Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: oXRt5OHtCSRDW8kO+nvRXbQBwVsKojBQwgpRTlNPJE0=
Subject key identifier: 90:E2:53:4F:BB:43:C4:05:6F:43:82:FE:94:77:43:56:DD:AB:A8:FD
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 019358094B35566C7901865913A03BFCAE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 10BF
Signing time: Sat 23 Nov 2024 08:00:24 +0000
Manifest this update: Sat 23 Nov 2024 08:00:24 +0000
Manifest next update: Sun 24 Nov 2024 08:00:24 +0000
Files and hashes: 1: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: XowiZ+JMIiq3PxPfV9j6BbT5XovwsQdIalqnFjMMPF0=)
2: fpn_lFPjxR1Z8cBBpwiLZ4DFx8o.roa (hash: ekRtqk/2//8ULa6C/vhLhK17m7gspmeS9Z76EXBVYFg=)
3: xddod013bUYLb3gcKCtHNFF-8Fw.roa (hash: 9ko7lJ1J2h5vDcMLmX2ewp7QzZrdjEKI0RxAJ5d4j3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:4b:35:56:6c:79:01:86:59:13:a0:3b:fc:ae:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Nov 23 08:00:24 2024 GMT
Not After : Nov 24 08:00:24 2024 GMT
Subject: CN=90e2534fbb43c4056f4382fe94774356ddaba8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:34:e7:02:b3:1d:15:9a:90:ca:5d:f8:24:
9c:76:08:e6:a8:39:ef:61:16:55:f3:98:86:fa:9e:
b8:bc:e0:48:63:48:d4:49:d4:7e:6e:26:bb:7a:da:
1b:19:70:1e:f3:22:e8:9f:02:d0:06:2f:b2:ea:c4:
22:83:2d:5e:48:18:63:d2:90:d8:d5:24:d9:3b:93:
ad:ca:21:65:19:91:cd:59:1b:f3:ab:99:c8:6e:b3:
2e:db:33:9a:b8:9f:ab:93:63:06:74:62:82:fe:ad:
1c:05:68:a7:33:fd:39:c8:f6:67:a8:c4:2a:60:07:
91:ea:06:11:79:21:9c:5b:82:c3:ac:a9:20:36:31:
d5:ab:b0:9a:de:c0:9e:2b:15:fd:c2:e5:7f:ed:c2:
7f:fa:1b:69:0c:c8:2e:ae:af:b4:79:8c:17:17:03:
8a:44:38:5e:2e:3b:c4:06:6f:1a:c3:8f:66:72:b9:
b3:5c:13:01:5a:75:ab:e3:38:00:8f:60:18:4c:52:
70:8f:1d:7d:cf:ba:db:28:11:d3:f6:46:9c:cd:a4:
c0:ca:b0:d6:b7:dc:87:2c:f3:1e:1c:ab:cd:b3:aa:
89:c4:be:c7:f6:d7:b9:e2:4e:86:7a:11:41:9f:c8:
89:28:a6:51:26:46:bc:a1:55:06:1d:18:f9:58:37:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E2:53:4F:BB:43:C4:05:6F:43:82:FE:94:77:43:56:DD:AB:A8:FD
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d9:42:9b:63:c1:6f:c4:e5:70:d2:67:0b:2f:30:f6:39:d9:
68:4a:9a:d3:ad:44:6f:40:87:27:a2:ab:2d:61:0d:54:90:b8:
69:e9:9b:fe:6b:dd:88:1d:ac:f4:7b:82:c2:88:49:af:a8:7b:
18:60:4e:9a:75:28:4c:f6:6f:d4:9e:38:3b:96:cd:c0:a5:63:
0d:31:d1:86:13:c4:34:0e:be:f3:84:3e:45:50:22:35:84:4f:
6a:9b:07:26:8a:ef:1e:63:be:ee:91:41:ad:e3:1c:69:68:d1:
11:aa:a6:66:a9:29:02:83:64:ea:e8:74:ff:e2:fc:cd:06:00:
a6:33:a9:50:68:3a:c0:d8:8c:e8:17:ea:bc:a7:14:2d:a3:d8:
fb:03:b5:12:38:6c:43:3d:ce:99:d9:09:84:b9:fe:fe:03:56:
ad:4e:94:67:59:c8:69:ba:0d:dc:0d:04:4e:92:9c:e4:66:b9:
92:fe:b7:19:e4:92:5a:34:71:27:54:52:56:12:f7:32:c9:ba:
53:75:0e:22:0f:0a:8d:67:76:dc:07:6c:cc:df:6c:7f:11:9f:
e8:5f:53:24:17:3c:72:0c:b6:29:c3:5a:41:64:98:ab:1a:16:
54:b1:28:8b:54:d2:15:cd:ac:aa:9b:c1:f8:29:d4:a0:98:14:
20:46:03:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:13 2024 by rpki-client on console-ams.rpki-client.org