Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: IxvV2pwe9R9my+a9SQX8G9CeC1tyzpI+/wFYOAB0Ijg=
Subject key identifier: 1E:F6:F3:4A:E6:77:52:35:4D:62:E6:1C:22:DB:D5:33:14:A2:60:18
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 019369DB07E0DE5F7F67F25092223672F9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 0B71
Signing time: Tue 26 Nov 2024 19:03:02 +0000
Manifest this update: Tue 26 Nov 2024 19:03:02 +0000
Manifest next update: Wed 27 Nov 2024 19:03:02 +0000
Files and hashes: 1: Dr4KrsmSdl1Q_MOPLF3tD3Wljco.roa (hash: Jyc8bHHpSXgyvXANcmD1F5pFSoC+AApcaKTXO5R99qI=)
2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: mN5hCUrQFwafEk8wp7CvDVWwV8ed33SD5XqQY+muhUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:db:07:e0:de:5f:7f:67:f2:50:92:22:36:72:f9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Nov 26 19:03:02 2024 GMT
Not After : Nov 27 19:03:02 2024 GMT
Subject: CN=1ef6f34ae67752354d62e61c22dbd53314a26018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:68:c3:e4:61:eb:25:a0:c5:e8:ad:5f:0c:
10:9a:a2:df:6c:1f:6b:23:4a:05:73:5c:77:c2:64:
7d:28:21:a3:b9:83:82:30:d1:f4:2f:43:ec:38:1b:
64:96:7f:27:f9:45:f7:69:53:b5:75:49:49:69:aa:
43:e5:99:4a:de:28:45:37:61:73:46:9f:c2:fc:0e:
cb:4a:7e:ad:ec:62:c6:94:90:a6:ca:15:5e:b8:30:
6d:f0:29:b6:4d:a0:6a:f4:44:3a:a1:b4:e7:ac:cd:
44:ac:40:65:b6:98:b8:6d:5a:fa:10:22:64:66:d7:
e4:22:07:a7:93:7e:68:a9:3c:da:03:b2:e8:8f:9a:
f9:02:3a:f5:ac:8c:c1:57:98:59:f3:f1:dd:8e:78:
37:fd:fb:3e:e5:61:40:95:fd:3f:af:38:94:dc:1a:
47:39:19:e6:0d:b6:8c:65:8c:f2:dc:d2:eb:d6:01:
99:b0:27:a2:35:4f:90:f7:61:a8:4b:13:16:42:09:
35:96:e2:2d:3b:32:c4:d9:c7:b4:00:51:0b:ca:e8:
dc:c4:37:94:ce:07:85:8f:bb:85:1a:f5:44:68:15:
51:d2:70:76:33:13:57:25:58:97:89:88:e4:67:97:
e1:05:20:e4:1f:45:b3:40:16:67:a9:f6:ac:56:fc:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F6:F3:4A:E6:77:52:35:4D:62:E6:1C:22:DB:D5:33:14:A2:60:18
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3b:3e:33:ec:d0:23:43:25:35:75:db:27:4c:4f:1a:a9:c2:
fc:e1:32:da:de:dd:f6:1e:b7:72:92:4b:7d:d8:73:22:c4:07:
b6:16:ae:f1:17:c5:fb:6b:0e:cc:b2:da:8b:fd:1e:c5:e8:30:
33:c9:85:cd:6a:74:b3:8a:7f:00:64:52:91:65:62:b3:1b:4a:
bd:c2:fd:98:11:95:4f:53:91:ca:86:56:22:6c:ef:01:1d:14:
eb:3a:df:7d:c0:7e:39:ae:91:de:4b:6f:33:c2:97:5e:b8:e9:
4a:ba:64:23:cd:8f:e1:f5:49:6f:a2:98:53:dd:d0:86:ed:a8:
d1:8e:ce:22:40:fb:89:31:f1:c1:c9:f1:42:4d:26:1e:37:dc:
60:eb:59:ae:a2:1d:43:6e:47:91:e5:67:0f:74:f6:5f:e3:8c:
c0:ff:45:57:24:24:46:95:aa:10:0e:e3:a4:5c:dd:77:b7:7f:
6f:03:87:c7:f9:32:72:65:2d:bb:f3:2d:40:b8:90:6f:93:91:
c0:d7:80:ed:96:33:f2:60:ad:19:7a:b3:e0:e9:e9:a3:27:54:
d4:9a:8e:d7:40:7f:88:51:ee:95:fe:29:60:7e:13:71:1f:96:
50:ff:41:95:e1:25:4d:fc:58:cd:04:c7:c7:cf:a8:bc:4e:1c:
df:c7:ea:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:28 2024 by rpki-client on console-fra.rpki-client.org