Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft (raw, json)
Hash identifier: xdxrnKT4/2cEQaPR9n153wBworJNUfFBIp2iuwCXGC0=
Subject key identifier: 0C:D3:09:EE:07:AB:9F:D2:CD:6E:60:D2:DA:8C:4B:62:E0:0F:21:43
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial: 0193572D8AD379A387291947CAA988ED3888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 04:00:22 +0000
Manifest this update: Sat 23 Nov 2024 04:00:22 +0000
Manifest next update: Sun 24 Nov 2024 04:00:22 +0000
Files and hashes: 1: EfjDLot0qCx04TlgjeP8FrkvziI.roa (hash: XF8DtEfIj1c10sSgBW4JLWNAC5k8cnwfKOOWHSsN0Lw=)
2: cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl (hash: aWfP7d75mWQPpWt4ZiMv56y3nZv23b7QFbzuI4p89L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:8a:d3:79:a3:87:29:19:47:ca:a9:88:ed:38:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
Validity
Not Before: Nov 23 04:00:22 2024 GMT
Not After : Nov 24 04:00:22 2024 GMT
Subject: CN=0cd309ee07ab9fd2cd6e60d2da8c4b62e00f2143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:47:2e:3f:9b:0d:7c:e0:86:7b:63:c4:b6:
00:1f:63:22:e7:e6:3d:9e:b3:da:32:81:89:9d:c6:
ac:ed:46:6d:11:ef:c4:88:ea:38:a6:65:46:63:59:
50:c5:a7:cf:a3:70:38:73:d9:8c:80:67:98:23:e3:
4e:bc:2c:a0:a2:15:98:f7:33:c6:15:5b:78:56:eb:
57:e6:55:10:1d:c0:73:e3:e6:35:0c:9e:a8:7c:6f:
ba:0a:3e:53:9a:64:03:f3:99:4d:00:10:ba:92:95:
d2:73:b7:82:e5:78:cb:fc:2e:2f:ac:62:a9:17:4b:
d1:38:69:6b:33:27:48:c5:92:9b:c8:20:b3:f3:d0:
1a:6d:73:35:f5:04:d2:db:11:17:6c:c2:35:86:28:
e2:72:28:4f:1b:d2:91:f4:44:5c:46:a7:56:a1:99:
81:a7:ab:e3:95:8d:f0:36:65:c2:20:41:23:0a:98:
eb:a4:f6:4f:4f:0e:f4:25:03:90:2d:1e:a0:95:cc:
87:01:6d:82:d8:26:be:f9:b5:55:76:70:33:3f:eb:
91:ec:aa:41:4f:aa:c4:85:4c:ef:65:e6:de:c8:68:
f9:06:43:61:54:0c:17:4d:7c:6a:a3:96:32:ea:24:
b3:ca:e6:46:7a:c2:9c:5b:f6:ac:62:05:1d:2a:ba:
ee:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D3:09:EE:07:AB:9F:D2:CD:6E:60:D2:DA:8C:4B:62:E0:0F:21:43
X509v3 Authority Key Identifier:
keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4d:da:8d:ab:47:7a:1a:78:94:27:f8:74:fa:e0:fc:6b:a8:
30:8b:d4:f9:e5:39:aa:d2:c3:f6:4e:41:3d:0e:9b:3e:5a:40:
62:4f:d5:ba:f8:1e:9b:ed:15:6e:85:3f:ed:47:e5:46:e4:44:
22:7c:0d:07:ad:49:f7:74:f2:78:3b:26:4b:9f:ef:61:ed:f0:
8a:1d:b2:81:98:98:e5:86:57:2a:f7:64:8d:2b:3f:c5:0e:77:
02:9e:15:66:d1:20:64:21:bf:20:59:77:fd:5c:56:46:73:8b:
45:65:e6:ee:2a:21:0e:78:c5:e5:d9:85:40:db:95:95:c4:32:
5d:a8:cb:99:ba:f6:18:dd:8f:75:3b:2c:7d:00:50:5f:92:fc:
d8:58:d1:70:d6:ba:03:32:ca:50:ad:30:c1:aa:dd:d9:f6:11:
e4:67:01:64:f7:20:fe:22:68:dd:35:76:b9:0d:dc:5a:1d:d7:
96:aa:34:c0:d7:0d:c6:12:73:13:67:11:66:cf:f5:49:bb:b2:
44:1d:49:5c:3b:32:87:f5:02:ab:f8:8a:cf:fe:5f:84:46:8d:
aa:1a:4d:68:ce:8d:17:d8:36:0f:0c:bf:eb:4e:7e:68:a1:a2:
17:da:69:6e:e4:cc:5e:74:92:e8:f8:8f:c7:85:c4:d1:43:ca:
f3:e9:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:25 2024 by rpki-client on console-fra.rpki-client.org