Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
File: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft (raw, json)
Hash identifier: hVzAhwRXtUy4YSJdlZw6TTA5S48BNozQmpJyvjxKRSE=
Subject key identifier: 06:66:9F:03:49:32:B0:FC:CE:D9:3A:F9:8F:EB:E1:43:51:8F:F2:79
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial: 0193579BD8D15D7B96E0270DA051083E38C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 06:00:51 +0000
Manifest this update: Sat 23 Nov 2024 06:00:51 +0000
Manifest next update: Sun 24 Nov 2024 06:00:51 +0000
Files and hashes: 1: fDV7y5APrROmAfpotfIpURezlxY.roa (hash: /h+M3BrUnaoe1KcTBJAsgPsaBOGNFje18Z5OI9pN+wY=)
2: fk7X_YI4TzgGu7ZZhUlvM7D_HFA.roa (hash: zokPpep/0uQXe9Xj67FZkY3rJfP9UpN2hnaOiYlUR5Q=)
3: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl (hash: Dr2wDwiDTbKIXaIZWMGCmvmHIbCbcjSG5IoLXxo+ass=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:d8:d1:5d:7b:96:e0:27:0d:a0:51:08:3e:38:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Validity
Not Before: Nov 23 06:00:51 2024 GMT
Not After : Nov 24 06:00:51 2024 GMT
Subject: CN=06669f034932b0fcced93af98febe143518ff279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6a:ae:17:ac:07:32:2c:c7:db:d0:5f:82:b1:
bc:f1:eb:fb:4f:9a:1d:b7:48:25:26:f2:c7:57:20:
a0:63:9f:27:e9:37:de:9d:cc:d2:56:8f:b9:3a:02:
03:7f:d2:2f:89:55:c8:43:84:66:d6:7e:67:6f:41:
02:7d:1e:d3:a4:ad:0f:4f:5c:20:be:bb:86:d9:fe:
88:a8:17:44:a7:f6:79:6e:27:5d:e6:84:01:af:ff:
7d:60:2d:9b:46:24:ee:fc:9f:1c:5a:f1:5f:70:f3:
06:fc:8e:78:cb:fe:fe:b5:c5:aa:8c:d9:01:9b:dc:
ed:3b:1d:e4:8f:00:65:a7:41:4a:13:89:2c:ff:8f:
4c:dc:71:9b:c9:10:45:f7:1c:dc:b8:ba:11:13:46:
30:d3:46:72:e2:6e:0d:d5:38:d5:da:df:90:31:6d:
22:49:ee:89:e8:fc:1c:45:e5:8f:b4:45:5b:d2:3a:
b6:84:3d:d8:ba:9a:04:46:95:a6:87:a8:89:46:55:
7d:40:3a:0f:53:68:11:71:f5:a9:67:c4:fe:0a:f5:
3d:09:a3:70:aa:43:b7:be:65:a0:78:25:1c:d6:15:
f2:10:84:d9:78:87:d5:53:c1:19:47:28:63:33:22:
bd:1a:2b:ea:a5:3e:f0:21:59:96:40:08:73:21:8e:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:66:9F:03:49:32:B0:FC:CE:D9:3A:F9:8F:EB:E1:43:51:8F:F2:79
X509v3 Authority Key Identifier:
keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cd:5b:76:0d:09:89:80:44:2d:00:e5:7f:4d:95:f0:e2:f9:
2a:66:47:e6:48:be:9a:65:f7:3d:d1:f7:6f:f4:46:0a:5c:ce:
94:78:77:07:8f:f3:06:40:3a:1b:51:a0:13:c1:5c:17:75:22:
10:fa:c8:97:6a:0a:a6:f4:a3:fb:03:de:8a:7a:a6:a0:35:e8:
77:94:77:4b:f8:9d:72:e3:3d:05:dd:1a:cd:d3:b3:97:86:3b:
70:3f:f9:33:f8:b5:f2:61:74:7b:77:67:dd:e8:79:79:34:70:
89:db:79:2b:5b:b9:34:29:c7:a4:a2:f6:ea:d0:a1:26:5c:f9:
bd:05:d3:d7:01:b4:f9:5f:d9:f8:5f:11:1c:57:80:c3:0e:73:
77:80:3e:24:59:4f:38:8a:0d:56:e1:cd:06:0d:e7:fb:b5:e7:
80:f8:cc:aa:5f:db:f7:54:52:77:9e:77:55:96:d1:13:ec:f0:
1b:45:a6:4f:0a:41:54:3f:3e:49:de:18:bb:d4:39:e2:60:b8:
b2:13:d7:2e:8b:fc:66:ef:b1:9c:29:ce:62:3d:0a:c2:6f:90:
1a:7d:fd:6c:97:ad:1c:5a:c1:f9:d0:06:a1:08:78:2a:82:70:
43:50:1e:86:72:4a:ff:b1:73:72:77:96:75:c6:bc:99:12:f9:
35:c0:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:21 2024 by rpki-client on console-ams.rpki-client.org