Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: O7AORcA0w/b2D+lwT+07pRMmxnOK0Y1Qc8ZTXhxN2I4=
Subject key identifier: E0:F1:B8:C8:65:F2:05:F5:A0:2B:00:F4:E8:25:2C:31:29:AF:3A:32
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 019368582416FAF4B15486E1C337F69C4BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0AAE
Signing time: Tue 26 Nov 2024 12:00:27 +0000
Manifest this update: Tue 26 Nov 2024 12:00:27 +0000
Manifest next update: Wed 27 Nov 2024 12:00:27 +0000
Files and hashes: 1: SbJdVJE0L7x6o3cV5uc1moLkH7c.roa (hash: N+fzqu+kZfOG9qdNGZGpAlwRy4gCgRM0O5i7dQZvD3A=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: JEUIYMIj6rd4Dkr6XWPYUwTtlmJZj0E7g1h5WcbjI+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:58:24:16:fa:f4:b1:54:86:e1:c3:37:f6:9c:4b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Nov 26 12:00:27 2024 GMT
Not After : Nov 27 12:00:27 2024 GMT
Subject: CN=e0f1b8c865f205f5a02b00f4e8252c3129af3a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:ca:e2:89:ba:c8:11:94:7d:13:d5:40:3d:
b4:d8:9f:5e:08:5a:f6:1d:78:4b:32:d0:fd:5c:31:
0e:f6:bf:1b:21:39:57:ae:ce:be:3e:a5:be:d9:9b:
61:1a:a0:be:39:c0:cd:64:53:5e:d6:6a:ff:b4:da:
0c:80:56:e6:b7:dc:56:bd:a9:47:19:18:57:1d:1d:
d4:2d:5a:ed:6c:11:cb:c9:85:45:d1:f0:85:9c:42:
99:5c:16:57:45:65:31:46:82:e8:a1:bc:3c:0a:b0:
39:bd:a7:87:5d:8b:2b:88:a8:e3:f2:7e:30:7d:7d:
26:34:6a:f4:8f:48:fc:14:e0:13:39:58:15:1c:d6:
f4:00:52:b0:e0:12:c7:68:d3:48:d8:34:1f:b1:68:
61:50:33:60:fa:18:e6:04:94:55:01:24:90:08:e1:
66:c7:25:6f:f9:57:83:15:02:32:32:5e:ee:ee:61:
76:d2:2f:f5:67:78:48:1f:f9:d4:37:4a:4d:a5:3d:
69:c1:68:a4:42:57:67:04:a9:db:fd:00:9a:7e:e5:
03:57:b4:a4:d0:cb:43:20:6d:03:de:48:ee:1c:6e:
b0:88:c5:e1:bd:e2:94:29:84:42:e9:c0:c6:30:44:
c5:5b:05:5f:fe:47:26:1c:77:6b:82:10:f0:19:55:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F1:B8:C8:65:F2:05:F5:A0:2B:00:F4:E8:25:2C:31:29:AF:3A:32
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ec:4b:02:c2:a0:cf:dd:7b:78:c1:4e:a1:81:f9:cd:37:80:
22:44:96:59:d1:ec:82:7c:eb:aa:e0:ab:ac:ee:08:e0:75:1f:
a0:94:64:d0:66:95:28:1b:d3:0f:9a:e7:bc:23:d8:eb:42:c2:
04:45:2e:8b:ac:62:92:fa:61:9b:ac:48:70:71:7d:8c:5f:ae:
5c:3f:6e:67:2c:cd:47:b4:c1:82:d7:f2:16:73:7d:2c:82:fb:
cf:e7:85:1f:ab:d3:59:14:73:46:a2:1b:f3:2c:9f:e3:06:d7:
13:96:13:e7:ff:a6:fd:0e:5d:62:b9:d6:a4:58:3d:88:9e:95:
11:2f:89:26:1a:24:e3:6c:c9:f1:46:1e:b6:52:41:a9:f8:75:
5a:4c:e8:66:58:fe:32:1a:35:f3:f3:96:27:4c:7c:75:ac:25:
48:fc:d5:ad:46:49:07:96:8a:a0:0f:21:50:95:fb:3f:48:77:
17:99:ca:53:ee:ab:fe:ce:cd:85:e7:38:28:1c:36:d3:be:83:
b3:72:54:26:73:32:58:a9:e9:72:be:6d:db:d3:87:01:af:b3:
43:12:5a:a8:47:dd:38:a4:05:21:5a:61:30:65:c9:91:2c:b4:
7e:6d:ca:ac:83:4d:5b:05:93:89:e9:3e:8d:83:ae:91:c7:e8:
80:09:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:30:36 2024 by rpki-client on console-ams.rpki-client.org