Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: F68/jHcxkCAv5oLPgSX6IziymahCOrltSDUePCELoqM=
Subject key identifier: 1C:59:20:71:BA:A9:BE:5E:BF:EA:1F:DA:C3:DA:14:69:E7:AF:46:E2
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 0193550837FEB37189C1D60072F242B4F339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 0FE2
Signing time: Fri 22 Nov 2024 18:00:22 +0000
Manifest this update: Fri 22 Nov 2024 18:00:22 +0000
Manifest next update: Sat 23 Nov 2024 18:00:22 +0000
Files and hashes: 1: KWyhHXZXhHyi_-yry-IIMkO12Ao.roa (hash: pl72D5DODw4173c5V2ugBGS3R7tDyLJ4Qw/5lr3IWs4=)
2: bIZ74TIuRi7MOTRPukxdsBhXK1E.roa (hash: EjnBa0jfebG0N0I3J02p0J5fX/TYH6+0m0eTxbUE+Qo=)
3: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: oCA8Yr/fQMklJ8lg75sf5B5Z4wXupjMPeSiIc15QHG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:37:fe:b3:71:89:c1:d6:00:72:f2:42:b4:f3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Nov 22 18:00:22 2024 GMT
Not After : Nov 23 18:00:22 2024 GMT
Subject: CN=1c592071baa9be5ebfea1fdac3da1469e7af46e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:85:6a:9a:cd:b2:9f:8d:89:e0:bd:d1:67:
60:5a:b4:9c:8a:c0:d0:9a:24:58:ce:ca:a2:b3:1d:
23:5d:b5:55:5e:e4:9d:2a:63:0c:a3:84:c9:76:f1:
7a:50:ef:9c:a0:f7:da:4f:e5:a4:c1:2f:a9:f6:6f:
76:bd:73:25:16:06:ad:c3:2e:e1:b1:a6:34:3a:f3:
92:64:32:97:09:c9:90:ef:92:02:6d:72:ab:94:5e:
91:0e:63:ae:a0:60:6b:bf:2b:22:a9:15:d0:2a:b9:
95:64:63:9f:7e:c6:b3:fc:97:be:ae:d7:23:fd:95:
01:e3:8d:82:65:c0:79:61:65:69:47:85:ed:ef:08:
cd:a1:49:f5:48:fa:53:6a:1d:ed:ec:70:40:e6:02:
a0:0c:2b:0a:73:89:0c:5c:8d:d4:5b:8a:1a:11:32:
fe:41:6f:5a:b3:38:1b:ce:b5:e9:26:c2:57:06:40:
2a:0f:77:09:bb:95:ea:2d:c3:dc:4c:ea:42:b3:5b:
4b:de:43:f5:6d:7b:84:89:41:e2:84:97:c0:76:d3:
c1:3e:fa:d8:1d:46:24:85:24:8f:ef:24:52:08:03:
7f:e0:cb:59:fa:8b:b9:7a:86:6e:d8:b9:5d:84:8a:
d0:7a:f6:45:e0:b0:50:ac:cd:2f:8e:9b:0d:81:73:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:59:20:71:BA:A9:BE:5E:BF:EA:1F:DA:C3:DA:14:69:E7:AF:46:E2
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5f:e3:70:ee:a3:29:62:42:bf:c2:fa:9e:46:3c:b8:9d:8a:
60:44:08:3e:7c:be:4c:da:68:8b:0a:c3:33:4e:c5:98:4e:a9:
f0:9e:e5:af:1f:2c:85:a7:5e:b9:d7:f8:43:92:36:5f:8b:24:
17:19:a1:e3:85:62:3b:99:ff:68:30:4d:63:e1:58:fa:dd:2a:
5c:75:fa:05:7d:e1:66:a8:32:47:90:81:8e:ab:95:c8:91:a7:
72:65:59:e5:13:21:aa:82:96:a4:00:55:44:7e:40:e6:bc:75:
55:e2:ee:97:40:d8:d9:20:a0:66:23:96:5a:bd:96:54:b6:31:
f5:81:93:e7:6f:58:b3:8e:df:49:33:47:8a:a6:35:e2:7c:43:
3f:35:d3:87:06:9d:a8:07:05:15:d9:c4:73:8a:e3:77:18:ff:
2b:88:b9:e4:09:4a:9c:81:31:cf:0a:90:c0:47:88:6c:d4:87:
82:91:87:1c:00:e6:88:e9:3b:26:8e:10:a2:e8:db:0e:89:8e:
b2:2b:f5:02:22:c8:49:cf:80:70:02:04:f7:28:87:8f:60:6c:
58:74:1e:a5:b9:60:97:29:b1:fa:3b:0b:89:9b:40:7a:c8:2f:
64:7a:c4:94:df:ba:77:76:de:d1:95:35:50:ab:3b:42:b8:70:
97:c6:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:58:26 2024 by rpki-client on console-ams.rpki-client.org