Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
File: Y42aUATFktCTzImw2QdS4nnVGFQ.mft (raw, json)
Hash identifier: xBG762v9iUWvXMuFRsXiNuL+gpmxL3Mbwa38dr2xOMY=
Subject key identifier: 03:AE:6E:CE:FB:E4:FE:CA:F3:84:29:38:AF:88:56:0D:1C:D5:4C:34
Authority key identifier: 63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
Certificate issuer: /CN=638d9a5004c592d093cc89b0d90752e279d51854
Certificate serial: 01935879478600613E94302A85BF2B3B8CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 10:02:43 +0000
Manifest this update: Sat 23 Nov 2024 10:02:43 +0000
Manifest next update: Sun 24 Nov 2024 10:02:43 +0000
Files and hashes: 1: 5Vb5a4rpHp0z5z81l7c9pIYLXLQ.roa (hash: 2LuC7ndbKQhL6L7dInghSC7wRi6b0n7YLjPKXcxNXTM=)
2: Y42aUATFktCTzImw2QdS4nnVGFQ.crl (hash: HqjGYFlvzutNF48ucKuS3fUUi08MobfUepQUHRbO4+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:47:86:00:61:3e:94:30:2a:85:bf:2b:3b:8c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638d9a5004c592d093cc89b0d90752e279d51854
Validity
Not Before: Nov 23 10:02:43 2024 GMT
Not After : Nov 24 10:02:43 2024 GMT
Subject: CN=03ae6ecefbe4fecaf3842938af88560d1cd54c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:bd:7a:9c:1a:52:a4:60:2f:2d:1a:69:2f:
63:28:5a:9f:3e:b1:e3:1c:e8:9a:88:35:9c:b4:27:
b6:a3:94:82:63:58:80:d4:e6:f8:6f:78:90:b6:d7:
fa:52:08:ea:1c:36:ed:10:11:cc:33:72:f5:b2:2d:
11:36:11:bb:12:16:72:33:07:43:d7:91:cb:f1:9e:
4e:7b:f1:b4:34:f9:dd:1b:78:d1:c0:95:88:d5:b6:
ae:f8:74:89:71:cb:ba:8f:85:b9:82:7f:50:93:3f:
c0:1f:64:c5:31:35:14:0c:fa:0b:93:24:d7:15:13:
05:2f:56:f8:52:d9:3e:7d:cd:d6:97:4d:df:89:ff:
39:b6:6d:b8:e8:6d:03:31:4a:fa:e2:03:e7:70:11:
03:25:39:e6:42:c7:57:a1:b1:9d:ea:95:f7:52:95:
85:10:1e:d6:ce:db:f3:5c:e2:e0:87:b7:f0:26:36:
ed:54:03:ff:20:e8:57:45:f8:84:75:a5:03:35:7f:
5f:45:2d:80:aa:37:09:4c:33:45:6e:66:93:36:bd:
d5:e1:78:62:1f:50:47:79:3e:ad:f9:c3:21:c6:fd:
9a:b2:65:bd:ed:4a:33:2e:ea:a9:95:c1:ff:9f:ea:
0b:ae:c4:92:11:7c:85:c4:43:7a:d7:25:b0:d2:01:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AE:6E:CE:FB:E4:FE:CA:F3:84:29:38:AF:88:56:0D:1C:D5:4C:34
X509v3 Authority Key Identifier:
keyid:63:8D:9A:50:04:C5:92:D0:93:CC:89:B0:D9:07:52:E2:79:D5:18:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y42aUATFktCTzImw2QdS4nnVGFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0cf6d7-d8ef-44a8-aa07-7768d4fbdcd3/1/Y42aUATFktCTzImw2QdS4nnVGFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:47:c2:5d:94:a6:40:b5:67:8d:5c:99:78:c8:a8:cf:8f:43:
0f:8e:65:dd:61:15:ea:93:3f:96:9f:09:16:e5:77:e7:b3:47:
09:b1:fe:86:6c:e0:97:86:ac:03:e6:12:fd:3e:d2:70:f1:7a:
90:72:c2:cb:63:26:8f:96:57:57:0e:8e:be:de:28:5b:56:98:
e2:56:3e:d5:1d:53:9d:b1:50:e1:eb:67:7f:a0:2b:7e:41:91:
56:72:36:1e:97:90:44:5d:5e:32:47:c4:cf:31:fb:a2:ce:60:
d3:9d:7f:3a:e0:e1:bd:a3:3c:13:6f:50:8b:01:54:4c:b5:53:
eb:9e:cf:0f:f2:52:da:fe:c3:4d:86:71:a8:4e:8d:4d:44:b8:
43:2c:94:22:31:e2:52:12:cc:3f:b2:7b:44:dc:9d:dc:00:4f:
5e:57:43:29:e9:01:82:62:1a:f1:f5:96:10:87:e0:3b:6b:40:
b0:ec:70:d4:73:46:05:f9:72:cb:e9:3b:a2:61:e2:af:5d:41:
a9:57:fd:d2:b7:89:ff:3a:36:5d:2f:6a:2a:0a:9e:24:aa:f9:
18:59:4c:7e:35:15:f1:0c:64:ab:81:d2:7d:b6:4b:47:ff:0a:
36:10:4b:d3:69:30:2a:93:6e:f4:40:be:54:71:8c:69:d5:d1:
e3:d6:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:50 2024 by rpki-client on console-fra.rpki-client.org