Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: Q980VCO8c1/NrT6FL25ZN1PfXBmcxQ8lqhvALdOB4Ls=
Subject key identifier: F8:E4:8D:20:B8:72:61:58:06:54:03:69:75:FC:DB:B6:D4:76:27:D9
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 01936AB4A49110F48955DC7E197D7150E975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 0D3A
Signing time: Tue 26 Nov 2024 23:00:43 +0000
Manifest this update: Tue 26 Nov 2024 23:00:43 +0000
Manifest next update: Wed 27 Nov 2024 23:00:43 +0000
Files and hashes: 1: hjCgM-ystt0Xy0OhGLt3SQGJKvg.roa (hash: FatDd7lOPUBvMlYhasNW5rlsyqegCbAlWwJuCxUa240=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: b3s9/Jy7zAd8KisVR//GAYpgsUpv+bOz3RHMivA1/I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:a4:91:10:f4:89:55:dc:7e:19:7d:71:50:e9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Nov 26 23:00:43 2024 GMT
Not After : Nov 27 23:00:43 2024 GMT
Subject: CN=f8e48d20b87261580654036975fcdbb6d47627d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:5c:b5:bc:5e:b6:a0:c9:0b:71:6e:b9:49:
6e:9b:f1:8a:af:a3:62:4f:7d:d4:7e:0c:f4:1c:23:
8c:84:33:7c:52:58:d8:02:e5:ad:b9:66:11:15:23:
e8:8f:32:26:c5:4b:e1:49:c9:af:4e:90:85:c2:fd:
bc:bb:3e:e7:22:7b:2c:d3:77:05:55:84:22:5c:29:
2f:e2:51:9a:4d:33:ef:82:1b:de:df:f9:9c:b4:c7:
0a:ed:1f:25:16:3a:47:54:98:b8:45:92:55:35:76:
2e:11:b8:17:ba:68:39:9c:06:e9:7f:a8:49:fc:67:
8f:53:af:6e:2e:f9:16:1a:82:c3:3a:32:db:de:00:
3b:68:b6:bc:c9:dc:34:60:a3:f9:28:39:f8:bc:b4:
2c:66:d9:69:50:6d:c7:e6:fa:83:8f:7e:12:55:af:
4f:0e:f9:96:e6:9e:9a:9d:cf:70:e6:53:ed:72:26:
e1:c9:d3:c3:dd:a4:48:9d:bd:e4:65:30:82:b9:d7:
f6:ba:f8:80:ef:38:31:b8:30:94:b9:22:e9:fa:61:
0a:af:54:af:dc:5e:c7:bc:8d:09:04:8c:6b:76:cf:
0b:42:cd:4a:26:b1:cd:8b:e2:7a:50:6a:2b:f3:33:
2e:a4:7b:9b:84:e1:4d:81:dc:24:5d:7e:a9:da:66:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E4:8D:20:B8:72:61:58:06:54:03:69:75:FC:DB:B6:D4:76:27:D9
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:91:e3:72:7c:93:7b:82:88:48:be:d2:2c:45:bc:b0:94:0a:
eb:fa:11:3a:59:59:98:d9:b1:d7:d4:72:f8:07:f1:db:03:73:
61:a5:88:0a:85:3b:fc:51:85:d6:8d:5d:a4:67:77:22:f1:43:
d7:9b:de:42:f9:de:c8:53:b9:59:cb:78:20:eb:2d:c2:4a:5f:
8d:35:c3:d3:8f:8f:b9:83:ab:58:b1:fd:41:f6:b4:37:6f:ea:
fd:02:a7:7f:06:97:d4:1c:21:ae:92:bb:71:11:b0:e4:60:4b:
91:1f:9d:3a:19:2d:43:f9:4e:e1:1e:5e:3a:d3:21:b6:64:a9:
a4:5f:d2:a8:79:61:a7:6e:76:23:c9:55:83:a4:d6:6d:e6:22:
f7:e3:3c:d6:77:ab:f2:fa:23:03:b8:40:f3:c7:30:41:a8:18:
1d:0a:86:71:9e:d9:c8:58:95:e9:c4:92:10:38:c9:30:53:c3:
db:66:2d:6a:64:64:ba:07:c3:f7:ec:07:2b:cc:90:da:a6:7f:
6d:4f:5c:38:ca:6d:3e:e9:d6:fc:0c:b0:aa:25:20:e9:70:3d:
7f:5e:f4:c3:b3:f4:74:33:02:bd:61:93:1a:ef:67:06:df:2c:
97:f3:73:33:1d:b1:ac:36:9e:79:46:68:53:54:2a:89:a7:6d:
d3:83:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:40 2024 by rpki-client on console-fra.rpki-client.org