Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: dFF/miWp18HL+qhLXpKoBHnliOkLI+hMz696EQyfVIA=
Subject key identifier: 1A:CA:5D:6C:B4:C7:E8:B6:A1:1B:BF:FE:FF:E0:F2:DD:72:01:FF:B0
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 0193512BF44F14BCEF2F7D585FA1584FC9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 10BC
Signing time: Fri 22 Nov 2024 00:00:55 +0000
Manifest this update: Fri 22 Nov 2024 00:00:55 +0000
Manifest next update: Sat 23 Nov 2024 00:00:55 +0000
Files and hashes: 1: 2VcrzTDFc4YQRvBAgwl-d4zGSwU.roa (hash: AscayusFIQTmwsfbFnL1o9gqepFZI/tbbMuQ72C4Q6o=)
2: L9sXF2HXav_I5OgFCiumVXHeWvc.roa (hash: W76ZEL1VuxZDvZvNA/iGcL8WNrLs4wLN5CvrY1eSfCQ=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: fT4UDYSVnsWJLC0k7xNUXSbT6iW6okKDHRkt5bSBqxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:f4:4f:14:bc:ef:2f:7d:58:5f:a1:58:4f:c9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Nov 22 00:00:55 2024 GMT
Not After : Nov 23 00:00:55 2024 GMT
Subject: CN=1aca5d6cb4c7e8b6a11bbffeffe0f2dd7201ffb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:35:44:38:bf:9f:36:b4:e7:f3:60:30:6e:
f0:c8:9a:b8:fc:0a:e6:64:9d:a4:72:3d:ab:5c:21:
1d:71:c5:98:f6:dc:7d:50:1b:8d:36:ad:3c:b2:17:
7d:56:a0:41:0f:91:af:60:b7:67:96:a9:02:13:e4:
a9:c0:ac:03:4f:ea:fd:55:46:ca:43:27:4c:41:98:
cb:7e:bf:7e:89:e4:a4:d7:e6:e6:6f:8c:fd:1d:12:
ec:cc:9e:43:5d:63:e9:61:9f:dd:70:ea:b5:56:22:
6c:15:34:05:6a:e3:89:2d:8f:a9:94:ee:29:2b:5d:
36:80:8f:04:e5:4b:4f:79:a8:58:77:1f:e9:fb:8f:
ab:ed:01:92:77:76:7d:e3:80:1e:13:94:b0:50:cd:
50:83:60:92:33:f0:1f:8b:03:7f:24:de:f7:66:a2:
d3:01:1f:6d:49:6b:4d:a5:3e:57:b9:48:e5:d1:23:
a0:ed:c0:a7:64:61:7c:43:74:69:26:66:94:6f:9c:
42:2f:d2:5e:ff:08:44:ba:cd:ce:33:f6:b7:54:53:
d5:6b:d0:e7:f6:ef:b7:3a:8b:5b:4b:2d:db:77:66:
cc:a7:3c:fe:00:71:f9:e5:d4:de:6a:b0:f3:00:26:
ad:6d:7a:92:e8:dd:53:4b:b2:76:13:f2:4e:c9:82:
1d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CA:5D:6C:B4:C7:E8:B6:A1:1B:BF:FE:FF:E0:F2:DD:72:01:FF:B0
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2f:47:c5:27:0b:76:90:08:ca:50:7c:29:4d:f9:39:71:1f:
26:6c:ad:a4:02:81:5e:91:93:97:96:6c:bb:82:1c:50:f9:56:
44:31:fd:a2:99:0f:94:d2:0e:78:de:db:c5:2f:c8:98:84:50:
8d:01:f2:be:83:e9:b0:ac:88:17:88:a2:e9:c9:72:06:fc:ca:
49:58:ca:69:21:47:77:5c:ca:6c:af:91:f3:a4:80:c0:fb:55:
50:49:15:ac:1f:e3:61:e5:c6:5d:1b:44:07:5f:cb:df:1d:54:
1b:9d:8a:c4:64:5e:89:cb:1b:3c:05:21:e1:c8:fc:f1:a1:53:
0c:b3:aa:a7:df:b5:d3:ab:2a:ce:86:26:82:7b:cd:04:cb:90:
1f:53:dc:fb:51:23:70:00:40:d4:7a:84:66:f2:13:43:f1:c4:
65:4f:e2:99:6e:0a:4d:48:ed:54:46:66:44:bc:86:12:3a:07:
fc:69:24:8f:ba:b3:cf:70:65:a2:cc:48:40:d5:ac:18:f9:a5:
56:df:d4:83:1a:8d:1c:06:74:93:ca:1f:31:2b:4a:9a:2c:b1:
41:aa:32:88:a7:c0:ea:7d:4b:ae:67:75:91:fa:7f:a3:da:0d:
58:f1:79:7d:47:ff:94:5c:2f:f9:63:24:f9:94:22:ee:8c:d5:
4d:c5:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:50 2024 by rpki-client on console-fra.rpki-client.org