Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: X18oeLULPaF0SudQ2mcqkuXf/XK56Fgff+NjkDQGvHQ=
Subject key identifier: 61:99:DB:4E:A3:2C:A2:3A:B9:5A:1B:3C:5B:CA:CC:A4:24:86:A6:2E
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 019365573F376381EF173DDCF5B66747E11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 1375
Signing time: Mon 25 Nov 2024 22:00:36 +0000
Manifest this update: Mon 25 Nov 2024 22:00:36 +0000
Manifest next update: Tue 26 Nov 2024 22:00:36 +0000
Files and hashes: 1: m5U6DNdBgbxK6tI3T2eHPUAJZQA.roa (hash: aiqfo/dHvgZbFArM12k2gr8ZCejOUQK2ikPETUWVFFM=)
2: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: IlKrKiEIgLK7ojhO6V2d+qAFheAGAi9z7FXQwf8U8NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:57:3f:37:63:81:ef:17:3d:dc:f5:b6:67:47:e1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Nov 25 22:00:36 2024 GMT
Not After : Nov 26 22:00:36 2024 GMT
Subject: CN=6199db4ea32ca23ab95a1b3c5bcacca42486a62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:29:1d:06:31:4b:d3:4a:ac:63:fd:c8:b0:
69:25:8a:1d:7f:f0:d5:0b:87:50:a6:90:ac:d8:14:
20:2f:04:3f:dd:48:1a:f8:ec:0a:65:e4:3a:4f:8d:
8b:6e:9d:3e:fc:a6:ee:8e:ca:1f:78:8e:32:e5:f4:
39:6e:64:00:b2:f7:c5:e1:ad:e9:68:2f:ab:1b:6c:
56:ee:49:d5:21:09:5a:82:65:01:0f:f5:0c:4f:0f:
f3:a0:e5:ea:e6:db:6e:7c:c4:87:68:9f:e9:c3:eb:
16:16:b3:96:5a:db:46:53:63:17:65:5a:94:f3:2d:
c4:5c:3d:0d:23:40:43:ea:27:c4:fd:f2:55:ff:a1:
5f:f2:dd:6c:2a:b0:71:cd:20:40:88:38:0f:79:cc:
86:03:1e:24:d9:d0:44:a3:a4:0b:3f:98:2d:be:ad:
c8:6d:4c:ae:ec:4d:af:64:f6:a3:a4:64:e0:ac:8f:
fc:9f:00:53:f0:c7:7b:24:b4:3e:c5:13:3d:10:e5:
03:36:f9:8a:1a:c3:77:fe:9e:15:76:22:f0:7a:74:
8a:e3:e8:59:88:17:dc:20:c2:24:79:f5:48:22:4c:
fd:21:8f:ca:53:e3:23:75:64:fb:54:ca:e2:5c:d7:
12:e2:ce:0e:da:5f:09:91:bf:92:85:8d:89:22:d8:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:99:DB:4E:A3:2C:A2:3A:B9:5A:1B:3C:5B:CA:CC:A4:24:86:A6:2E
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b2:66:b8:2a:b6:60:70:0f:10:13:14:9f:49:c3:47:02:b5:
6f:4e:2a:e0:5a:eb:48:8d:da:32:10:5e:e0:cd:cc:4f:28:29:
15:05:7f:b3:f0:82:46:53:91:f6:ac:dc:4d:f6:c7:c7:3a:81:
5f:e2:45:93:3a:12:0d:b6:88:de:a4:c0:d3:18:77:5d:7a:4c:
ff:eb:8b:76:26:a7:75:d6:f3:81:45:6b:98:e5:46:95:a2:d0:
36:d0:3d:2e:5a:b3:74:a2:03:b8:a2:f4:56:83:75:2d:d6:b8:
fa:b3:69:32:46:60:a4:c9:29:7b:54:10:21:12:49:66:ab:14:
a5:a1:66:18:9b:94:68:d4:41:4c:1d:75:1f:cb:38:33:55:2b:
e4:b7:9d:6f:e6:14:6b:7a:c8:4d:b3:26:05:ce:e5:c3:7d:6e:
f4:d4:2d:e5:7c:b1:72:4a:ea:6a:dc:fd:a7:82:b8:fa:f5:4e:
40:88:58:28:33:42:4c:4c:47:c7:28:ca:74:20:06:49:8c:e4:
bf:4e:e9:d5:4a:54:d0:06:83:0a:80:9a:01:a7:eb:70:ca:f9:
98:3f:75:05:eb:2a:41:da:85:95:c0:3b:46:9d:92:f1:68:ec:
92:0f:4c:15:da:27:c7:44:68:5e:e7:88:bd:4c:09:c9:70:3e:
38:5c:1b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:28:53 2024 by rpki-client on console-ams.rpki-client.org