Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: /b3uFixXzhtfiN6eKoPK1mkN5m+xOsXNeL2VIYCT6EY=
Subject key identifier: 95:30:DC:BE:D9:22:3D:82:CC:D6:12:1F:87:F7:DC:75:58:82:8E:31
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 0193549BBC8982E8323DB085A58BA9CF0B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 11B7
Signing time: Fri 22 Nov 2024 16:01:52 +0000
Manifest this update: Fri 22 Nov 2024 16:01:52 +0000
Manifest next update: Sat 23 Nov 2024 16:01:52 +0000
Files and hashes: 1: 8c8GXJ_XvRgKPxkLkbQxM-ADETw.roa (hash: 2BGG7UjEGjGVyqckSwaexIMIqiyLee6UEGOBA0IpqzM=)
2: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: JIjBWhs+l5wImqTcPbMn1ukr9NDzSs7yDhUcAYkLYk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:bc:89:82:e8:32:3d:b0:85:a5:8b:a9:cf:0b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Nov 22 16:01:52 2024 GMT
Not After : Nov 23 16:01:52 2024 GMT
Subject: CN=9530dcbed9223d82ccd6121f87f7dc7558828e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:38:d6:fe:5f:b9:8e:17:2b:eb:b7:ff:9d:40:
8d:4e:7f:bc:1d:59:7f:8e:93:18:54:65:76:e9:80:
fd:99:97:1e:3f:20:09:31:fe:d3:c9:6e:ab:1c:bd:
c4:76:7a:27:bc:85:6c:62:4c:88:96:a4:78:92:84:
71:ec:d4:7f:e7:a1:c1:07:9f:dd:eb:17:d6:e5:86:
57:4f:6b:85:e0:e7:22:0e:d9:81:f7:30:77:d1:69:
85:e3:f1:4c:3c:50:5c:d2:f2:94:ad:ed:18:40:03:
99:b0:ac:92:72:51:94:6f:ef:dd:bd:50:40:12:ed:
61:06:c4:19:ae:f3:b9:a6:aa:75:90:ef:f7:cf:57:
7f:91:94:c8:c7:af:98:d0:c2:df:87:d6:96:5e:ed:
db:08:57:9f:2e:db:d4:85:61:5e:52:f4:7d:9d:65:
4c:f5:3c:bd:e0:10:3a:cc:b0:47:fa:ef:33:70:8d:
55:e1:00:69:ba:f2:1d:a1:5a:a2:0a:62:01:8e:2f:
c6:41:d0:38:be:ef:be:16:f4:d5:f8:53:fd:5b:04:
32:e9:3b:81:b0:43:aa:49:cb:05:c7:fb:8a:b3:ec:
5f:c9:93:fa:ad:dd:3b:c5:e1:0f:3c:6d:e5:30:6b:
1f:ab:3d:a5:97:c6:02:23:09:e1:82:52:2e:2c:88:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:30:DC:BE:D9:22:3D:82:CC:D6:12:1F:87:F7:DC:75:58:82:8E:31
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ea:50:1a:b6:e1:a4:a6:68:25:9b:de:ea:70:af:ae:9e:b0:
1b:21:b2:88:1d:fe:c7:e9:59:70:43:af:a1:19:e9:4c:80:6b:
4f:fb:82:17:6e:a9:6e:93:dd:36:14:da:df:f6:4f:96:ca:31:
df:fe:df:1d:88:9a:af:e6:1f:3b:fa:ee:10:f2:98:81:0e:a1:
e8:5c:2d:9e:1d:2f:c0:4b:96:30:e4:61:2e:d9:6c:0d:43:b1:
43:52:57:3e:a9:59:7d:25:2a:07:c3:29:7b:58:93:b8:0a:54:
0f:31:3f:ff:0c:d8:8c:04:7c:e2:36:c8:04:51:d2:a8:72:c4:
c4:ff:0b:2d:c6:8d:31:32:95:8e:e1:3f:6a:e2:1a:c7:68:3c:
46:51:10:9a:10:df:a0:04:b0:70:ae:ad:bb:fd:56:c2:be:44:
90:0a:c2:57:24:9b:3a:71:4c:f5:bd:4d:ad:01:9c:55:c9:81:
69:6f:67:66:d0:36:7b:ec:99:90:f7:f9:6d:7d:81:2e:b6:f1:
9b:81:d2:d3:25:b4:79:0d:e2:e3:18:08:94:52:81:c4:c0:0e:
21:c0:44:1c:41:a1:d6:49:9e:b0:03:5d:53:16:2a:6e:18:64:
eb:aa:e7:61:57:34:4c:f9:f7:67:b4:e8:76:3a:e8:e5:c3:28:
2c:39:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:04:19 2024 by rpki-client on console-fra.rpki-client.org