Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: UHOZ+8xdXgx7nM8NGSo/cI1JXqPLqONK8sTBlxBVboQ=
Subject key identifier: 19:72:FE:2E:21:83:C1:B6:41:0B:3D:49:03:DD:0E:89:C2:60:37:4C
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 0192351267125D2FC82DE8A6F498FD9DA834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 03E7
Signing time: Fri 27 Sep 2024 20:00:51 +0000
Manifest this update: Fri 27 Sep 2024 20:00:51 +0000
Manifest next update: Sat 28 Sep 2024 20:00:51 +0000
Files and hashes: 1: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: qJOQj6dnnTDt+EkTGOEI2ap5F+u9dU5DYiJ6tJEsTZ8=)
2: u4NmOINlngn_Ln4e5JT-zZBl4A4.roa (hash: NYNo8BMFnoMBChXiSlGXwgx9GqOnlmE+4PFgVqtwHGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:35:12:67:12:5d:2f:c8:2d:e8:a6:f4:98:fd:9d:a8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Sep 27 20:00:51 2024 GMT
Not After : Sep 28 20:00:51 2024 GMT
Subject: CN=1972fe2e2183c1b6410b3d4903dd0e89c260374c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:b6:fa:40:b1:38:e9:62:14:24:bf:b3:64:
35:7e:20:4e:46:62:11:0b:e9:e7:7b:41:6f:db:41:
95:92:71:67:0b:ca:7d:60:29:1d:a2:0b:b9:77:9f:
4a:17:8b:75:d5:8b:4c:dd:2a:26:b4:20:92:d4:c4:
bc:85:74:70:7a:ba:d2:08:9d:7c:08:4b:b7:5f:88:
74:ee:2a:50:77:0a:7c:72:34:d1:17:b3:aa:80:b6:
88:a3:9b:78:61:af:51:d0:71:bc:5e:51:8f:46:5f:
34:47:9f:28:8a:f8:76:0c:8f:6e:c1:61:6f:7f:b9:
3e:87:2b:59:90:04:57:12:8e:4a:22:aa:5c:4d:df:
36:3f:b8:e5:d6:d7:c9:4b:7b:a4:12:eb:bf:1d:93:
db:34:2d:20:45:c0:41:52:0c:dc:06:9f:dd:d2:56:
d8:a2:5c:3a:79:53:a6:f2:33:60:63:29:1e:94:87:
47:b3:7a:63:68:e9:72:3b:b6:20:9c:c2:6c:97:aa:
b7:cf:63:c8:4f:25:2f:72:ed:3e:7f:57:24:18:3e:
3e:57:27:5b:8c:07:52:7c:22:5d:75:be:d7:50:10:
71:c7:24:e5:7a:7f:2c:47:4e:2c:b2:10:b9:22:86:
e4:99:7d:13:09:c6:bf:62:af:55:a1:33:77:35:b4:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:72:FE:2E:21:83:C1:B6:41:0B:3D:49:03:DD:0E:89:C2:60:37:4C
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f8:d9:d9:e0:0c:c9:49:51:9f:4c:bb:e9:1b:ce:fc:77:d1:
4c:90:e4:35:b8:25:16:3f:3b:25:5b:4d:34:b1:4d:85:79:8f:
e1:f1:5a:bb:d6:8e:51:14:8d:d0:a1:45:3a:d7:69:54:9c:ee:
b8:3d:b1:b0:7f:11:66:33:bf:1b:4a:04:5a:9c:b8:ae:e5:7b:
eb:dd:9f:ec:82:02:f3:7a:59:8c:81:0a:3c:d6:c7:dd:1b:f5:
6d:fb:ce:82:0b:d7:04:73:39:54:54:f0:a8:66:0e:f5:93:91:
ec:96:23:db:43:70:0a:36:98:96:f9:5d:0f:fd:fc:77:ab:a0:
4c:02:45:0f:d9:bd:f7:67:26:1d:8b:fa:b3:14:2e:ab:4a:e4:
10:05:42:49:bb:79:9e:c1:f9:1c:a2:90:d7:e2:76:a1:90:c8:
42:22:83:7a:e6:6d:2a:a3:6e:54:00:03:8d:2d:33:b6:68:37:
3c:3e:c0:b2:be:da:7a:95:b7:0f:9a:92:37:b8:81:d6:e8:72:
6a:48:d7:98:86:3c:f6:58:30:58:a0:30:69:33:2e:cb:07:83:
9f:95:51:80:04:40:4c:05:a6:41:a2:ab:74:e1:9d:83:22:76:
27:d0:76:87:f1:74:23:be:45:10:1d:7b:e9:b2:44:68:32:0e:
58:6d:e3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:14:56 2024 by rpki-client on console-fra.rpki-client.org