Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File: yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier: qsxbeASfFzXc3RPT5Fefi6MAfpCIqH3sdEeEVCh1u1c=
Subject key identifier: 1C:83:B4:7B:30:BE:96:8E:07:FF:DC:2C:38:8C:9A:9D:79:FA:19:7C
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial: 019351D0719FEA3F97A6A43F957EC5CCCAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number: 3F
Signing time: Fri 22 Nov 2024 03:00:35 +0000
Manifest this update: Fri 22 Nov 2024 03:00:35 +0000
Manifest next update: Sat 23 Nov 2024 03:00:35 +0000
Files and hashes: 1: 14_hJ2-kA--BjQRUmggJ22M4z8k.roa (hash: twz2ofXJXpNpZcSCNQcgd3/eJi7tcltQZN45R9sYQYg=)
2: LiBE6qWJhjMDYCBuk-2ZFf5yWRA.roa (hash: WWYtPDApk0ESVpsKfMs1lSGf4iAdHJWvOYZ0e8fUMTY=)
3: c2S7B92ZJNn7_SEhpU1K_j-DdYk.roa (hash: itwHOepSEkwnAphHimulXinYSFn4tt/LXbgpaZltn+c=)
4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: 8oAMqdgppWvnFZEbNGyOKiaFdpsO3GksN1S9QbPBJTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:71:9f:ea:3f:97:a6:a4:3f:95:7e:c5:cc:ca:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
Validity
Not Before: Nov 22 03:00:35 2024 GMT
Not After : Nov 23 03:00:35 2024 GMT
Subject: CN=1c83b47b30be968e07ffdc2c388c9a9d79fa197c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:93:4d:1a:5f:0a:26:24:e8:9e:a8:64:58:
b6:6e:d3:57:44:6e:7a:80:7c:8e:83:bd:39:0d:32:
d1:8f:fb:21:b5:42:3a:15:5b:b9:ae:cb:53:92:f5:
f3:d5:ce:4b:9c:89:07:c8:ed:03:83:4e:0b:b1:42:
12:60:66:b7:77:07:3f:7c:90:90:8e:0a:17:6b:e7:
00:ad:f7:35:47:66:5a:fc:40:ce:a7:8a:e2:5b:da:
32:9e:54:9f:6e:a4:a2:dd:b8:b7:6f:c9:66:22:f7:
f9:b1:83:c2:e5:a8:17:12:01:c4:59:a7:95:8b:d0:
16:89:ed:12:f8:cb:53:a4:32:96:5f:9f:23:ef:9b:
ec:71:45:03:64:e7:17:6d:39:44:9e:d1:b8:2c:6a:
0f:c2:87:5e:f4:03:6b:47:86:7d:de:b8:cc:31:0c:
41:d0:1a:34:ec:4f:b0:61:a4:71:83:43:64:cf:d2:
80:58:61:76:0d:fe:d1:4f:3d:cb:a6:19:ea:b1:73:
58:78:00:e5:72:1c:93:64:a2:f9:89:4d:68:3e:83:
aa:ee:cf:35:5c:57:3c:b8:75:44:dc:d7:de:50:52:
04:aa:a0:b7:79:d3:66:0e:dd:49:00:2f:f6:8d:05:
0a:34:8f:f2:68:1e:37:f7:06:ad:2c:0c:a5:d0:03:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:83:B4:7B:30:BE:96:8E:07:FF:DC:2C:38:8C:9A:9D:79:FA:19:7C
X509v3 Authority Key Identifier:
keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cd:7c:1f:15:88:b4:1e:c3:74:5d:49:0b:7c:12:f7:04:7a:
a7:a4:a9:44:13:49:d6:cb:35:1d:23:07:1c:9a:2f:37:72:e3:
9f:99:b7:40:38:9c:2b:04:70:e9:e7:8d:65:25:57:b8:2b:3d:
ab:8f:f3:38:f1:f9:59:87:96:a3:90:79:82:47:d8:0b:f6:ed:
64:ba:23:d3:9c:9d:9f:02:42:ec:9d:3f:37:9e:67:a6:08:57:
fc:8a:4f:d9:39:fd:bb:8b:73:a7:73:fc:90:40:91:a6:f4:c2:
7b:d7:18:43:d6:ef:ea:52:ab:b9:55:40:57:d1:1b:e2:81:21:
01:76:25:00:3c:c3:0b:6c:ef:ea:e4:50:d4:54:28:e3:36:a8:
23:b9:90:a8:71:ef:f7:77:07:dc:12:a7:59:0b:a2:b0:0a:ff:
5d:8d:4c:4b:a8:08:bd:de:30:42:b5:47:b8:df:ef:25:a0:4a:
aa:af:bf:f8:2f:7e:a5:81:10:b5:76:96:4f:0c:5a:bd:c0:50:
49:b5:b9:92:25:98:47:5b:a2:ab:6b:a3:3c:1a:45:b6:86:00:
34:1c:4a:da:9e:dd:88:d1:fa:53:4d:14:a1:48:66:9f:8d:f4:
1a:59:69:e7:d8:99:d5:d5:da:d3:f0:2e:26:f7:ac:37:1f:62:
34:52:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:40:37 2024 by rpki-client on console-fra.rpki-client.org