Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
File: yyVzFrhB13Pct5reio8-clnxEqs.mft (raw, json)
Hash identifier: N31htec/AXDX4h3M+oH4Yps+dh3IbvcUJFaTwyBMrDU=
Subject key identifier: C9:0E:C3:C2:BE:09:DF:DC:80:A4:29:51:75:29:23:58:7D:EE:97:47
Authority key identifier: CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
Certificate issuer: /CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Certificate serial: 018F96BB77F4CFAB461FBDFB0D7E5563F14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
Manifest number: 0128
Signing time: Mon 20 May 2024 16:00:19 +0000
Manifest this update: Mon 20 May 2024 16:00:19 +0000
Manifest next update: Tue 21 May 2024 16:00:19 +0000
Files and hashes: 1: tzyKlyRknVzoOtD5Rm3-ypzIAFk.roa (hash: VDe/57UCwA+z4M/nsrgjI1Mugo0q8Jtsrp2Rozd8f1c=)
2: yyVzFrhB13Pct5reio8-clnxEqs.crl (hash: TvrolCHOz6peJSIG5EqLNn5aLhBLnJYxXwu4/XXowZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:96:bb:77:f4:cf:ab:46:1f:bd:fb:0d:7e:55:63:f1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Validity
Not Before: May 20 16:00:19 2024 GMT
Not After : May 21 16:00:19 2024 GMT
Subject: CN=c90ec3c2be09dfdc80a42951752923587dee9747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:08:72:da:6b:74:41:0f:1d:4d:c5:e2:55:
f6:12:f0:f4:9f:d0:ad:ab:01:96:5e:05:7a:64:82:
76:27:96:9f:33:c4:72:45:3b:74:99:3e:af:68:66:
9c:de:87:08:0e:e0:5b:52:b8:dc:c9:9c:f2:05:ac:
1d:21:03:f5:25:ec:11:81:6d:64:32:bc:df:ac:90:
44:e0:4b:43:52:b2:c3:69:ee:d2:27:64:5a:12:a9:
96:19:d6:f7:d2:63:36:38:46:7c:e7:7d:88:a7:da:
21:a4:ee:98:29:56:27:00:88:a3:e8:28:2b:e6:bd:
ef:ee:08:ef:62:54:e0:62:12:b1:c5:83:59:db:6a:
e8:77:6b:b1:54:7b:09:97:6a:92:ca:c5:8f:fe:fd:
07:d0:be:1b:c9:2a:6d:2f:1d:bf:c9:0c:18:2f:71:
7b:b6:6a:d6:23:44:6a:c5:1b:6b:a7:a1:9a:fc:2a:
3e:de:67:8b:a5:9b:be:5d:39:d1:be:28:f7:95:ad:
ac:f9:9e:0b:26:fa:01:b4:66:01:ff:cf:9d:66:5a:
ab:0a:cf:37:5c:ec:1a:24:45:ee:74:e0:75:6c:69:
87:c3:c1:1d:8a:3a:25:6d:a8:ff:b3:dc:8f:0f:ba:
46:3c:15:3a:5a:07:6b:30:75:6d:0b:1d:26:01:58:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0E:C3:C2:BE:09:DF:DC:80:A4:29:51:75:29:23:58:7D:EE:97:47
X509v3 Authority Key Identifier:
keyid:CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2d:61:ec:9c:29:46:8c:80:29:b5:4c:79:c9:82:5b:d3:d9:
43:21:6c:2e:ac:52:e2:2f:35:6f:60:d5:fb:9c:51:5c:d8:74:
20:cc:50:15:a3:4f:da:f2:3a:0a:17:e7:6f:4c:4b:97:a3:b2:
1c:ae:6f:08:64:c3:06:b9:a9:3a:26:f4:ef:e7:4f:0c:f7:ed:
98:1d:e9:8c:7f:7c:0e:e6:d0:10:c0:3f:79:71:fd:98:4e:71:
29:b4:0b:e4:9d:d4:04:7f:5b:61:82:46:20:67:e6:62:85:8c:
81:0f:e3:50:cc:c4:ed:4d:33:f6:e4:35:3d:91:a1:a3:76:21:
87:a0:c7:8b:f2:32:b8:9f:dd:1d:54:f9:91:ce:32:7a:22:cd:
cd:cf:7a:76:7c:1d:d5:1f:4c:fd:55:a1:4b:26:2e:ab:9b:fb:
96:e6:c4:35:5d:c8:d1:7f:c7:d5:93:7c:34:28:1a:4a:81:8c:
dd:4b:65:a7:80:cd:66:ff:da:a5:28:b2:f6:1d:f9:1d:fd:5d:
d7:87:6e:4e:28:b3:a7:6c:88:82:30:81:bf:ac:16:51:99:cd:
94:c4:21:d6:c4:c5:96:d8:15:ab:dd:30:1a:59:7d:d1:8e:97:
7f:47:46:24:c8:fa:3b:93:aa:22:69:2e:5b:43:62:76:fc:62:
e3:aa:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:13:59 2024 by rpki-client on console-ams.rpki-client.org