Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json)
Hash identifier: RURH148Go1mcnFGb85PnhPbZCUNghHhJSrSFLQ6LY6I=
Subject key identifier: D3:89:63:27:64:AA:C5:26:20:62:D2:66:76:39:0B:3E:21:39:DC:C5
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 01935878F29F6D2D059731D67488B4B67F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 10:02:21 +0000
Manifest this update: Sat 23 Nov 2024 10:02:21 +0000
Manifest next update: Sun 24 Nov 2024 10:02:21 +0000
Files and hashes: 1: GB6CDhfnI9wsb8FUGQizZS_9biY.roa (hash: wXECxsgtGDgbSSMs1vIK3Lxrp/xd+DGgPAHr4x3f+rs=)
2: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: i8znBSxVmgKWbaDcTlQ3wl99m/ceklSAOBedZ+pmJJM=)
3: mzva8Fgs7hQhcnFbjBVTbc_1ucI.roa (hash: obQ2CnxeEGWWBvGaUqbGNGgiDJUFZB0c5J/jmGovCEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:f2:9f:6d:2d:05:97:31:d6:74:88:b4:b6:7f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Nov 23 10:02:21 2024 GMT
Not After : Nov 24 10:02:21 2024 GMT
Subject: CN=d389632764aac5262062d26676390b3e2139dcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:5a:5c:cb:f7:f8:19:b8:55:2f:ad:99:e7:
87:d6:f7:4a:34:3f:9f:46:c5:74:b1:26:4c:8c:da:
eb:63:2b:c3:2d:cd:e6:a5:61:24:df:ad:89:4f:c1:
f6:2e:9d:64:bc:e6:8f:97:22:7b:b7:ba:e5:ff:4f:
bc:4d:14:c0:f5:78:ff:bb:68:68:98:0b:36:1c:1a:
15:2f:69:8e:fe:48:38:22:9f:41:d1:a8:39:7d:56:
0b:97:70:b0:26:c9:ee:ae:dc:e6:e3:c3:70:72:ff:
85:57:90:33:d7:9d:44:89:3a:14:4e:28:b7:10:51:
e5:1f:7b:62:12:11:fd:32:bb:55:81:02:1d:84:45:
3b:9b:b4:48:52:a7:2b:80:02:1f:04:25:0b:86:55:
7f:ff:d2:04:59:cb:82:71:12:38:e1:fc:29:3d:a7:
eb:64:6f:ed:6a:5e:fa:9e:6b:b7:5f:07:3e:b2:2c:
61:64:e3:ea:99:6b:0f:18:10:27:00:d3:b7:fc:d4:
d1:cd:35:5f:95:af:ec:85:3b:9f:63:21:98:09:19:
75:d4:4a:6d:62:e0:d8:b8:8a:5b:8a:3e:d7:72:d1:
b1:d3:60:72:13:b6:57:bb:e9:3b:6d:d7:01:7a:f8:
09:ef:b4:a0:94:df:9b:3d:95:fd:85:43:e9:bf:57:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:89:63:27:64:AA:C5:26:20:62:D2:66:76:39:0B:3E:21:39:DC:C5
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ab:bc:a8:e7:2d:97:54:26:68:42:45:05:80:74:43:02:4d:
14:4a:cd:74:6d:78:5e:04:e2:88:07:1d:1d:2d:70:45:ce:4b:
a7:40:68:62:45:f3:92:d3:97:bc:75:f6:b8:7a:92:4a:0e:0f:
b6:2a:da:a6:87:42:f6:c0:76:a9:c5:31:36:4a:c0:18:ad:ea:
fe:f8:39:ae:86:6f:22:80:04:8c:9c:67:09:44:7a:6d:70:4f:
f4:c7:cb:e0:e2:bf:91:1c:16:4a:c7:4f:22:d8:c9:30:af:60:
04:f5:ca:94:9b:df:32:f7:ec:8e:35:3e:11:0a:99:74:f8:de:
ef:ba:70:5c:5c:db:ef:0e:53:d3:37:d1:4d:27:a8:84:7f:0b:
83:70:4d:71:bc:e4:36:18:2f:5d:79:f5:8a:98:3e:27:0d:35:
c9:dd:db:3b:a9:8d:ca:4c:0b:ab:31:68:75:91:40:c8:a7:35:
56:ef:6a:03:fe:c7:e0:73:70:fa:2e:c0:c4:90:f9:ce:bf:14:
cc:05:b1:fd:17:97:4b:30:d0:89:23:22:bf:93:30:c7:cb:9f:
e4:41:44:6f:5b:4b:7b:26:e9:05:be:b8:1f:2a:24:19:ac:c9:
9d:80:d5:01:d5:11:d5:32:2d:40:f2:73:31:15:f2:09:07:1f:
8e:7d:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:08 2024 by rpki-client on console-ams.rpki-client.org