Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier: 3lWvLR+12Xdt8TozHQGFHdJzbw6f1xtrJFIc5AaBr7o=
Subject key identifier: 0F:84:13:F8:35:01:0C:0A:0B:54:B0:35:CA:17:88:93:11:3C:A4:2B
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial: 0193568AE10ECE12940B5B572ECB4685F0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number: 11E6
Signing time: Sat 23 Nov 2024 01:02:42 +0000
Manifest this update: Sat 23 Nov 2024 01:02:42 +0000
Manifest next update: Sun 24 Nov 2024 01:02:42 +0000
Files and hashes: 1: 06ze7SCNFcsIndHXgrTfZ8YuM04.roa (hash: OZNsdraaGjyRepeJ+8kmnI7qc2bXqL8vlHtQY2+DnAg=)
2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: XCA8mforVP6zLWNgRogCmE+NmV7W5SRJlEVUqwMg1cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:e1:0e:ce:12:94:0b:5b:57:2e:cb:46:85:f0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
Validity
Not Before: Nov 23 01:02:42 2024 GMT
Not After : Nov 24 01:02:42 2024 GMT
Subject: CN=0f8413f835010c0a0b54b035ca178893113ca42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:59:ed:eb:c2:20:f7:28:16:b0:89:8b:6c:
8e:b8:05:dc:e0:7d:da:2f:47:97:50:02:ab:38:29:
8c:bc:ca:30:a0:0f:a4:00:0e:ba:84:9a:5e:7d:57:
15:63:94:23:ca:0f:ec:fd:ac:6b:2f:9b:a0:53:81:
27:b7:cd:f1:ed:e7:5b:f4:c7:99:ae:d8:94:85:e8:
75:8e:0c:f1:39:b1:b0:fe:0e:33:26:1c:52:f6:51:
15:98:6a:90:4a:3a:46:a3:e0:b1:f6:94:2f:96:96:
b5:e8:75:c6:2b:48:b6:a0:09:46:bd:1a:60:16:aa:
12:5e:fd:23:8e:c4:a0:83:1a:c0:d7:dc:2e:4d:4d:
18:26:83:2b:d5:b3:42:79:ab:39:f8:c3:47:e0:ec:
5e:69:af:ee:1a:47:93:7a:ab:18:29:d4:78:ec:6d:
ea:0a:20:32:76:db:4e:62:78:75:c2:02:4b:ee:d3:
85:af:97:d2:28:92:31:c6:7d:4f:38:2f:94:11:de:
07:41:b5:d4:2d:8b:06:1b:8d:17:ad:97:df:e3:86:
34:76:8a:8a:2b:d1:aa:1f:36:3a:7d:89:da:15:48:
a1:07:4f:68:cc:80:0a:6b:8f:b8:b8:bf:5e:03:c4:
9a:f5:67:b6:d5:f5:a1:8b:b6:ea:8f:1d:b5:1b:34:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:84:13:F8:35:01:0C:0A:0B:54:B0:35:CA:17:88:93:11:3C:A4:2B
X509v3 Authority Key Identifier:
keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d3:0c:11:16:2a:24:29:61:1c:72:4b:a0:c6:31:ae:e4:69:
ae:b2:15:85:89:3d:97:9d:6b:81:fb:4e:51:8f:32:a9:c9:d0:
77:d9:d0:43:e7:01:a7:39:ee:c1:07:aa:0e:7e:a2:68:a5:c6:
ab:40:3b:25:7a:cb:73:54:ca:6f:a5:29:cc:66:8f:d7:8c:74:
a4:92:48:d2:e2:92:05:fb:e4:d9:1e:91:07:65:2a:91:b3:7b:
b3:31:ee:37:d7:20:aa:08:58:9c:ee:bf:08:5d:37:d9:d5:a4:
48:2e:fd:f5:92:92:cd:a7:3b:12:93:68:da:85:be:be:60:07:
56:c2:d6:dd:af:19:0e:27:83:f9:71:ec:6e:04:2b:5e:de:ca:
62:f4:aa:16:62:d9:45:fc:f1:fc:0c:33:b4:2d:e1:a1:e2:ef:
5c:60:dc:e3:7e:de:6d:07:82:80:53:f2:84:6a:31:9a:1e:e8:
5c:1c:86:ef:f0:b0:d9:24:40:ec:6e:dd:65:f2:d4:f1:b5:42:
e0:d4:8d:2d:bd:91:63:b6:2b:f7:1a:8f:da:f1:44:04:e8:84:
76:5b:4b:c8:d6:02:d1:3a:96:85:81:7d:d1:c5:9a:0d:b8:f5:
65:9d:02:37:d2:c9:98:87:5d:c0:85:9f:55:a7:58:bd:37:3c:
05:5a:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:49 2024 by rpki-client on console-ams.rpki-client.org