Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: S662DJxXVmh2crMYY47liA8sHLo3C9f9scddkjklPrI=
Subject key identifier: CA:8A:5A:C5:59:78:F6:F7:4B:75:78:67:BE:E0:E3:F0:A4:5A:E8:0A
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019369DAB722AEAB180C6106DEC60D3F528E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 03CB
Signing time: Tue 26 Nov 2024 19:02:41 +0000
Manifest this update: Tue 26 Nov 2024 19:02:41 +0000
Manifest next update: Wed 27 Nov 2024 19:02:41 +0000
Files and hashes: 1: 3TI8QNIVOC1peJNzKtg_qp8ganc.roa (hash: 3BxNZc5F7uGt7N1EJxeuatW9D9yVGpujjmyC+idntb4=)
2: y1HEhbSslgw7lcwLwCrVYusjtP8.roa (hash: 9+QzUqzlMREZLVoxt0NdknNmC6MSkSEuuhm5eKNc3xA=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: 7Ti11dYK8Uyfu7YkxfYNuyOgCmzPAXOimIGqca6docw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:b7:22:ae:ab:18:0c:61:06:de:c6:0d:3f:52:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Nov 26 19:02:41 2024 GMT
Not After : Nov 27 19:02:41 2024 GMT
Subject: CN=ca8a5ac55978f6f74b757867bee0e3f0a45ae80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:46:55:11:a9:03:a1:56:97:db:8f:19:1c:72:
36:0a:a1:64:69:f4:10:ca:e1:3d:77:ab:3b:e9:da:
85:8a:27:0b:4d:ac:80:82:12:c5:b8:c9:67:fa:5e:
14:ea:fa:5e:df:21:be:1d:a6:33:62:61:f0:ac:58:
3c:00:a8:cd:c2:1a:c0:ac:62:be:8e:6b:e1:5a:e6:
9b:66:74:a1:31:7b:fa:e5:61:bf:9d:fa:27:c9:de:
74:08:a2:75:8d:6f:b4:4d:fc:f7:8b:65:84:fb:d4:
42:5e:61:e2:05:76:f4:88:c3:03:96:9c:88:37:0c:
14:be:24:eb:fe:e5:cd:d9:5e:5b:5d:e0:e8:df:fd:
e9:ec:3d:c3:b9:e5:57:6b:f7:59:fd:91:46:ed:47:
fb:79:bd:d7:42:5a:79:32:20:f9:0d:06:b1:a0:8f:
81:ff:ab:82:92:0f:0a:e3:9b:04:c9:d7:dc:64:63:
22:46:65:7d:65:e0:e2:41:56:c3:12:ac:3d:b5:6a:
87:53:48:21:ee:dc:18:fa:67:13:ad:b6:24:73:52:
35:b9:4a:ed:92:6d:c2:13:c1:dd:16:49:ea:7e:e9:
e4:aa:2f:3c:a6:72:3e:fa:06:2b:64:72:f1:74:94:
1d:0e:47:4c:6c:72:ee:64:f9:17:66:15:c9:af:10:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8A:5A:C5:59:78:F6:F7:4B:75:78:67:BE:E0:E3:F0:A4:5A:E8:0A
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:03:ac:ac:77:17:99:b2:1f:b7:00:cb:a4:39:89:9e:0c:c0:
9e:3a:82:1e:04:66:4f:9a:a8:c6:ea:59:b2:03:17:e0:e5:c2:
ab:bf:db:5e:b0:30:e2:e5:7f:7b:f9:7e:f2:33:3c:5d:17:eb:
d9:84:37:9b:5a:16:03:ac:d5:97:7e:72:c6:35:40:46:ef:19:
87:12:bb:f0:d6:c3:97:5c:65:5d:30:9d:47:83:74:ca:d1:e9:
69:3f:40:8e:36:9c:99:6f:23:36:da:fd:01:ab:13:16:e2:be:
53:08:b4:37:42:04:a3:2d:45:f3:8b:43:e5:64:19:a1:37:e6:
dd:6c:74:cf:5f:98:55:c2:ec:5b:c7:97:65:b9:ca:e7:6b:f2:
ff:25:a3:c0:f6:6d:83:f4:ee:32:91:8d:7c:b8:9c:9e:96:92:
db:e9:74:0a:bd:30:9e:1a:47:0c:e2:68:0d:a5:f6:73:15:5a:
ff:a2:ab:1d:51:b3:e3:6a:d2:97:30:2d:48:46:98:a8:7c:a6:
a6:e6:30:26:b0:0c:1e:db:18:39:4f:e3:d1:be:8f:d4:ce:de:
3b:37:7d:53:75:63:a1:9e:42:b4:51:15:2c:43:9b:ae:c1:fe:
28:5e:0c:e8:6f:36:1b:98:88:78:6e:05:73:dc:3b:f0:49:b1:
9a:f1:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:06 2024 by rpki-client on console-fra.rpki-client.org