 2024 by rpki-client on console-fra.rpki-client.org