Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
File: yF0BtEKUbhkkMT1WTzG35C4kVec.mft (raw, json)
Hash identifier: 3syB72L6qrwoQqVAsKxqXj/fp2NRDhuF9ZU0k+wfpvw=
Subject key identifier: 72:42:3E:00:BC:F4:08:81:8B:01:5A:FB:6D:89:EF:77:97:43:CA:DC
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Certificate issuer: /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial: 019357D2A0F49CFDB40F0F2799D558EF8EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
Manifest number: 07F2
Signing time: Sat 23 Nov 2024 07:00:41 +0000
Manifest this update: Sat 23 Nov 2024 07:00:41 +0000
Manifest next update: Sun 24 Nov 2024 07:00:41 +0000
Files and hashes: 1: vZ34TokIZhUtfkCiy8q1r7BLpGM.roa (hash: Mx6EElDlWV0XJffXXemD5LigiH8e0AzqM3ih25rDArk=)
2: yF0BtEKUbhkkMT1WTzG35C4kVec.crl (hash: h1ads+Idyz7Qtb7WyzKcc8BvxU3OebjU5Y6dudkwM1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:a0:f4:9c:fd:b4:0f:0f:27:99:d5:58:ef:8e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
Validity
Not Before: Nov 23 07:00:41 2024 GMT
Not After : Nov 24 07:00:41 2024 GMT
Subject: CN=72423e00bcf408818b015afb6d89ef779743cadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:7b:2c:36:11:80:f0:5b:c4:ac:ae:3e:23:
15:26:06:d7:91:63:a3:20:77:29:fe:f0:e1:b7:9e:
73:b6:80:4a:dc:b7:e8:32:ca:a9:1d:fe:da:c6:50:
8e:c5:d7:d6:27:1e:bf:8d:8e:f3:a6:02:6b:e3:73:
c1:78:5f:a6:a2:44:a7:58:53:af:1b:4e:de:80:03:
e4:68:d0:5a:b7:b3:4a:ea:e7:a8:a3:9b:1d:f8:00:
c2:43:a0:a3:e6:bc:00:3d:5e:04:31:09:c0:ab:8d:
a1:50:8d:29:60:d7:21:c1:d0:4d:54:28:df:95:c5:
51:9d:eb:5a:4f:53:44:de:3b:5d:97:7a:00:13:f0:
33:42:57:7e:f5:ab:d6:21:72:47:7c:37:23:e2:c4:
f2:5e:20:f5:b3:75:3e:e6:87:3f:39:a2:1a:c5:d4:
4b:41:5b:d6:b3:16:8f:4a:16:12:1c:0f:84:4e:44:
f0:fd:0f:f6:ca:c2:1c:43:98:76:9e:da:3b:db:23:
08:76:5f:1e:75:28:bd:53:8d:fe:33:15:ab:91:da:
0d:b8:7b:0c:d8:86:f3:5d:ad:ef:bd:3a:e2:89:62:
f8:ad:76:80:be:70:ad:87:30:5f:30:e9:4d:71:84:
f6:d1:31:11:c5:44:0f:b3:f5:51:ed:8c:6e:d6:dd:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:42:3E:00:BC:F4:08:81:8B:01:5A:FB:6D:89:EF:77:97:43:CA:DC
X509v3 Authority Key Identifier:
keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ee:aa:06:c0:0e:db:98:fb:92:2f:b6:15:60:fe:46:1c:4f:
45:0e:0b:80:d8:e9:a8:cc:67:89:72:e7:83:10:fa:86:76:31:
19:32:e9:e3:de:67:33:7a:03:a7:27:db:43:c7:e3:6c:67:5f:
61:b8:15:96:b5:67:01:d1:d9:5a:a5:c5:37:76:06:1e:f8:68:
2f:4b:7e:47:09:fa:11:08:b1:2f:51:d9:84:92:66:49:fa:ff:
bc:b6:be:0e:53:10:bc:bb:4d:56:b0:4f:cf:4d:d5:3e:4f:18:
76:b3:1a:7a:e4:05:38:a3:62:99:a8:91:ab:a8:46:67:d4:e6:
a4:4d:65:23:cd:b9:19:e0:4b:af:84:e9:47:80:e7:06:d9:10:
2c:66:03:43:cf:ed:45:40:12:55:66:94:c4:26:9c:db:9b:75:
68:be:4b:cf:0a:df:c2:19:a8:67:0d:40:d4:bf:9e:30:4e:e2:
b3:c8:2a:85:19:7c:0c:70:56:29:f2:29:eb:17:8e:d9:b9:f4:
29:62:7f:ea:12:22:14:50:0c:a8:11:2b:87:03:84:c5:ae:05:
06:a9:7f:19:c9:75:40:23:52:5a:cf:69:d6:f8:3c:f5:be:cc:
c8:3d:3e:2d:22:ff:17:b4:c0:a0:37:07:a2:55:bf:04:44:e8:
77:d1:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:10 2024 by rpki-client on console-fra.rpki-client.org