Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: Fk+SaaUDmWzGCcpmN3BcbsLFFwnKbjA+zgjNDroTZ/A=
Subject key identifier: C0:65:F0:70:02:77:20:CA:52:A2:BE:33:B4:D3:2F:FA:52:BA:AD:D7
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 018F8711549D73E67089DCA902DFFF4D8A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 02CE
Signing time: Fri 17 May 2024 15:00:10 +0000
Manifest this update: Fri 17 May 2024 15:00:10 +0000
Manifest next update: Sat 18 May 2024 15:00:10 +0000
Files and hashes: 1: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: S79MNAnAIusMlOn7yX4lbFNm8gH4llhmeYL/YLXHDK0=)
2: kMXPU5CC7cVcdzaf7WQw3c4xK98.roa (hash: 3CxWaASiUecd0etUCPnNX78fq71Dv7n6O0wAa3/VNd8=)
3: sPnQOs63KzngIVN9NCgfCJAuvV4.roa (hash: K4qNi/R4xlW4Bh/L5phDf4Hb9lfIk0gmARYX2U72VY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:11:54:9d:73:e6:70:89:dc:a9:02:df:ff:4d:8a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: May 17 15:00:10 2024 GMT
Not After : May 18 15:00:10 2024 GMT
Subject: CN=c065f070027720ca52a2be33b4d32ffa52baadd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:7f:fd:f8:d2:b9:08:01:33:04:16:95:76:
72:db:70:37:d9:c3:d6:5a:5f:89:6c:5d:b7:3b:f0:
77:4a:25:4b:ee:b4:8d:2e:6d:51:c8:d1:11:77:1e:
aa:1e:ee:6a:3f:5c:6f:74:f1:06:c3:6d:8d:a2:93:
a1:18:f1:bc:1e:51:32:0e:e9:db:09:aa:56:12:68:
46:73:41:21:0e:4e:b2:90:da:e2:04:fd:9a:4c:78:
a0:a2:91:00:9d:d7:90:06:9e:11:d2:76:f7:2a:2f:
32:58:30:78:7d:1a:9e:45:a4:3d:db:85:91:65:d8:
ba:2e:28:08:a9:f4:e1:c2:c0:a4:50:9e:11:55:ce:
37:27:49:90:16:76:34:b6:5d:5d:51:59:72:0f:3b:
28:ab:29:a3:c5:59:9e:92:44:42:92:c0:9c:c4:ba:
dc:b7:22:13:69:ae:ec:ec:7a:7c:34:e7:43:8a:a6:
ae:36:3e:b9:62:79:8f:48:0c:f4:9a:25:9d:1a:79:
b2:32:4e:98:fd:c9:53:24:ec:f1:4c:56:56:1b:32:
78:91:9e:1d:09:30:87:3b:71:ca:61:4a:1b:16:56:
31:dd:62:67:51:e2:69:a9:96:4f:2c:03:08:b0:79:
3d:45:5f:da:fe:db:92:75:da:44:0a:88:cc:f6:af:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:65:F0:70:02:77:20:CA:52:A2:BE:33:B4:D3:2F:FA:52:BA:AD:D7
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:25:14:e0:dd:bb:34:7f:15:b4:77:97:17:72:d8:b9:d4:3c:
0f:e3:a1:2f:0c:bb:06:4f:53:07:4c:3b:89:f6:39:c7:dd:29:
f4:27:30:34:6b:7d:32:f8:41:74:b5:c0:51:3b:7a:00:2f:07:
77:0a:ab:c3:5b:65:5f:14:a8:dd:e3:fe:94:32:da:53:dc:99:
d7:4a:f4:9e:34:a0:9d:99:c4:c5:ac:d4:34:49:4a:ab:a7:e0:
d1:f5:a2:6a:b3:f9:e3:f7:6a:9c:3a:9c:b3:23:f6:b0:37:7f:
08:eb:2f:6b:0e:54:fc:2f:80:1a:3d:c5:5b:29:da:6c:e4:48:
6f:e6:9e:05:84:ef:79:7c:d8:b1:81:30:26:30:b4:f3:bb:6d:
d5:26:b0:79:e2:4b:e1:6b:f5:8d:28:9c:ee:e1:86:9d:1b:1a:
49:fb:8b:90:74:f3:e8:98:74:92:e1:e0:e0:d5:73:50:76:7d:
0b:74:15:86:fe:84:fb:87:a2:a2:c7:a7:60:c3:f2:bd:4c:c9:
a3:14:9f:64:dd:ed:f4:bd:f7:2b:ad:8b:96:ec:bc:9b:20:2f:
a6:d2:66:20:d8:e7:a4:e9:67:16:9f:a5:18:6f:e4:c9:6c:56:
48:f9:ee:51:bf:4a:a8:13:36:e7:09:6b:9d:55:fa:88:da:c6:
7a:37:75:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:14:40 2024 by rpki-client on console-ams.rpki-client.org