Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json)
Hash identifier: tci6U/R4sdAbrxD0ges/mcSQLOnUFzD30D1xrcGo6GQ=
Subject key identifier: AB:60:22:D8:63:08:81:90:CD:DB:E5:9B:2E:AC:40:B3:75:A6:F1:38
Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Certificate serial: 019352AE52F85E5C899B02D4CD513DABC7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
Manifest number: 136C
Signing time: Fri 22 Nov 2024 07:02:56 +0000
Manifest this update: Fri 22 Nov 2024 07:02:56 +0000
Manifest next update: Sat 23 Nov 2024 07:02:56 +0000
Files and hashes: 1: oBS3-lZP2Q3tilv8crVHAGmD68A.roa (hash: tm2C5CN1AfN18rAff6l9lZkxh5r69jWjXFyTjlNjtYo=)
2: wFii1jfmUMdvpxY-CWUztGp1p94.roa (hash: viJZbmmrzW6Gf2QJ6u/10+RZWrbvE3ygezyFqQpp5SU=)
3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: ZpwRI9xNW/IT/L4kAxDE6RT0xc9DTLJeu1lSiHtYki8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ae:52:f8:5e:5c:89:9b:02:d4:cd:51:3d:ab:c7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a
Validity
Not Before: Nov 22 07:02:56 2024 GMT
Not After : Nov 23 07:02:56 2024 GMT
Subject: CN=ab6022d863088190cddbe59b2eac40b375a6f138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:96:d9:3a:5d:b0:69:48:90:78:55:f6:1c:
e1:28:d9:d9:96:85:25:14:79:f4:de:ae:6b:7d:0a:
85:cd:9b:c3:fc:ad:cd:28:58:33:66:28:31:ed:05:
9b:33:a7:13:96:0a:4f:2f:aa:8c:b3:bc:ca:4d:a1:
57:70:df:be:d9:6e:59:45:e7:86:ef:12:f6:07:6c:
71:3f:21:24:04:e8:69:ea:00:2e:a2:ff:f9:6e:1e:
e6:e1:14:a0:12:58:a1:59:aa:9c:24:1d:b0:8a:b7:
8e:bb:d3:b6:b7:6b:26:e6:37:5c:88:7b:35:1e:e2:
91:5c:83:57:0c:3a:48:d6:5f:c0:fb:b4:83:58:60:
c3:d6:8d:b7:2f:dc:b7:a9:d3:d6:d7:17:da:63:85:
86:80:49:45:e1:f2:b0:70:d0:9b:fd:8d:df:22:42:
99:52:0f:5e:56:17:8b:58:9f:a2:ea:4c:18:50:8a:
95:e3:50:02:98:e9:74:70:d0:d2:cb:14:fc:40:7a:
31:a6:e6:39:dd:27:52:be:ce:fc:2c:f1:48:22:6f:
6b:f5:6a:ad:16:5b:96:f4:c4:16:20:e3:2b:56:83:
59:c7:91:1f:dd:8b:b4:e3:8d:f2:d0:cd:42:13:9b:
87:76:5c:a8:e2:f5:3a:d0:39:d2:4d:a1:6e:7c:f6:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:60:22:D8:63:08:81:90:CD:DB:E5:9B:2E:AC:40:B3:75:A6:F1:38
X509v3 Authority Key Identifier:
keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8b:a8:c3:25:75:0f:96:3f:bc:89:a2:9b:89:92:23:1e:05:
b6:03:00:6d:f7:5f:76:20:ca:b6:b1:05:c8:74:ab:7a:f3:90:
3f:b0:b2:86:78:b2:39:18:c1:56:02:73:d4:0a:ea:1b:34:c3:
1b:30:51:67:f6:87:8d:8e:4b:4f:0c:8d:4b:b2:02:a2:dc:8e:
b3:f2:01:1d:f4:99:5a:26:1a:e0:c9:77:93:7e:88:fb:25:c9:
79:12:9d:65:75:6e:31:0a:ce:7d:5c:2d:bf:ed:08:7b:38:43:
47:36:41:75:37:55:5b:98:38:1c:bf:92:2d:3c:22:3b:1d:17:
1f:c8:4a:78:0e:ac:11:a0:61:b6:35:81:f2:f6:95:09:36:ab:
e8:4e:74:4d:2a:a0:a3:ce:96:b5:70:3a:77:89:29:0c:49:6b:
34:f4:c7:b1:0c:9d:95:d0:f6:0f:4f:ae:f1:5a:cf:11:63:47:
23:69:7e:6b:70:91:09:6d:3d:90:a6:5f:2d:06:94:90:7e:53:
d4:69:7f:f6:a5:5f:5b:fd:c3:74:25:2a:5f:cf:dc:6d:96:4c:
06:a2:64:18:71:a5:07:f5:a3:14:50:58:84:68:f6:52:ea:08:
59:5d:66:42:af:48:88:dc:42:7e:fe:27:5b:9f:4a:7e:3d:b8:
0d:9c:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:44:30 2024 by rpki-client on console-ams.rpki-client.org