Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: LvTh+TlQPRtwvgOhOZK3ETVhj8QcrglzryXRJfSpHIk=
Subject key identifier: 5C:D4:AA:21:80:6B:6C:CD:4A:A9:D7:24:06:E0:24:D1:B9:08:85:D4
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 018F874A38F710CF1833419C45F44214BE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 066A
Signing time: Fri 17 May 2024 16:02:19 +0000
Manifest this update: Fri 17 May 2024 16:02:19 +0000
Manifest next update: Sat 18 May 2024 16:02:19 +0000
Files and hashes: 1: rEpVUvNQUQQ6nmjJVbPW58MME5g.roa (hash: M6BaQNIAanpUOptS3Q+ktfa3mD7zIuHVgnmCKakEISY=)
2: v-w4rbxmsxYucRnfnG08F0IoZwg.roa (hash: 17vyuuIMnwKrO7E2bELDQrivDYUtEAejdFI6S8ZdNno=)
3: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: LERxqiWvB/UlYOLM6EZ+zYjzeG+Pcl+MMNRooOlKEnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:38:f7:10:cf:18:33:41:9c:45:f4:42:14:be:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: May 17 16:02:19 2024 GMT
Not After : May 18 16:02:19 2024 GMT
Subject: CN=5cd4aa21806b6ccd4aa9d72406e024d1b90885d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:fa:4d:c0:f1:04:e4:ac:d9:32:fe:33:7c:
c6:c5:b4:fe:75:22:a3:76:7e:07:a1:b3:24:1a:f4:
4a:4c:97:0f:65:60:11:3e:99:80:52:52:1c:28:24:
46:e6:ac:37:20:0f:8c:6d:63:91:97:04:55:8f:ea:
ac:94:75:3d:61:b2:91:13:53:6d:67:dd:75:31:67:
48:c3:05:cf:b4:f1:46:0c:23:c4:be:f9:cd:66:90:
78:d9:04:19:6d:49:23:9d:d7:24:8d:36:3b:b7:7a:
40:c9:5a:30:a9:e7:4e:32:05:ec:88:1a:4a:0a:32:
63:d2:bb:5e:4c:f5:a5:c5:65:e3:46:2c:17:20:a6:
29:91:a5:4b:58:7b:a4:1d:ec:15:7d:3c:a3:4c:18:
9d:bf:8d:83:39:b2:c1:15:35:49:48:2e:44:32:07:
6b:1f:33:b2:d6:e7:0b:7d:78:c7:d4:4a:ac:26:ae:
b8:29:d6:8d:02:7e:e6:70:58:f0:e5:65:33:d2:d4:
c8:a7:92:4f:6d:29:33:55:83:8b:15:32:c7:0b:d3:
8a:a0:74:68:c4:e0:88:47:87:bd:48:c2:83:c5:ad:
72:81:ae:31:d4:e5:f5:52:eb:95:3e:84:f9:ca:47:
09:1a:50:d6:6a:07:8b:fb:a3:ab:e6:8b:17:83:6f:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D4:AA:21:80:6B:6C:CD:4A:A9:D7:24:06:E0:24:D1:B9:08:85:D4
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0f:78:49:c3:36:8c:c7:43:e3:3e:86:9f:38:e8:c6:a0:dd:
3d:37:f7:bd:c1:a9:63:59:fa:24:0e:ae:12:2b:fb:91:cf:6c:
eb:03:93:d1:c3:cf:6b:9e:be:37:14:8e:4a:b1:c6:cb:00:6e:
d4:ff:67:82:8f:8a:92:4a:de:59:13:79:c0:cd:ae:e0:8f:8d:
01:c6:f9:7c:72:b1:df:55:6c:9c:b7:97:08:ae:72:91:36:75:
1e:e1:66:49:b4:d5:09:f0:16:4a:b7:26:55:13:79:47:bd:1f:
a4:db:8a:8c:7e:b0:f6:96:c4:03:51:5d:46:ca:c1:76:ec:ce:
07:15:ca:23:46:db:96:d7:07:98:59:6f:00:ff:8e:02:fa:14:
d6:68:09:af:9a:8c:aa:a7:15:e0:1f:91:2a:65:6a:8e:dc:a0:
2e:3e:aa:f1:e3:61:8d:29:b7:34:b8:7d:5c:2c:93:1f:f5:36:
99:cb:23:be:95:cd:4c:60:85:53:34:d7:3e:a7:12:eb:a1:66:
61:d5:d9:24:33:91:e2:ea:fb:b4:80:dc:a2:63:41:6d:3d:4e:
c9:ed:50:7c:d4:aa:d8:d7:8d:b6:74:01:dc:80:a1:32:1f:f4:
27:43:69:bc:79:a0:56:9e:11:fd:9f:83:5b:58:d2:b4:77:76:
1e:aa:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:13 2024 by rpki-client on console-fra.rpki-client.org