Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.mft
File: yKYn5qZ_e2l9j7ryybB158cuqws.mft (raw, json)
Hash identifier: qDuF1et+v5cqyhPoSQxzfNAlBI0XN9bG/a4twb2Fvbc=
Subject key identifier: 6D:6E:68:C8:33:D3:BE:48:EB:9A:4E:6B:88:2A:C1:43:A7:F7:29:36
Authority key identifier: C8:A6:27:E6:A6:7F:7B:69:7D:8F:BA:F2:C9:B0:75:E7:C7:2E:AB:0B
Certificate issuer: /CN=c8a627e6a67f7b697d8fbaf2c9b075e7c72eab0b
Certificate serial: 018EFD861F047A13F90FC3F14D3CA5C13DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.mft
Manifest number: 08F1
Signing time: Sat 20 Apr 2024 22:00:09 +0000
Manifest this update: Sat 20 Apr 2024 22:00:09 +0000
Manifest next update: Sun 21 Apr 2024 22:00:09 +0000
Files and hashes: 1: dXaN8mxXjyc5-mDM_nKc_sIqIWw.roa (hash: +A+nM5jbyH0PyEGq84fweHuOsJi+pxpYJGfjTCax71M=)
2: ovq9SHaGHSZtUyimJkIoTGn8INk.roa (hash: CXb3LyRj5VuCMLVlACtqxz/81TDLV0/hwVMMXGdNbNo=)
3: yKYn5qZ_e2l9j7ryybB158cuqws.crl (hash: miqMX3vV2V9Ja59PB0ALOBOBEFWoDz4J0ZU9vgQuWhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fd:86:1f:04:7a:13:f9:0f:c3:f1:4d:3c:a5:c1:3d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a627e6a67f7b697d8fbaf2c9b075e7c72eab0b
Validity
Not Before: Apr 20 22:00:09 2024 GMT
Not After : Apr 21 22:00:09 2024 GMT
Subject: CN=6d6e68c833d3be48eb9a4e6b882ac143a7f72936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:88:d9:68:28:bd:cc:5e:ac:1f:bd:6e:e7:
2f:6e:4d:a7:3b:76:ca:3f:60:70:c0:ab:02:b2:43:
19:51:ea:39:e8:64:81:40:65:dc:47:01:13:f6:d5:
52:a0:16:6c:2e:33:63:c9:d4:50:2d:e0:26:fa:20:
c6:c1:a4:c2:92:fc:5e:77:41:df:d4:28:bc:14:12:
f2:cb:27:e0:9d:6c:51:5a:e5:6e:c6:ab:70:b0:3a:
aa:1c:0b:16:a9:43:42:e9:ac:83:13:ad:6c:2a:47:
13:24:28:81:99:e1:e0:da:c1:f4:5d:49:f5:f6:22:
91:bd:64:7b:3b:8e:f8:29:5b:fa:08:b8:04:47:8b:
31:c2:e7:42:93:d0:e6:2b:de:1a:52:8c:0b:36:0e:
3c:c0:a2:aa:90:b0:95:05:2e:88:f2:c2:9b:ea:eb:
f9:d1:0c:27:6e:d1:f4:b0:b5:3d:02:30:57:5e:5e:
e2:72:8c:1b:9f:3b:28:b8:96:6e:f8:69:94:7c:fd:
df:42:a4:f0:48:14:0b:5a:46:c7:82:28:1e:54:27:
db:bc:c1:b1:c9:85:a8:7e:d9:b0:92:14:07:aa:a1:
6d:b7:81:09:df:f3:16:8b:50:7e:db:42:ab:8c:f7:
77:ac:8d:23:c9:5f:fb:73:21:ab:0f:a0:00:df:58:
e5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6E:68:C8:33:D3:BE:48:EB:9A:4E:6B:88:2A:C1:43:A7:F7:29:36
X509v3 Authority Key Identifier:
keyid:C8:A6:27:E6:A6:7F:7B:69:7D:8F:BA:F2:C9:B0:75:E7:C7:2E:AB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:17:81:7d:f0:a5:68:8c:a2:bf:ed:6e:e1:2f:24:3f:00:64:
4d:48:a3:bd:64:21:d2:65:f6:eb:e2:58:61:f0:13:25:b3:8a:
25:1c:4d:94:22:a4:f7:73:d5:d8:73:1f:0e:d6:07:df:15:d9:
48:fc:d6:9b:ca:e7:aa:ff:07:c2:88:b0:ba:15:1e:5e:28:6c:
d5:6a:91:09:9c:fd:34:55:6f:00:b2:73:df:ed:86:9f:bf:ea:
d6:62:a0:42:36:23:9c:5b:79:bb:e7:31:59:5e:57:42:0e:57:
f0:8c:d2:f1:ab:4f:9a:38:e6:dd:90:81:09:ac:be:46:b8:da:
13:c4:06:d2:2a:d1:c3:77:eb:ef:0d:f7:0b:61:e7:b7:89:4b:
c4:a6:4e:0b:c6:cc:77:61:ed:fb:b9:00:58:dc:38:de:21:e2:
85:d5:a7:ea:8b:87:83:86:0e:12:d1:ac:41:a6:07:18:8e:f1:
72:98:c3:7f:e1:22:63:44:5f:f5:49:44:32:2f:cc:f5:65:4d:
db:14:ea:a7:2f:4a:97:19:d7:d6:65:9f:a9:e7:a2:1c:69:38:
93:2a:93:db:d4:25:41:03:36:62:97:7d:2c:f9:6a:16:43:ab:
d9:10:35:88:c0:e7:c5:63:ce:59:7c:c1:81:98:54:ff:b9:ed:
d1:aa:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:01:30 2024 by rpki-client on console-fra.rpki-client.org