Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: 2W9UOd3XUUmF/jGUhBY/1D8vgIfoGjlASUZ69QpQY4s=
Subject key identifier: 09:C4:78:E4:DB:0B:3C:AA:87:7E:C4:37:ED:29:B4:31:DE:2E:E1:29
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 018F98AC52CF93D96AD454034679DA2D77A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 02B4
Signing time: Tue 21 May 2024 01:03:01 +0000
Manifest this update: Tue 21 May 2024 01:03:01 +0000
Manifest next update: Wed 22 May 2024 01:03:01 +0000
Files and hashes: 1: FdUS9u-lTgveyZznDN5aAyIOeig.roa (hash: YulskbmRiqjdQx3QWSSuvuUIt16BOBZNzKarDQhAw3Q=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: wfmc/UxU3ngRG6bajLPJUFvDoN3EwFgqUCUJFZLHk5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 01:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:98:ac:52:cf:93:d9:6a:d4:54:03:46:79:da:2d:77:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: May 21 01:03:01 2024 GMT
Not After : May 22 01:03:01 2024 GMT
Subject: CN=09c478e4db0b3caa877ec437ed29b431de2ee129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:7b:5a:3a:9c:84:e5:5c:a5:9c:c8:f0:1a:
f9:91:fa:84:39:16:94:db:17:a6:c1:5b:21:d5:45:
89:d8:98:f2:27:2a:b3:a1:83:62:f8:68:6b:3e:27:
43:2e:ab:9c:96:5b:a7:67:72:aa:89:25:97:45:a4:
12:10:f6:21:e1:1a:74:78:6c:82:ba:88:63:ac:c1:
f8:9f:ce:17:f3:27:49:c5:ba:09:91:53:da:6a:b1:
2e:6a:26:cd:d3:9b:23:0b:91:23:70:02:de:e7:2f:
2b:fe:cb:fd:51:9e:9d:e3:19:c8:0a:25:2d:49:84:
2b:dd:54:27:98:81:4b:39:c9:51:6e:bc:6a:e3:50:
ee:97:84:f3:2c:c6:3d:64:70:dd:2a:14:a3:32:17:
00:28:9e:aa:14:90:1a:19:98:28:18:cd:a5:df:0b:
8b:c2:31:55:73:bc:de:d4:9b:ac:a4:cf:a2:ea:4f:
ca:c2:22:5c:3b:2e:f6:e1:fc:74:c0:83:ee:ad:c9:
3f:9f:ed:93:a9:55:20:67:3b:e4:a9:60:88:ed:e8:
58:80:4c:1b:5d:16:e3:d2:ed:f5:d8:af:d0:5b:11:
85:a6:32:52:04:9e:ae:18:72:ab:46:8b:b0:c4:8e:
af:e1:5b:7e:6f:f7:80:37:f8:ac:c8:8d:51:bc:48:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:78:E4:DB:0B:3C:AA:87:7E:C4:37:ED:29:B4:31:DE:2E:E1:29
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f6:14:e4:2f:b7:99:69:7d:97:24:90:1e:1c:e4:f5:c3:36:
81:0a:6f:01:ae:c5:ae:0a:e2:d1:e9:74:54:97:c1:e2:e0:6e:
34:f9:ab:9c:43:37:1c:23:e8:8f:8c:8f:e0:ad:a0:25:fa:d2:
50:9e:dd:44:8a:99:ef:f8:ef:ab:a0:5b:f7:af:7a:fc:b0:d6:
fb:17:c1:b6:b8:f1:75:7d:3d:d4:f3:ae:a1:fe:42:c3:5f:f4:
12:07:dc:8b:d3:57:13:bf:f3:4e:b7:78:f1:74:d2:8f:af:e7:
8a:06:07:29:82:15:f3:70:26:37:45:20:a2:3b:01:92:a7:83:
17:5b:39:53:2c:a7:18:0f:50:4c:c9:f1:1b:48:52:d3:4d:97:
a0:51:0c:4e:94:d8:f3:f3:a8:27:85:e2:61:fe:69:c5:bf:2b:
27:49:f3:03:17:95:8e:26:b8:da:1d:16:ff:01:2d:2f:68:91:
25:9d:69:28:f4:4f:0b:13:5b:9f:d5:76:40:09:36:9d:56:9e:
9e:a7:40:20:63:21:ea:ff:47:94:0f:d5:6a:46:fe:62:8c:9d:
41:78:87:ae:c7:df:fd:bf:1f:26:fe:e6:58:a9:de:99:fc:41:
49:48:a4:57:5b:91:6f:e8:ca:f2:8a:1b:2e:39:23:c0:13:6f:
e4:b8:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:36:42 2024 by rpki-client on console-ams.rpki-client.org