Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json)
Hash identifier: tZjswKLMXLEMffxOsZLgm+EWpBisGP3F4sGvsUyuyII=
Subject key identifier: 4C:15:B5:9F:13:EC:47:0F:92:8A:90:41:B9:76:30:F4:35:73:72:98
Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Certificate serial: 01936A467DC73D4D3252F553B027B316D349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 21:00:24 +0000
Manifest this update: Tue 26 Nov 2024 21:00:24 +0000
Manifest next update: Wed 27 Nov 2024 21:00:24 +0000
Files and hashes: 1: X_ZX8sz8cWmdPzyqzHzJUvKajpQ.roa (hash: XxhSY7NGQuMJ+zTgsbUAmvSCPa4SNVg0Cdu3HwfERc0=)
2: moS_gqd8BV1ovDmAobNPqm1MRno.roa (hash: qp+qJbBDO36kGTtGbU2DbTRpJOd0Y8RZFfwAmWquRss=)
3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: vsCvxPH2MkFwu5cU35dni08M/HfWBsA90bbaEpae2Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:7d:c7:3d:4d:32:52:f5:53:b0:27:b3:16:d3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2
Validity
Not Before: Nov 26 21:00:24 2024 GMT
Not After : Nov 27 21:00:24 2024 GMT
Subject: CN=4c15b59f13ec470f928a9041b97630f435737298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:65:4e:4d:13:00:f4:42:11:30:36:51:50:
1d:65:00:59:17:8e:09:0d:47:65:68:5e:a3:a4:75:
16:2a:12:96:aa:f6:ba:60:07:0a:df:3d:d9:0f:35:
f6:4b:3a:f5:73:73:e1:03:42:76:2e:e7:14:08:19:
31:bb:96:bf:84:df:67:a3:a5:1f:56:31:8d:94:c9:
6e:7f:5d:90:1d:7c:6f:61:90:4d:36:02:95:1e:fb:
fe:6b:79:70:a1:73:60:cd:a4:5f:b5:ed:3f:04:86:
cf:a0:5e:68:09:33:17:a5:0d:9d:a0:e1:f0:02:e9:
aa:74:9d:9d:37:0e:ad:10:33:01:6b:d6:cc:6e:30:
9e:e7:07:e0:dd:f6:a6:af:04:99:ed:a6:7f:1e:6f:
32:c7:5b:60:0b:fd:46:dd:ee:62:c2:6a:87:db:78:
74:c3:56:87:df:c0:84:36:8a:b1:6c:41:b0:d9:e2:
40:65:ba:e1:82:5a:ae:ce:21:da:d8:57:65:6c:a3:
01:f6:17:b9:c8:47:92:ee:07:92:8b:f5:1a:dd:43:
84:ee:0b:ed:cd:bf:49:22:85:97:71:38:f2:8a:fb:
68:f1:76:27:77:37:9e:65:67:f9:9b:fc:ca:37:88:
8a:c4:d6:5b:5a:4b:09:5f:d9:12:a1:6b:ed:53:3e:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:B5:9F:13:EC:47:0F:92:8A:90:41:B9:76:30:F4:35:73:72:98
X509v3 Authority Key Identifier:
keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:2d:bc:2c:03:0e:a2:e5:81:3c:7b:aa:79:23:55:16:ba:
41:27:06:11:78:06:c4:61:8a:83:3f:bc:cf:c0:18:5b:28:6a:
1b:cf:6b:a9:3c:6e:7d:a0:2b:cf:4e:b9:6c:b7:7b:1c:e7:cc:
c8:93:1f:4f:a1:b4:87:45:f4:88:a0:89:a0:a7:75:77:f3:73:
ce:e9:87:e9:f9:e2:d8:7d:55:13:db:7b:83:fb:25:fe:88:14:
94:94:e4:e6:0f:0d:76:af:17:ff:f5:34:1e:57:83:e6:0a:4e:
f6:81:f6:0b:9a:48:bf:d9:40:9f:a5:3e:1e:85:5e:7d:37:2e:
a1:cc:71:3a:83:d4:e4:2b:8b:66:c0:8f:85:e8:78:fe:3f:e1:
3c:59:36:81:cb:e4:ee:fa:72:dd:1f:75:85:aa:f7:6e:43:8b:
42:35:c9:a9:c6:40:22:d0:43:6d:59:9e:52:4a:f4:54:ea:bf:
e1:2d:79:dd:59:ef:b4:7c:85:77:4b:70:ad:e8:4d:f5:ed:86:
60:d2:10:8e:1d:03:2b:38:20:9f:95:3e:cd:77:6f:f9:99:e9:
10:32:23:50:72:45:58:6e:34:b9:0c:d7:99:5c:02:30:82:71:
b2:de:c6:1a:2d:a2:10:84:d9:92:59:d5:6b:77:1f:1e:7e:0c:
3d:9b:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:28 2024 by rpki-client on console-ams.rpki-client.org