Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: zSnr9PzEw4oam+Jxy/y5htaP52EKVjo4tQeuHbeOVIY=
Subject key identifier: 32:CB:C4:22:02:06:8E:59:34:45:AB:86:60:BC:3D:A6:D6:D7:8C:84
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 019357D2597742F0C3B2C099DFC2B8AB0AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 0F83
Signing time: Sat 23 Nov 2024 07:00:23 +0000
Manifest this update: Sat 23 Nov 2024 07:00:23 +0000
Manifest next update: Sun 24 Nov 2024 07:00:23 +0000
Files and hashes: 1: OY7H-yzSL5V1AD3CoCxkVrLAaUs.roa (hash: gE89JFnas0zbBoMSz9Bs/69C8MbeWFS7NY7fZoD0MaM=)
2: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: z6vB4CBKpoXqUiLAJYSZ1blUOi4bOFrHWk3GlBB42l0=)
3: ml_p7lYFevyu__sVvFG4bCb03R0.roa (hash: yMPZSpiXtVh9hTXd+yF6U3TDRXENWznfieRv1m6tVjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:59:77:42:f0:c3:b2:c0:99:df:c2:b8:ab:0a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Nov 23 07:00:23 2024 GMT
Not After : Nov 24 07:00:23 2024 GMT
Subject: CN=32cbc42202068e593445ab8660bc3da6d6d78c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:45:d9:ee:b2:19:e7:f0:e4:bf:55:c8:77:
d7:4b:f3:dd:b8:57:3d:a3:4d:12:ff:e4:0f:2d:d2:
5f:c8:a6:48:22:b1:99:dd:65:02:43:dc:53:a3:db:
20:d3:1a:61:db:a4:ef:cf:ad:0b:42:a9:c5:c2:64:
01:60:ee:32:f5:45:4d:1a:d6:37:d6:6c:f5:33:3e:
2a:12:2d:21:cf:dd:b2:49:5d:d2:90:ea:99:5a:41:
3b:bd:7c:c1:cf:16:f6:25:96:1f:fd:02:74:35:47:
dd:dd:e1:44:fb:fe:c2:24:f6:66:3f:2b:ed:ad:e5:
8d:ef:7d:03:3d:5c:d5:ef:4c:e0:e8:51:2c:53:03:
7c:32:73:8c:d1:e8:10:c8:3f:39:2e:85:74:d9:8b:
a7:61:c2:27:94:02:49:72:45:64:21:c9:25:f9:a9:
d7:57:b1:d5:b0:4d:4b:96:28:89:7d:0d:26:50:ea:
68:54:6f:8c:5a:c8:45:12:d9:32:8b:3d:28:0a:7c:
96:35:78:41:25:b6:13:ce:9f:2f:c6:51:fb:c9:e6:
e3:52:aa:bf:e3:b0:31:d5:a4:11:af:27:15:ab:44:
fc:6a:fb:6e:ae:7a:a9:51:a4:0d:19:64:d1:d3:af:
af:fa:b5:bf:96:50:22:23:1a:ce:d8:e7:60:8f:a6:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CB:C4:22:02:06:8E:59:34:45:AB:86:60:BC:3D:A6:D6:D7:8C:84
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ca:72:40:69:49:0b:d9:08:8e:07:1d:f4:50:b0:6d:8c:9b:
09:24:56:72:68:0f:7c:57:44:f4:ee:15:9f:66:ef:f7:eb:50:
66:4e:3a:89:ec:65:33:c5:51:e0:aa:1b:3f:4f:03:50:23:7e:
17:8b:c1:07:a0:4f:59:92:80:f7:43:7b:a1:3b:ad:0d:9f:c2:
dc:42:9d:3e:83:a0:19:68:9c:c3:9c:80:79:ce:aa:a0:60:39:
75:40:ba:fd:bd:5a:2d:06:a3:6c:34:a2:47:0a:b5:cd:3f:7e:
17:94:a4:94:d6:c6:75:20:87:2b:55:67:0f:c5:ec:69:13:8d:
0c:e0:4c:38:8c:69:02:e6:2a:5c:91:42:7b:b8:25:f9:77:1e:
0d:86:c7:c4:49:b3:e0:d6:b5:3f:98:0e:73:24:07:a1:ef:19:
07:15:55:16:bb:65:d1:f1:d6:be:87:b7:98:cf:e7:6f:ae:1e:
c0:fd:f1:a2:c2:6c:9d:ff:93:a7:ef:a7:d1:b4:50:62:d6:6d:
a1:59:ed:85:80:16:8e:18:e2:59:92:5a:ea:8b:a7:bf:fd:18:
c9:e1:ac:67:e8:0f:dd:3c:30:5a:4b:70:0b:3d:d1:60:06:e1:
50:67:ca:42:71:51:75:ba:d7:a4:85:7e:41:87:55:46:a0:84:
d8:61:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:50 2024 by rpki-client on console-fra.rpki-client.org