Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: xadbLg63WLEl8FXq/YoOYOV9kjEpqSfykpbJVvzKxrU=
Subject key identifier: 59:3B:91:16:8F:DB:79:B9:21:CF:20:B4:D4:CF:52:23:E7:52:CF:69
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 018F871150933398C49DE1F7DF2761399E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 88
Signing time: Fri 17 May 2024 15:00:09 +0000
Manifest this update: Fri 17 May 2024 15:00:09 +0000
Manifest next update: Sat 18 May 2024 15:00:09 +0000
Files and hashes: 1: fRtPNG2b1ooVK9r_BiTFYcg8ChA.roa (hash: GR/gRm8/nCYUe0r64zdMxij9YWK+X7ZccxWvKgMndaE=)
2: jIuq4bHs7cglQF3FSlGy5eZYBY0.roa (hash: GcuJ44M9z2r8HjZijB7ADwqXfKmxK6NA7MQWczCv9nk=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: f2GWOxawal90z6x8Xr0kvfcGjgvVcNNeAzhOI5xBuLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 15:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:11:50:93:33:98:c4:9d:e1:f7:df:27:61:39:9e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: May 17 15:00:09 2024 GMT
Not After : May 18 15:00:09 2024 GMT
Subject: CN=593b91168fdb79b921cf20b4d4cf5223e752cf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:83:9e:03:aa:c8:e1:54:45:40:08:59:ca:
44:a7:98:d3:d1:16:49:00:89:13:28:74:ab:08:00:
93:d2:a6:e2:aa:73:0d:eb:25:9e:35:01:20:f4:c2:
09:d9:b6:13:d1:ea:16:3d:db:55:ff:65:59:c4:2a:
ad:eb:36:d2:4e:14:35:2a:13:5b:ea:e5:cb:94:ac:
60:3a:c4:a0:da:99:09:5b:11:16:ef:47:24:8b:69:
29:ee:90:3c:90:03:02:33:46:00:c2:ad:6a:8e:f3:
d9:df:4b:a9:70:92:42:e7:c4:11:92:ca:38:b4:2e:
d6:c1:d8:94:0f:33:e8:1a:97:1c:43:46:29:7c:e6:
36:54:aa:ba:db:65:1f:52:26:65:41:fd:23:99:c8:
b2:4a:98:6b:a3:e7:2d:ca:16:91:93:2d:53:b1:9b:
a5:c2:39:a3:9e:51:eb:f6:4c:4e:ce:22:75:30:21:
85:63:81:fa:96:cb:2a:ed:a7:fa:fa:c9:7a:ad:5f:
66:79:61:91:ad:86:e6:c7:de:7d:5d:5f:7c:24:fd:
91:3c:dd:f6:d5:93:db:08:b2:1b:9a:e4:2c:32:e2:
a6:c2:f5:b4:fb:0e:5c:b4:dc:b5:b8:d4:e7:95:06:
22:39:60:fb:ff:c7:55:38:9a:e1:69:4d:30:22:b4:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3B:91:16:8F:DB:79:B9:21:CF:20:B4:D4:CF:52:23:E7:52:CF:69
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:17:42:dc:a4:ef:ab:00:45:53:8c:22:ff:29:4a:06:2a:0c:
65:fb:b1:2c:e6:7f:04:1f:66:6f:21:52:33:32:83:c3:7f:53:
31:ea:b4:4c:bf:25:9a:bc:a5:7a:ab:ea:00:a7:1f:e2:71:4a:
36:6e:f4:58:3a:0e:33:be:a9:f6:27:07:c8:01:94:ae:de:d2:
46:05:b6:f1:94:b6:ff:3e:c5:18:10:6e:a1:c8:19:78:0e:46:
9f:15:ac:96:cd:42:61:67:00:dd:be:65:fd:24:e0:86:2e:71:
89:b9:38:3c:3d:1b:be:36:eb:a0:fc:16:81:ad:59:4b:f9:be:
6a:40:3d:0e:91:ca:ec:32:6f:1c:77:05:8e:f2:6b:5c:9c:a0:
8d:40:68:9c:c5:f7:16:a8:df:93:09:8a:18:a4:f5:0f:4c:b5:
3a:e0:37:0a:20:6c:38:34:0b:1a:58:99:0b:50:07:70:6d:54:
d8:d6:c9:64:0f:8a:a6:a5:f4:2b:78:89:33:1a:f1:b6:98:dc:
c4:6c:38:8f:9e:57:9d:49:c2:ac:9d:f6:93:a5:e0:c7:42:11:
bd:52:f2:d5:f0:00:ea:fc:ae:55:e0:04:3f:55:e8:1b:24:1b:
e0:8d:35:ad:39:14:6c:d5:61:69:38:50:5f:fb:b5:21:56:99:
49:f1:91:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:45:09 2024 by rpki-client on console-ams.rpki-client.org