Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File: yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier: 4BBHBjCMrGozvXGaaVgqGxZALIOrcHDLOoYhsKjGzLg=
Subject key identifier: CA:09:FC:09:9A:FD:5D:EB:EF:AD:EC:CE:35:DD:02:6F:06:C8:22:85
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 01935576779B49DECBE05603F7E532B14A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 20:00:47 +0000
Manifest this update: Fri 22 Nov 2024 20:00:47 +0000
Manifest next update: Sat 23 Nov 2024 20:00:47 +0000
Files and hashes: 1: U5ola_3eHUi1bL8g1kEXFx3fqaU.roa (hash: rtgOE8yTu90T7FhIL+KBfeB3CxjEQ1CSlRU6JHLl4SY=)
2: lBAesENEpP969uz9dVY5Z8rgAMs.roa (hash: 4TfGAirs/k32mBJWby5JSHrzGHUUMpBOodn1FiS0YNA=)
3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: qfGz71K8RcA8S2wr/tH1MjkC3R2rSwM95d6fhzTkwcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:77:9b:49:de:cb:e0:56:03:f7:e5:32:b1:4a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Nov 22 20:00:47 2024 GMT
Not After : Nov 23 20:00:47 2024 GMT
Subject: CN=ca09fc099afd5debefadecce35dd026f06c82285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:35:9e:6e:8b:3d:94:f9:9a:d5:6d:a6:8c:
46:42:c8:49:70:30:52:7e:0c:3b:05:fc:d0:a1:41:
01:76:87:95:6d:2d:61:d6:ea:63:fc:02:e2:1c:f5:
0a:df:c4:ea:c8:30:b0:b1:28:ab:7f:f1:71:63:3d:
04:45:54:52:ba:44:29:9f:9a:be:e9:15:40:49:01:
a7:f0:9f:9a:f7:19:f6:6b:67:79:ee:be:ad:3b:5e:
ba:a9:d9:d5:61:e4:1f:c4:ab:9e:ac:38:72:5c:e5:
7d:c6:18:9f:86:5c:89:e7:2d:23:c1:e5:16:9d:e5:
a6:67:d9:9c:67:09:85:e4:ff:97:4f:37:19:02:b1:
df:19:80:3e:a1:0e:91:fe:93:ac:4f:c9:be:63:9e:
79:1b:25:6b:04:27:1f:df:25:20:93:bf:bc:6f:55:
59:30:87:71:d4:3b:a7:65:e5:67:67:fd:e4:e9:b6:
fc:13:94:84:4f:d5:62:de:23:cc:92:d4:8b:52:71:
5f:60:2a:ba:79:3e:9b:d9:80:0c:a1:d2:5b:1f:71:
82:3a:af:f7:23:85:7d:78:59:de:cd:e3:4e:76:53:
7b:3c:68:73:2b:03:63:17:7c:40:a0:d9:fb:cc:7f:
6c:bc:81:4c:6f:63:8b:ab:c2:bf:f0:af:a8:32:ed:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:09:FC:09:9A:FD:5D:EB:EF:AD:EC:CE:35:DD:02:6F:06:C8:22:85
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:48:3c:4a:16:ab:eb:89:d8:cd:a2:43:79:43:ff:a5:a4:8a:
bb:00:cc:f9:0e:bb:8e:8a:87:0d:22:29:f6:22:09:91:be:a7:
24:d0:b5:e2:96:45:50:04:d8:e2:8f:88:4a:28:ad:be:3f:4f:
e5:87:64:37:6f:67:3a:d0:0f:10:16:e4:2f:d1:c7:c7:cf:b9:
50:1d:5d:6d:8d:53:90:ee:15:c4:aa:ec:76:25:bc:1c:d1:48:
fa:d9:ec:8f:51:6e:ae:7a:13:7d:6f:67:27:f8:7a:91:0e:2c:
38:10:59:ed:ac:1c:c8:8e:1a:bd:b6:ed:c6:27:bc:f5:f5:6c:
0f:91:df:6c:fc:7f:17:9a:8a:79:0a:67:c2:16:a2:77:ef:a7:
4b:8c:79:5c:be:2d:b4:92:71:55:2a:24:10:cd:83:57:0d:e6:
d4:9d:71:45:27:94:84:ce:b9:ca:f5:2c:3d:90:d0:0e:8a:3a:
ac:bb:67:55:19:53:ab:34:9e:aa:74:89:18:92:28:13:56:85:
8a:09:40:31:2f:d9:04:a1:00:01:cb:14:84:d2:20:76:be:bd:
2d:5c:8a:85:e2:f0:4a:aa:7d:9f:f8:1d:67:a8:8f:b8:bb:1a:
16:c1:aa:d6:ce:2b:36:89:a7:2c:25:cf:da:42:bf:2c:fd:33:
42:9f:8f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:58:49 2024 by rpki-client on console-ams.rpki-client.org