Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: mSakln67wKyA3pLW8X5MuARB/NPLbd7jWL3U700702w=
Subject key identifier: FD:17:F5:F2:41:4F:13:49:F9:DB:D6:91:5D:3F:FC:1C:26:91:E8:F3
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019059CA0C26FC76BB18A96DA7E8D5477A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 0CC4
Signing time: Thu 27 Jun 2024 13:02:11 +0000
Manifest this update: Thu 27 Jun 2024 13:02:11 +0000
Manifest next update: Fri 28 Jun 2024 13:02:11 +0000
Files and hashes: 1: Ba_0fZpepMcwTK6pqfY1hqVlQQg.roa (hash: VhhluQNQsU9l8uP9wxcd4GaGaR9XO75jN6xAQzEHz0U=)
2: LUoRdNd7OUNidWKpI-Q4rXmUBNQ.roa (hash: ap5EBVX8w9EJ37Ed/2jDtcdGlwVG+YSJDBGfLzLdWtw=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: A7/XrpHr4k3ss2+KPqN/vIQQultWLERIm9CTg/U5er8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:ca:0c:26:fc:76:bb:18:a9:6d:a7:e8:d5:47:7a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Jun 27 13:02:11 2024 GMT
Not After : Jun 28 13:02:11 2024 GMT
Subject: CN=fd17f5f2414f1349f9dbd6915d3ffc1c2691e8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:40:3a:2c:45:0f:ba:46:64:22:3c:e6:a6:
17:3a:f9:9f:39:c9:3e:52:79:ab:2a:f0:8e:c7:45:
d0:01:f8:a7:9a:74:6a:66:69:d2:c4:6f:26:6b:a1:
e2:ed:61:de:52:94:40:49:61:b3:c1:6a:87:c5:76:
5a:83:43:d0:93:fc:c9:41:78:6a:ac:4c:7a:7f:9f:
0f:ed:a5:a0:3b:31:3b:75:44:5d:2f:02:1e:d7:9a:
cf:38:8f:bf:99:72:e5:7b:b6:93:ae:11:6b:cc:bc:
9c:63:46:ad:72:b9:07:4b:25:25:9e:e7:95:e0:6a:
31:83:01:18:0b:c0:d7:40:41:d5:1b:f7:e4:f4:da:
36:d9:af:15:63:97:d6:1f:37:7c:0f:a2:66:c5:aa:
52:4e:40:4a:95:cb:b6:27:54:cb:7f:7e:cd:39:98:
16:ed:03:dd:ee:80:c7:71:26:f1:21:19:fe:f6:5f:
64:c0:2e:3d:2a:26:81:7c:87:00:ad:46:6d:fc:fd:
da:5d:fb:fe:c5:d2:63:25:2c:1c:d3:77:d4:c6:a6:
69:2d:68:75:1d:c4:a9:03:89:bd:10:80:82:30:54:
53:29:24:b9:1c:32:fc:eb:89:68:ac:5d:2a:d0:d4:
94:38:3e:e6:80:16:c5:32:cd:54:16:e7:9c:ec:82:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:17:F5:F2:41:4F:13:49:F9:DB:D6:91:5D:3F:FC:1C:26:91:E8:F3
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:20:35:97:fb:3d:58:34:72:de:41:19:a0:35:7d:87:3a:bf:
84:53:50:13:e3:1e:eb:66:22:7b:8a:ba:76:1e:96:14:03:16:
e0:57:29:a6:b5:2f:40:be:79:39:c3:5a:51:36:49:f6:4f:17:
a0:5a:b6:f2:2c:b3:04:d9:ac:d4:aa:23:be:80:8c:25:95:fd:
0c:1d:a2:cb:bb:89:66:91:ff:b0:de:18:77:e2:e7:f0:41:93:
15:95:ff:da:db:b0:07:ef:67:47:26:56:2a:b9:af:04:a6:74:
29:4d:99:2c:f7:94:d2:db:ce:a1:81:35:24:7f:1b:8b:4d:e6:
7d:0c:b3:1b:07:ad:a8:09:c1:3c:51:13:53:13:6b:88:ad:63:
09:f6:2e:7e:37:81:3c:12:2b:2f:2a:84:06:12:42:44:0f:5f:
15:8b:b3:83:6b:ae:0f:80:25:16:42:5d:4a:f4:c1:8c:49:38:
46:a4:e8:e5:24:ea:86:23:22:81:09:cf:6b:e5:fa:43:b9:02:
4a:a4:00:b3:ad:34:b2:c7:7b:0e:42:26:74:e2:4b:c0:f6:de:
77:f6:3b:16:df:67:1c:17:f4:db:70:32:07:f3:01:51:fe:ee:
51:fa:5b:05:63:42:dd:15:5c:39:f9:bb:a6:1e:dc:9b:13:3f:
b8:c2:55:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 15:26:42 2024 by rpki-client on console-fra.rpki-client.org