Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: p6GajLNnXGNxvfzEp3VAL+bsHEfrnugDbQ+NsnF9XyM=
Subject key identifier: 10:18:82:DB:3B:B5:6C:30:70:FD:5E:A0:C0:B3:53:51:29:C2:02:C7
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019357D3104D39F6EE6EC2202F248A78E8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 07:01:10 +0000
Manifest this update: Sat 23 Nov 2024 07:01:10 +0000
Manifest next update: Sun 24 Nov 2024 07:01:10 +0000
Files and hashes: 1: KBL-UGgqIp8xieCa_iVedhu5O2o.roa (hash: G7IzmJyW+KVuz5iStR7RUpaMi94TOxhNSFdjjEStTpY=)
2: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: WoOscYmTJASmhg92ilT7qi6h5EN/jas4LY9HRaMJRY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d3:10:4d:39:f6:ee:6e:c2:20:2f:24:8a:78:e8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Nov 23 07:01:10 2024 GMT
Not After : Nov 24 07:01:10 2024 GMT
Subject: CN=101882db3bb56c3070fd5ea0c0b3535129c202c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:20:b4:c7:ef:27:e3:bd:d6:6c:48:46:4d:
d2:7e:18:0b:e5:5c:b4:42:6e:ce:74:fd:3f:2e:b8:
26:67:0f:bf:90:d7:b4:63:d3:96:8e:48:5a:12:0c:
7b:56:13:0d:9b:71:53:75:66:c3:99:55:69:0a:2b:
ce:b3:7f:a9:ad:4f:34:7d:96:f3:d4:ca:1d:c9:1c:
5c:1b:d3:7e:58:8c:c2:4c:49:1a:bc:ce:88:7d:9d:
8e:19:c1:dc:06:6c:63:7e:f7:4b:6e:a3:df:c8:3d:
ff:2d:02:02:c5:c2:27:78:c4:bb:ba:be:05:2a:5e:
75:4b:8e:99:b6:bb:b7:1a:2c:7a:6d:07:65:e6:00:
36:37:7e:fc:4d:ea:3f:89:68:4c:af:55:07:28:7a:
9e:a0:69:7c:7f:ec:28:18:35:6b:b2:50:b5:18:ae:
06:16:58:2d:a7:ae:50:3c:47:1f:ce:54:93:b3:f9:
4f:d7:fd:f4:d8:d8:fe:88:83:52:8a:b4:42:b7:21:
83:a7:78:23:cb:7b:e6:2b:ae:58:5c:db:71:37:62:
f1:d0:99:26:13:74:f0:34:61:eb:44:88:1d:b3:79:
e3:1c:df:fe:85:95:51:a5:2c:21:6f:4c:d0:04:71:
cb:8b:cf:ee:7d:58:3f:d5:5e:6f:dc:0d:86:67:3c:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:18:82:DB:3B:B5:6C:30:70:FD:5E:A0:C0:B3:53:51:29:C2:02:C7
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f3:0a:2b:2a:ce:37:73:5a:34:e6:80:0c:01:32:16:e1:81:
a8:85:7d:0b:85:13:d2:4a:61:eb:fb:08:e2:5c:d6:09:ed:bc:
c1:f7:11:4d:eb:ae:ff:be:6b:16:d7:4e:0d:fa:4c:b8:24:8f:
24:7a:e9:2e:37:01:d0:25:76:bb:46:ad:3e:d3:f7:06:58:aa:
74:9c:e8:18:09:59:62:27:d0:b1:48:f8:02:95:de:e4:02:43:
0c:f3:c8:ff:cb:7f:a0:85:81:dd:6e:bf:ba:a6:0a:2a:70:d9:
41:fc:72:0b:f2:20:82:71:d1:57:62:41:e2:6f:9c:e7:74:cf:
55:4a:63:df:97:7d:9f:4b:69:e2:f5:0f:b1:1c:b0:7b:ca:50:
b6:3b:cc:0d:99:5b:89:a5:65:08:04:fa:95:d9:11:3b:2d:38:
da:8c:9b:a1:a8:db:8d:8b:da:9d:73:ac:29:9b:a0:5d:2d:6b:
f3:8b:02:fe:f1:2b:f1:e9:1c:8c:af:0a:a4:a0:73:db:59:3b:
11:da:6c:33:a2:f9:9d:79:a1:99:18:4b:22:f5:7d:28:98:cb:
d6:50:bd:cd:ae:24:d0:b3:32:79:f4:21:03:0b:16:e8:70:0e:
77:5d:7e:f3:5b:9a:d2:c6:53:68:e9:c2:c0:fe:f0:ec:b9:84:
6a:c4:bb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:15 2024 by rpki-client on console-fra.rpki-client.org