Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: 7Fc3iaA6WuwCSt5ar0t6W5ZQVtUFfHqPqafaWFRbFAs=
Subject key identifier: B0:59:E0:91:DA:A6:E1:3C:46:0D:36:F6:27:C4:28:67:EA:B7:42:EC
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 018F87ED8FA634D9FE328878ADDBE26110EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 1179
Signing time: Fri 17 May 2024 19:00:43 +0000
Manifest this update: Fri 17 May 2024 19:00:43 +0000
Manifest next update: Sat 18 May 2024 19:00:43 +0000
Files and hashes: 1: kXaMYjeLv7tYVBOtkgMXNA98LtA.roa (hash: grI5nyGIFwvIg5Wp1mg9/JEeCVJpTUfBeZ0XtPZYL0k=)
2: qLspSX6pM4Uv6GLUomPIxBsUDy8.roa (hash: KlAlr38tSOfYEFmob/opK86hxvrny93ZMjDWc70C/z0=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: jrKbuwy1zZV5zWCjLaCF3j69c7a0d0Abngnc33DaYGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:8f:a6:34:d9:fe:32:88:78:ad:db:e2:61:10:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: May 17 19:00:43 2024 GMT
Not After : May 18 19:00:43 2024 GMT
Subject: CN=b059e091daa6e13c460d36f627c42867eab742ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:6a:5f:2b:84:b9:07:c0:2b:ec:4b:b7:f2:
96:f6:29:f7:d8:81:82:c0:56:a5:22:f4:fa:ac:1a:
c9:78:85:4e:f7:19:25:3f:b0:87:43:6a:d8:86:a7:
91:b5:68:1a:d0:10:40:ca:1d:33:84:83:3b:37:ff:
e0:b3:d6:04:88:d5:0b:b4:39:47:a8:9d:0c:14:fa:
46:ad:25:26:a3:3d:d1:99:60:87:25:9c:1c:03:39:
7b:23:d7:6e:0f:54:ab:ca:b2:72:d7:79:0f:ca:6b:
1b:96:bc:d8:4f:a7:93:1a:74:a2:fd:19:c9:23:ed:
e5:21:16:99:95:ed:f0:83:32:4f:bc:1d:7d:d9:f8:
5a:0a:ea:d1:e7:87:fe:21:0c:34:e7:34:27:f2:93:
2c:ca:3d:02:a1:87:84:8a:8b:6e:7c:9c:4e:54:a3:
9d:82:c1:d6:3c:21:0f:67:aa:30:5a:d8:45:bb:2b:
f2:fb:3e:0f:39:bb:be:47:90:1e:8e:c6:ca:e0:24:
1e:cf:2a:e9:76:7c:75:b6:4e:75:8a:e6:6b:36:47:
20:bb:0e:4c:9d:03:4c:6a:5b:39:cb:8d:2c:4a:92:
d6:86:8a:1b:67:6a:37:25:86:44:18:3c:a4:85:ec:
7e:d2:af:09:4f:57:fe:ea:5c:3a:2a:62:6a:c2:5d:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:59:E0:91:DA:A6:E1:3C:46:0D:36:F6:27:C4:28:67:EA:B7:42:EC
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f1:ec:1e:a9:b3:58:d2:30:ff:e4:91:87:a1:92:77:d6:1f:
73:52:b4:c7:4d:34:9a:17:83:27:0c:7d:26:7c:96:5c:50:df:
40:8c:f5:c4:bc:60:79:2d:aa:a3:de:81:3f:37:77:e3:bd:27:
c4:fb:fe:ca:fb:79:78:a2:81:c8:cb:a5:3a:7c:2a:2c:8f:cb:
be:2e:db:36:c4:56:a3:9b:fc:92:d1:69:4e:3d:69:9c:87:37:
dc:92:40:0a:4a:45:84:13:39:d3:72:18:11:3c:6a:43:78:e5:
16:bc:88:bf:76:a0:0b:00:c0:cc:83:43:fe:29:e8:f2:a6:43:
37:1f:b7:00:c9:f7:a4:0f:1b:07:b2:54:4d:e1:2f:3b:77:06:
93:91:9d:f4:af:3e:06:e2:b1:e0:fc:70:bc:d2:c4:5b:9b:8b:
17:09:8a:ba:4f:f8:52:9e:df:4f:a0:ff:76:c2:d8:a1:c8:16:
ca:fd:69:69:44:e1:70:af:04:26:1c:4b:65:b9:38:1c:3d:64:
89:8c:90:19:49:dd:5f:21:f6:03:70:30:fe:d5:8a:84:a3:d2:
3c:97:0c:e3:10:a2:1a:7d:db:83:56:2c:6d:07:01:f1:3f:7e:
50:75:70:d9:b2:24:c8:07:01:9d:34:48:bd:4e:ea:1c:fc:50:
3d:e7:9a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:02 2024 by rpki-client on console-fra.rpki-client.org