Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File: Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier: vwgQK/aMZCQKgk9E+p16/xx0yhYMR/QDWSeY9fM4SBg=
Subject key identifier: 2B:9D:4A:42:A8:43:5C:44:C2:B6:63:AD:BA:8C:C1:E0:E6:7C:87:59
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial: 01936AEBAFB2B30EC63E805761C36E22C76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number: 137B
Signing time: Wed 27 Nov 2024 00:00:50 +0000
Manifest this update: Wed 27 Nov 2024 00:00:50 +0000
Manifest next update: Thu 28 Nov 2024 00:00:50 +0000
Files and hashes: 1: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: kR3YoiOrb7koQmA9JfFxsFgXhHr4OdTXFR2YWzSwkqU=)
2: bMeOR0h3i3Seg-HvC3T2pglXsqY.roa (hash: hXhpU2Yt2TGN6MC/EQyLtdcesAZ1TeDrMLfUPE6rF3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:eb:af:b2:b3:0e:c6:3e:80:57:61:c3:6e:22:c7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
Validity
Not Before: Nov 27 00:00:50 2024 GMT
Not After : Nov 28 00:00:50 2024 GMT
Subject: CN=2b9d4a42a8435c44c2b663adba8cc1e0e67c8759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:30:5e:b6:a1:8b:b4:e1:81:68:a3:82:36:56:
79:7f:be:73:24:dd:ca:fd:c4:94:04:31:36:f9:a6:
57:75:91:ec:d6:af:78:91:54:dd:6c:02:cb:70:9d:
fc:62:20:79:2c:55:71:8b:fa:1a:2c:fe:51:d2:dd:
0a:27:3c:21:1c:f6:cb:78:39:51:c5:10:e0:5a:13:
20:74:5e:36:63:af:6d:54:54:f0:5f:c5:28:53:ba:
9f:7c:da:d1:a8:b7:a9:4b:2d:57:d5:4e:47:91:7b:
5a:40:59:15:ae:6c:5e:84:94:4d:f8:87:93:78:2c:
41:d2:88:16:d0:32:ce:07:5a:6c:39:ec:d8:71:e9:
77:15:20:8c:73:21:23:82:e8:33:11:d6:f0:65:6f:
0c:82:20:72:a3:2e:19:40:5f:ad:12:4a:c8:a0:26:
8c:48:cd:25:b3:b2:1b:8c:df:27:aa:ed:4e:9b:f9:
60:64:c7:27:38:1b:a3:c9:14:e2:74:df:75:8c:7a:
32:0a:73:df:76:6e:b1:d9:95:38:a6:76:65:70:28:
fe:11:24:47:d0:0c:86:b7:20:6b:cd:57:ac:fd:16:
70:77:97:fa:19:4b:1a:9d:03:39:af:f9:bd:39:77:
d8:0f:9a:cf:93:de:14:54:c5:84:7b:1b:51:da:88:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9D:4A:42:A8:43:5C:44:C2:B6:63:AD:BA:8C:C1:E0:E6:7C:87:59
X509v3 Authority Key Identifier:
keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:91:9b:a0:8c:6e:f6:85:d2:85:d3:92:60:67:68:7a:1f:30:
d1:a5:99:3f:71:e1:47:51:21:91:95:18:9d:6e:74:73:f1:69:
d4:7f:33:88:15:77:f5:1a:c6:d5:42:0b:21:8a:32:9f:36:68:
c3:c9:10:c0:a0:c4:26:b9:88:4f:90:08:97:b7:b1:94:0d:c8:
ae:29:67:ba:df:c5:df:99:18:fd:34:84:78:9d:21:9c:9a:bf:
38:6f:c0:30:8d:19:d7:92:ea:fe:af:f8:4a:f9:38:a8:83:19:
f0:d3:2c:f4:b6:0b:09:4d:78:35:d0:7c:4e:c4:bc:c4:06:11:
29:9f:ce:74:85:ff:b3:da:d7:15:1a:7a:39:c0:2b:b9:3a:06:
55:20:8e:cb:fd:ea:7e:89:2b:89:a3:33:8f:20:dc:29:2a:f9:
43:7d:a2:f6:25:c8:0c:b2:f7:c0:29:ea:c5:5a:29:8e:46:00:
80:82:cd:9d:3d:91:aa:cf:c7:33:0b:60:c1:ac:9f:12:4a:34:
a8:93:6c:bc:46:fe:94:dc:b7:95:ee:60:8a:d1:74:ca:29:7b:
7c:ff:5e:eb:17:9b:4f:ca:00:da:51:37:55:b3:0b:80:87:e1:
48:60:f5:44:a9:a1:fa:a6:d7:70:7a:72:4b:78:0b:b1:cc:68:
8c:a0:c7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:34:21 2024 by rpki-client on console-ams.rpki-client.org