Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier: PJYefcbA41iijvQgVRWP5Tzv5OCjGhTvP0wuX0bjyio=
Subject key identifier: 94:7A:FA:49:F7:1F:77:27:25:20:3A:90:9D:1F:65:F6:61:D9:C7:2F
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 01935689556033F70FCA837E0D0498CE2363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:01:01 +0000
Manifest this update: Sat 23 Nov 2024 01:01:01 +0000
Manifest next update: Sun 24 Nov 2024 01:01:01 +0000
Files and hashes: 1: 77CzRTI9zz1MAZAY_RIvJI8dmHU.roa (hash: I+hsfpksFu5Oedz7hC0K/+eer12ZMWrGpGOpXn+VdTk=)
2: H2Wtq6LUC566NYH5syIAD-N68rY.roa (hash: Y2ntkASUq0B16l7Z5TCtJhvdZxSFw5md39JpNR5AaGo=)
3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: Z8UPUWvUhq+4osR1F4sr9aW3PEN4W0rGfsUMoDet7mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:55:60:33:f7:0f:ca:83:7e:0d:04:98:ce:23:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Nov 23 01:01:01 2024 GMT
Not After : Nov 24 01:01:01 2024 GMT
Subject: CN=947afa49f71f772725203a909d1f65f661d9c72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fd:ca:68:07:11:78:ea:f9:28:ed:05:5f:d4:
ce:63:ef:d7:47:a6:79:18:f1:26:ad:4c:33:36:12:
0f:f9:73:d0:d8:59:b4:ee:49:4d:5a:51:df:96:1a:
f0:2a:d9:30:74:0c:63:dc:c0:d9:47:e3:f1:82:c7:
03:3a:7d:c0:e6:23:52:24:07:9f:35:0c:86:73:66:
0b:85:6d:c4:2d:be:3e:8c:5c:53:dd:fc:fc:ff:cd:
91:db:d9:4e:66:c3:64:6d:65:5b:f0:5b:26:f4:f1:
ab:d1:85:52:a5:e3:4d:d5:4a:51:d0:6e:40:4c:6d:
84:7c:6d:05:ce:21:34:be:31:ca:1e:db:12:92:bb:
d3:11:71:71:e0:84:cc:84:11:97:50:31:b4:8f:b5:
87:62:05:3f:61:40:e1:eb:df:a5:cd:10:ab:8a:28:
fc:e9:ca:cb:3a:b6:b8:11:ee:2a:87:d6:55:43:b1:
5c:d3:fa:ac:f0:e2:32:44:dd:e4:c5:45:6e:9c:17:
e1:0b:e6:36:d5:76:45:45:39:0b:8c:07:1d:34:c8:
02:61:3e:ab:1c:c6:ad:5a:e2:71:fa:1d:5f:d5:fa:
11:c6:ef:d4:bf:2c:95:03:c5:11:38:ef:57:37:ba:
7e:6d:da:4d:dd:1c:72:cf:b0:6b:a4:ed:15:46:94:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7A:FA:49:F7:1F:77:27:25:20:3A:90:9D:1F:65:F6:61:D9:C7:2F
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:55:e2:d4:49:92:84:e6:9b:2f:bb:b8:ef:e9:d4:86:d3:a4:
50:d4:68:f1:de:ad:99:31:30:e3:a1:38:3c:e6:18:ae:46:39:
44:48:43:5e:72:74:7b:ae:c5:4f:29:53:4d:82:12:b8:8f:bd:
c1:f9:62:da:7a:bb:27:94:82:7a:d7:b6:5e:f3:f7:5c:4a:a1:
33:ea:e8:f8:41:23:f7:eb:5b:3e:bb:e1:66:b3:3e:2e:a1:ef:
0f:72:b3:aa:d8:42:3e:22:3d:86:22:01:85:c5:94:95:e8:8e:
7e:dc:2d:6b:b5:32:0d:14:62:f4:23:fa:7b:6d:03:c8:b4:e8:
9a:55:35:c9:1f:50:a1:e9:90:83:30:e5:73:ce:55:3d:e3:c4:
38:ca:f7:07:3e:01:93:83:bb:d8:ed:46:e4:57:4a:d6:91:a3:
0b:a4:8d:ca:42:ac:00:df:f6:71:a5:47:8c:cd:50:80:00:2d:
4f:cd:7c:ed:4c:32:05:8e:bd:91:1b:a6:5d:21:09:8d:d2:56:
73:1b:1f:c2:e2:ad:5a:b7:a1:83:96:e4:28:83:51:fb:81:02:
90:38:c7:d4:2c:2e:82:40:dc:64:b2:be:76:22:f2:62:b0:78:
8d:39:be:0b:06:65:21:d4:cb:8b:60:25:75:12:f4:d5:95:6e:
7a:a2:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:27 2024 by rpki-client on console-ams.rpki-client.org