Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: DIhLJiSxnlxwpfmMHfXl+jEudT1k5ky76gf+8umwfaQ=
Subject key identifier: 55:0C:13:E6:4E:C6:FC:0F:09:3A:27:6F:65:E1:A3:8C:D6:0E:2C:EE
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 019354D11FEF679FA3B4EF8D01E316C432C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 17:00:11 +0000
Manifest this update: Fri 22 Nov 2024 17:00:11 +0000
Manifest next update: Sat 23 Nov 2024 17:00:11 +0000
Files and hashes: 1: 41Oyqrj8sed8jkJPHTdPMidz25k.roa (hash: EGeQxsTk6r3vcCK+FOvz1aCKGE9ZD7hsr3TzlDhkr0w=)
2: 9nHjigFuLekPGRzs6DgIkvzpwqQ.roa (hash: s5Jj0OgqcpBI6qHuyIvIBI9MKIBGhXNQZuMx/4fU+Ig=)
3: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: a5ARnkjbB9U+JBKVdz5B5r1mN3xK5D8Y+7tmvWMvtEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:d1:1f:ef:67:9f:a3:b4:ef:8d:01:e3:16:c4:32:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Nov 22 17:00:11 2024 GMT
Not After : Nov 23 17:00:11 2024 GMT
Subject: CN=550c13e64ec6fc0f093a276f65e1a38cd60e2cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:02:ca:fc:cd:c3:a3:8e:f7:7e:10:63:f9:d2:
e3:22:65:f0:65:f8:24:eb:7c:2a:f1:4c:06:3c:0d:
b5:0c:e5:e2:1d:9f:ee:9b:e7:27:38:85:08:05:22:
5d:8b:df:80:70:9b:67:7b:e3:76:db:bc:97:95:00:
46:6e:1e:dc:77:16:fa:60:69:95:18:ac:54:62:5c:
95:b0:6a:53:d4:44:62:48:40:ce:eb:8b:a3:4a:e1:
55:ca:82:76:15:12:8b:97:c0:37:7c:95:39:10:9a:
2e:b9:9b:db:86:a7:70:6a:11:41:e5:5a:00:8d:18:
61:ff:91:9e:c9:ff:95:c8:f5:a4:2a:4f:90:80:40:
b4:0f:2c:98:3f:0d:87:49:5e:b5:3e:70:22:b9:5f:
9c:ea:fd:17:e3:39:10:5e:a2:be:b5:bf:b0:6e:67:
73:fc:45:1c:0e:f0:be:6f:29:0b:8d:a0:b6:d9:9e:
b8:dc:0e:4d:14:f2:cc:bf:17:47:47:3e:f0:f0:fd:
cb:3d:be:bf:42:78:0c:1d:67:df:75:d6:a4:63:30:
e6:a8:61:65:51:66:6c:2c:92:b6:ff:bf:5b:a1:5b:
64:f3:82:9a:14:65:6b:83:82:84:86:b3:c2:bb:0e:
b0:50:fd:3d:e8:4c:3d:eb:30:98:ed:58:23:6f:88:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0C:13:E6:4E:C6:FC:0F:09:3A:27:6F:65:E1:A3:8C:D6:0E:2C:EE
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:89:15:ba:3c:ba:68:dc:49:50:18:c8:5f:3e:8f:e7:57:43:
84:3b:f2:4d:9f:22:7b:c3:cd:f0:ed:01:e1:a8:93:f1:8b:fc:
de:21:fe:6e:fd:40:5e:b5:a5:de:19:08:72:f7:a3:2c:10:b2:
69:75:1c:c1:69:bf:47:fb:f8:e0:e9:28:70:7e:86:9c:87:5b:
7e:b6:c9:8d:4f:e5:10:7c:4a:e9:2d:f9:ee:85:32:70:56:f2:
be:4d:1d:8e:09:b9:4c:95:0f:ef:9e:b1:8d:9f:c8:e4:42:fc:
b4:43:74:27:9c:2a:d8:43:a9:bb:45:3d:62:46:9a:9c:e5:88:
6e:a1:a5:3b:46:ed:3c:7a:e1:cc:9e:2b:20:80:eb:54:1c:d8:
50:ce:21:d4:09:3e:c3:fa:b8:de:cd:69:0f:1a:c1:49:02:87:
fd:86:3e:18:85:10:b6:a8:a1:e2:49:f6:b3:9f:9a:b3:dc:d1:
59:3e:e9:5f:1e:21:0b:2d:69:f2:2c:f3:86:0d:9f:79:a9:90:
7d:b6:3a:05:65:d3:77:84:69:f9:ee:c4:ce:18:7c:c0:df:51:
23:c2:02:5f:49:1f:ae:83:bd:c6:cd:4c:b1:f1:3f:6c:c8:f9:
06:5d:49:1f:11:95:9a:3f:a0:be:c3:c5:36:1d:b9:50:69:bc:
92:92:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:02:16 2024 by rpki-client on console-fra.rpki-client.org