Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
File: ydpiiCTNWbFCcrQFiolkLktHvdw.mft (raw, json)
Hash identifier: lFP4EZqOHBdWtcttWWJraJ6DD/Z03QfiMlSrXi7ARDc=
Subject key identifier: 8D:8B:41:E6:E8:93:03:C2:AA:52:C7:89:F6:75:B8:71:25:C1:42:CC
Authority key identifier: C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC
Certificate issuer: /CN=c9da628824cd59b14272b4058a89642e4b47bddc
Certificate serial: 019353BEF7467DCDD95F2B7EAA74CD31701F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 12:00:44 +0000
Manifest this update: Fri 22 Nov 2024 12:00:44 +0000
Manifest next update: Sat 23 Nov 2024 12:00:44 +0000
Files and hashes: 1: KDxunpW-4iZeTy4vMHtcdCcpnws.roa (hash: nDu7xvio4HE0grvSRmg1fU4iIQ8ThdrfaQA+5CZ2uyM=)
2: eZbPS-gTeujJqvQMcVIzKJ42aKA.roa (hash: nwvrHzWTcdk6yGR+fKOkYESMO9kncdiROiLJ2gCgIbI=)
3: ydpiiCTNWbFCcrQFiolkLktHvdw.crl (hash: ZcsANj4mm3fiqULqyVuJKwWUFpL8qWFLr0345HCGOJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:be:f7:46:7d:cd:d9:5f:2b:7e:aa:74:cd:31:70:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da628824cd59b14272b4058a89642e4b47bddc
Validity
Not Before: Nov 22 12:00:44 2024 GMT
Not After : Nov 23 12:00:44 2024 GMT
Subject: CN=8d8b41e6e89303c2aa52c789f675b87125c142cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:d0:a1:19:b2:21:07:57:d9:75:1c:59:b3:
ab:fb:d4:be:0d:51:ad:c4:55:a1:37:cd:d8:f2:24:
2f:48:3c:77:0a:10:78:e4:2d:0f:c7:5d:50:c7:6b:
6f:ac:72:cb:77:3e:c3:95:5d:ce:4c:30:a4:ee:92:
a0:e4:e5:16:db:3f:dd:30:a0:de:f7:0d:c4:9c:9c:
ad:4b:1e:37:dd:f9:b5:f5:db:da:81:f2:b2:a3:66:
67:9e:4e:ce:ac:cd:e1:c1:86:31:3f:97:42:15:49:
75:d7:1f:80:51:e9:7b:a3:aa:da:a5:d8:d1:4a:f4:
d4:3b:e5:d8:6d:91:4d:cd:4f:8d:c2:ab:2e:30:59:
04:e1:01:c3:85:66:ff:93:77:03:37:90:00:58:6a:
1e:cc:dd:a3:3d:10:36:e0:b7:f4:6b:0f:25:a7:02:
99:a3:76:26:cc:96:3e:8b:33:e5:72:50:c2:d4:d4:
17:c2:e3:8a:92:db:ac:39:ad:39:bb:e4:fc:a1:b7:
da:4d:22:27:47:3e:62:d6:ac:a7:12:bf:f1:a1:af:
be:d9:5f:7b:32:ee:ab:42:04:d6:06:bc:8c:7a:a4:
5a:7d:20:38:98:84:fb:8f:7a:77:03:b8:8b:b3:54:
b4:98:1d:da:02:69:03:75:fe:ac:de:1f:3e:61:ac:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8B:41:E6:E8:93:03:C2:AA:52:C7:89:F6:75:B8:71:25:C1:42:CC
X509v3 Authority Key Identifier:
keyid:C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b7:b7:dd:73:88:96:d2:88:43:75:30:08:e3:a5:ca:bb:06:
9e:77:52:3d:9c:f0:01:65:1b:59:8b:d6:6d:6c:89:f6:66:f1:
f8:9c:13:76:6c:66:14:28:8e:7e:e9:62:18:d5:09:6d:ad:ec:
4e:6e:53:1d:35:5a:a8:ee:f6:42:f6:fd:3f:be:6f:38:c0:2d:
c9:6b:ea:a1:e2:f7:a9:4c:21:a2:48:1b:13:8c:d3:7e:cc:d8:
51:34:a0:a0:66:4a:a6:9d:cb:df:97:03:26:ff:b4:bf:f4:30:
93:33:13:fd:8d:81:d0:96:71:df:08:60:aa:d7:9a:63:13:d8:
20:ae:66:4d:28:61:24:6e:fa:fd:f0:c4:e3:fe:34:89:40:9c:
4a:a0:6f:45:b3:87:b7:e6:75:e3:a4:c3:7b:c5:58:18:bb:c3:
10:bf:53:a6:6e:44:42:48:86:9b:a9:f5:fb:b6:ad:40:c9:50:
21:99:d0:07:0a:1d:c3:8f:8e:87:67:18:c1:3a:b6:b8:a3:0b:
62:15:f2:82:69:4a:eb:54:d7:c6:cd:00:15:46:30:c9:0b:cb:
62:6e:a2:03:6f:b4:74:55:9a:1f:07:ac:97:8e:31:f6:f9:4a:
77:a6:2d:0f:6a:bd:85:a0:71:4a:6c:52:6a:df:22:26:fe:83:
1b:38:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:28 2024 by rpki-client on console-ams.rpki-client.org