Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: PkMIGsnKvXKs6dTTjYXU8oDXpziisuz056o2sbvUG1w=
Subject key identifier: 3A:43:6E:E0:6B:06:BE:30:5D:0E:57:A9:8B:E3:F0:3A:F0:9E:05:56
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019355E3C4FD7AC1E00E8588420CD93F40F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 0249
Signing time: Fri 22 Nov 2024 22:00:10 +0000
Manifest this update: Fri 22 Nov 2024 22:00:10 +0000
Manifest next update: Sat 23 Nov 2024 22:00:10 +0000
Files and hashes: 1: 22WCdXlneLGqwQg3RCJgPdoox0k.roa (hash: 0Uf2XeO6g4VQ3tLaJ5BxNowAcPCXCXuoJTTHBkhk7pw=)
2: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: 07HaaOpm5lqEH7qEYnOjZoCtnnSaLC9/Vn1Lix6HmWo=)
3: xAtbroNTe0c0dizJ6H1l2DkVEUs.roa (hash: gnPhMmNF/oJUfmWHuza2ocYxhoNfhY4lfXf/SF+rITk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e3:c4:fd:7a:c1:e0:0e:85:88:42:0c:d9:3f:40:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Nov 22 22:00:10 2024 GMT
Not After : Nov 23 22:00:10 2024 GMT
Subject: CN=3a436ee06b06be305d0e57a98be3f03af09e0556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:5d:cb:fb:52:c8:75:4c:e2:98:eb:28:f5:
f3:2b:8a:e0:b1:d8:b5:5b:78:bf:f3:66:fe:b7:25:
aa:63:58:f2:d2:0c:3e:99:ac:3e:dc:71:16:ed:21:
ed:08:ca:ed:ce:57:07:ac:e3:6e:19:bf:ca:75:65:
ba:2a:0e:b9:8b:18:0c:9a:3c:54:8c:15:ec:06:c8:
4e:27:71:1f:0a:c1:65:2b:6a:48:7c:1f:58:43:3b:
94:12:da:8c:21:b3:f4:c5:08:0d:97:d8:aa:a5:4b:
0d:f9:d7:cc:95:3d:27:3e:77:b6:2a:76:1c:bf:67:
df:27:02:6c:9a:ef:aa:09:eb:d9:bb:c1:23:bb:24:
a0:ba:a4:2b:00:56:07:d6:65:70:3f:8f:0a:17:3c:
64:77:9a:92:42:d9:02:45:95:d9:d5:1f:88:e6:40:
eb:cc:f1:13:76:24:73:1a:a7:3a:2d:61:b2:b0:23:
47:80:49:1b:6b:2f:2e:79:ce:07:e9:ef:d5:b3:b8:
73:31:c1:6a:6e:bf:bd:24:ba:cc:77:3c:b7:16:06:
39:f3:e2:88:e6:a8:d2:e8:7f:e8:ae:f9:a9:b3:20:
40:b0:e7:30:45:5f:5d:f0:43:b9:07:5f:cf:ed:7e:
fb:f2:ed:9f:af:9c:93:3c:b6:81:5e:12:57:79:69:
74:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:6E:E0:6B:06:BE:30:5D:0E:57:A9:8B:E3:F0:3A:F0:9E:05:56
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e5:71:a7:50:29:37:24:2c:ec:4d:75:c7:27:08:f2:46:b5:
06:bb:75:83:3d:d1:e2:53:51:60:44:b8:da:cb:c9:4e:53:4f:
9c:7f:4d:2b:b7:8e:f2:aa:ca:f8:19:9c:ee:75:5c:8d:8b:b4:
9f:ee:39:2e:22:ac:13:1a:11:63:00:9f:89:eb:66:cf:38:5c:
57:15:4d:98:77:a2:8a:0d:28:d0:ae:d0:4e:b2:bc:5f:22:87:
17:bc:df:46:65:f6:f8:69:bc:14:b6:d8:f2:cc:2a:f7:dd:da:
61:a5:ca:46:8a:44:f6:e9:b0:06:76:56:f4:bd:1d:f1:08:24:
36:ae:98:ad:37:dd:58:ed:11:eb:bc:0c:19:3a:f1:aa:08:0d:
00:50:bd:3b:6d:ed:5f:3b:5e:07:f6:44:d6:5b:e6:86:de:f0:
fa:c4:28:d2:16:9b:7d:e0:f9:54:ff:3e:e6:6e:e4:87:43:16:
53:a7:45:2d:bc:f3:89:b8:c0:e5:94:5e:15:fc:49:d5:37:10:
e6:a1:c0:31:f4:90:4b:90:db:4f:78:0b:db:0a:1c:c5:c0:f4:
66:dc:12:23:b9:98:89:dc:40:d3:16:c4:bc:15:c5:d6:25:2a:
d7:8b:e3:c1:30:8a:f0:a0:8f:42:48:e0:a2:95:b6:be:aa:1d:
8a:57:22:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:31 2024 by rpki-client on console-ams.rpki-client.org