Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: xUHYyaFlMLnVUVjVrr3r7MmdaT1577jq8INu+bG56YA=
Subject key identifier: 62:C1:91:44:86:13:30:3C:89:20:AC:4B:53:35:B3:8C:CA:EC:1C:DD
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 019356F695A1D78D64BAECE4483F79607D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 03:00:20 +0000
Manifest this update: Sat 23 Nov 2024 03:00:20 +0000
Manifest next update: Sun 24 Nov 2024 03:00:20 +0000
Files and hashes: 1: QDt3dsNP3CbSmlwCIde96c-9UcE.roa (hash: 8+fj0YWj5ogdsKRI/T1XH0vgjY4t/ViL2TU9HJPI37A=)
2: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: +HLZuAnqqGbE3YYQJk6+SQ4NFFgVKozyvYyuYWzvdZc=)
3: YjEhlO99RaAbAkdzt4ZOJGbjnJw.roa (hash: yFH8ViIKHaeK/f2FpL9G8EG0g2Y66JlUWF53LAa2xS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:95:a1:d7:8d:64:ba:ec:e4:48:3f:79:60:7d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Nov 23 03:00:20 2024 GMT
Not After : Nov 24 03:00:20 2024 GMT
Subject: CN=62c191448613303c8920ac4b5335b38ccaec1cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:90:de:c1:23:b4:fc:0e:ff:51:e7:c6:04:
ed:28:6c:8b:25:30:91:9a:cc:82:d9:03:fd:67:4e:
a7:ab:af:72:5a:9a:43:86:df:8e:40:9e:1a:ec:98:
4f:c7:94:12:ab:f6:46:1b:f9:9e:e4:b1:9e:eb:6c:
dc:5c:75:4e:f0:7a:a0:fe:df:35:5c:60:af:83:ab:
9c:70:f8:ef:32:9a:dc:d2:2b:f0:a6:4a:ba:ad:48:
25:41:96:1c:a7:c1:f2:96:de:9f:eb:b2:de:78:c2:
3f:fe:4f:47:37:db:b0:e7:09:17:45:13:42:ac:26:
0f:b0:46:60:d4:9a:73:d5:6d:1f:60:c2:83:ae:04:
f0:67:5b:82:07:34:e8:a1:dd:92:2d:15:48:18:cf:
5c:b4:e7:e2:52:4e:21:fd:53:2b:4c:f5:eb:b6:4b:
4e:8a:91:5e:62:da:eb:b7:c5:84:0a:9e:0f:62:43:
0a:28:9b:e3:e1:b6:55:e1:ae:64:6f:65:4c:74:39:
0b:2a:b5:a5:df:3f:3a:fd:97:09:24:17:eb:82:57:
97:f6:69:e3:4a:aa:ad:4a:99:e0:6f:58:94:b7:aa:
16:63:d2:ca:d4:a3:46:09:6f:2b:45:ad:ca:6b:7b:
60:f3:f8:71:68:30:a1:21:f0:80:78:da:33:29:63:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C1:91:44:86:13:30:3C:89:20:AC:4B:53:35:B3:8C:CA:EC:1C:DD
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a0:e9:3a:f1:b6:87:4d:2a:59:63:42:79:f5:f8:dc:92:07:
3b:ea:f3:db:05:16:47:33:64:50:73:89:d8:c6:05:f7:79:9b:
8a:31:c6:80:86:75:c2:07:b4:56:aa:e0:72:34:b9:be:17:11:
dd:b9:93:be:d8:15:df:49:cc:21:60:22:45:d4:42:71:dc:47:
8c:44:fe:2b:82:d2:ff:40:c4:d0:2f:d6:cf:6e:fb:7e:d8:ad:
84:ef:b0:aa:7a:6f:32:97:2e:f8:f5:ba:6c:59:d1:da:e6:ca:
78:5d:54:af:91:06:47:92:58:c9:3e:b7:35:c3:da:06:15:d2:
4a:55:3d:af:2e:c9:90:ad:50:e2:eb:82:26:19:b9:1d:2b:29:
0b:75:b5:d9:c8:db:94:02:82:61:e3:94:a9:1e:db:7d:0d:ec:
2f:97:1e:f4:d9:3e:19:40:f8:23:aa:1b:c9:c0:10:04:73:fb:
d1:67:b2:30:b6:01:0d:1c:78:c1:5f:6d:ee:ec:43:ae:0c:b5:
9d:9a:eb:fa:fe:d4:7d:f5:d4:a5:17:c2:60:ad:42:be:dc:a4:
4f:9d:b3:b1:26:75:cc:1c:45:77:fe:fa:54:6b:3f:1b:d3:86:
f5:77:eb:ee:34:35:56:58:c6:3f:59:0e:6e:22:9f:55:e6:d9:
ce:eb:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:51 2024 by rpki-client on console-fra.rpki-client.org