Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: JTl8HhYDq79q0B8cfXF60jpBwkVNHWigdf6tNor42uo=
Subject key identifier: 49:D3:60:48:CF:8A:30:66:89:F9:FD:68:B9:E4:1C:11:AC:DD:C9:95
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 0193568A30E8BB2ACD28582CFF09ABCF25C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 072D
Signing time: Sat 23 Nov 2024 01:01:57 +0000
Manifest this update: Sat 23 Nov 2024 01:01:57 +0000
Manifest next update: Sun 24 Nov 2024 01:01:57 +0000
Files and hashes: 1: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: AGfRJ/AZ30cXMZzrEp3B/7qPnaTwlzqjdhuOgDv1WQU=)
2: ewZfEts9gqAe8Jgs1WakpG9VA2E.roa (hash: VKjMi7qH3TKkWx9nL+OCMje8kdmyivkRUyCd84BWoQ0=)
3: kOlrPnBB5B8bTJ2gq1oQZMICiUo.roa (hash: Em8re/LDHgQMn4fBVoNtbH+p9Q2NITTJ0mZ6F2AbHzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:30:e8:bb:2a:cd:28:58:2c:ff:09:ab:cf:25:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Nov 23 01:01:57 2024 GMT
Not After : Nov 24 01:01:57 2024 GMT
Subject: CN=49d36048cf8a306689f9fd68b9e41c11acddc995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:e0:f1:b0:ab:62:cc:2b:ad:3a:90:93:5d:
33:60:6f:f1:9d:56:5a:2d:33:17:94:6f:f8:d8:fc:
7e:54:13:89:6b:9a:a3:e8:34:31:a3:19:78:73:1c:
78:16:94:ef:aa:11:be:0d:23:b7:75:00:95:dd:0d:
66:2a:95:60:7f:d9:da:d9:ea:e1:64:16:ec:08:1b:
c1:6b:83:b9:c4:a8:a4:bf:67:01:a3:e8:72:c2:b2:
fb:60:84:05:8f:bc:0f:82:68:27:17:f2:77:bf:90:
95:01:be:4d:38:0c:f1:09:1e:59:63:93:25:24:3d:
e9:64:7d:ac:d1:2e:8a:23:5a:b1:76:5c:af:8d:4b:
db:35:48:62:c1:44:a4:51:b7:03:ad:b7:d6:1d:7c:
53:45:1e:69:3d:06:50:bd:02:20:4b:a2:29:61:43:
aa:dc:3d:66:6c:d6:16:c2:dc:aa:00:10:d6:86:db:
b6:35:a5:40:5c:3e:f4:a5:dd:6c:bf:a6:2b:93:b7:
51:b9:f4:41:69:28:9c:84:c3:3c:8c:bd:59:e1:ca:
46:9b:9e:58:51:d1:f1:f5:73:12:7e:89:7c:0f:18:
de:1c:a1:b0:a7:39:0f:79:19:a0:5f:42:03:2a:c3:
22:4d:32:24:87:be:c9:5f:54:0e:a8:c7:b2:78:39:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D3:60:48:CF:8A:30:66:89:F9:FD:68:B9:E4:1C:11:AC:DD:C9:95
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1a:3f:1f:1d:34:76:49:7f:c5:af:5b:58:27:ac:4e:11:d4:
0b:73:73:bb:2c:ee:ca:38:d3:16:6b:85:d7:bf:07:62:5b:df:
9e:f8:22:1e:f6:22:3e:86:ad:52:6f:f1:cf:62:ff:62:68:f8:
04:f6:7f:64:02:7b:56:8a:5d:62:67:5a:9d:68:a4:21:af:f2:
d5:74:74:11:86:a0:54:96:10:15:f0:12:3b:3a:f9:7a:d9:cc:
bd:4d:24:5e:23:4d:00:02:04:b9:75:e1:db:56:15:1b:54:b2:
0d:38:97:83:a1:3a:22:f8:eb:8e:33:22:d9:5f:2f:89:cd:43:
6b:a0:47:91:95:67:6e:e0:66:93:4b:27:95:45:e1:c8:0d:f8:
aa:4c:04:08:53:0d:ee:15:5e:85:61:77:60:cb:57:2f:91:8f:
20:eb:0b:b2:c8:88:34:89:68:f5:8e:c4:52:1d:01:82:fb:6f:
82:1a:6b:25:eb:a7:8f:b2:84:df:9f:be:18:18:57:39:5a:17:
51:88:70:1b:ce:58:05:81:b0:ab:b9:49:d1:b4:63:25:62:55:
62:64:26:af:0b:34:fe:5b:87:7e:77:86:d2:74:24:e4:e3:0c:
c7:6e:28:22:65:f9:ef:6c:c4:b7:dc:48:2f:f1:77:8a:03:64:
35:24:ce:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:09 2024 by rpki-client on console-ams.rpki-client.org