Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: LFcgJk7Udebkm/sBkmsPCZe1Z39iNpoJFhGR3IGdytM=
Subject key identifier: 82:B7:8A:3C:F5:E6:D7:EF:DF:09:0E:B4:CC:F6:63:37:58:17:6C:4B
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 01935876FACB0F96A023717519D51BDB137C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 0B36
Signing time: Sat 23 Nov 2024 10:00:12 +0000
Manifest this update: Sat 23 Nov 2024 10:00:12 +0000
Manifest next update: Sun 24 Nov 2024 10:00:12 +0000
Files and hashes: 1: A-WVuiviOd-BD_n66FQ1ppJwkQE.roa (hash: xgzA/eM/zy+v+EzkhAyTimtXWpmVCZItqu5727Qd0eQ=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: O8SRzacAkcJQR3+jyzBMNuNF50KJlOMntQhVyLryCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:76:fa:cb:0f:96:a0:23:71:75:19:d5:1b:db:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: Nov 23 10:00:12 2024 GMT
Not After : Nov 24 10:00:12 2024 GMT
Subject: CN=82b78a3cf5e6d7efdf090eb4ccf6633758176c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:aa:54:27:9a:70:cf:64:c6:78:c9:64:ed:
2e:70:16:8e:9f:38:fe:f0:7b:9c:17:98:fa:27:73:
96:44:70:37:c6:5b:d5:ae:50:ee:35:4f:bf:61:f4:
bc:2b:a6:22:2f:ba:51:aa:3e:c9:03:14:36:9e:3c:
25:31:04:46:2a:78:14:9e:14:41:64:78:e9:e0:64:
41:5c:af:54:8a:b8:73:38:cc:17:06:79:b0:64:73:
49:eb:7a:d3:ee:80:bc:03:ad:59:08:cd:05:6f:5c:
ba:cc:e5:c1:99:d9:c6:57:9c:c8:df:e5:d1:77:28:
06:bb:c6:0f:6a:5a:95:da:3b:0d:46:3c:0e:c3:d1:
36:2d:84:53:69:73:8a:0c:fd:c9:fa:d2:c3:e5:fe:
ee:d1:be:37:71:4f:3f:b2:c7:e0:80:6f:23:a0:9f:
c9:ff:fa:85:41:08:b7:83:bc:f1:01:2f:e8:10:57:
c0:d1:6d:a2:51:06:1d:91:55:00:97:b5:04:08:4b:
87:3a:f7:36:71:64:98:51:4b:9d:fc:89:e2:ba:44:
4c:85:7b:5a:4e:0b:e0:5b:9c:2e:c2:d1:35:91:ae:
b7:73:47:c1:8e:43:f4:18:ec:1c:ff:0a:74:c1:cf:
37:c5:93:62:f9:da:95:07:5e:d5:78:d5:a6:8e:49:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B7:8A:3C:F5:E6:D7:EF:DF:09:0E:B4:CC:F6:63:37:58:17:6C:4B
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f9:dc:fc:85:f9:61:79:86:61:14:33:ed:5d:2e:f1:08:91:
14:16:1e:46:02:6d:d7:fe:69:c9:62:62:d0:18:b9:bb:e2:bd:
f2:a8:2f:6d:aa:f9:23:50:d8:c6:ee:4a:b4:79:0a:66:8b:4f:
b1:af:fb:f9:d3:27:ea:93:a2:ab:97:cc:86:eb:69:57:57:89:
aa:85:f6:98:0c:0d:db:d2:5c:7b:9d:79:75:87:dd:9c:2a:06:
8c:f0:2f:f6:84:7d:41:fa:2f:63:48:f2:4f:90:56:40:b7:ce:
e6:f7:93:48:42:f3:0e:41:4d:b7:35:3d:bc:f4:22:5c:41:2c:
36:08:88:7b:aa:6c:34:75:91:c5:28:dc:f7:c3:ba:7f:9e:50:
31:17:45:1f:a2:6e:85:c3:f1:89:34:1f:8e:cd:f4:9f:c6:ff:
70:ad:00:32:01:ca:51:81:50:d7:6b:1c:d0:31:3a:3e:cf:9d:
6d:4c:b9:5f:56:21:6c:2f:93:d4:eb:eb:7f:b0:a6:2f:b9:27:
de:ff:a8:8a:a8:7a:e4:68:0e:21:ef:28:a9:cb:97:1a:20:17:
e0:d5:13:2f:7e:6e:b7:38:3b:f8:31:57:80:ec:d3:ec:92:aa:
77:99:59:30:cd:08:53:b0:50:fa:5c:0c:31:40:18:bf:7d:c9:
06:70:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:06:33 2024 by rpki-client on console-ams.rpki-client.org