Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: uHbDJxTbd1oC0OJIsh3ZeXl+7Whwa+cvzDq8BGoFNWk=
Subject key identifier: 1E:BD:3D:39:D8:F5:AC:8F:93:6E:1D:4A:38:9B:03:A0:13:E8:BF:20
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 0193591C528AA688E25F9D133C252A535A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 13:00:48 +0000
Manifest this update: Sat 23 Nov 2024 13:00:48 +0000
Manifest next update: Sun 24 Nov 2024 13:00:48 +0000
Files and hashes: 1: kXaMYjeLv7tYVBOtkgMXNA98LtA.roa (hash: grI5nyGIFwvIg5Wp1mg9/JEeCVJpTUfBeZ0XtPZYL0k=)
2: qLspSX6pM4Uv6GLUomPIxBsUDy8.roa (hash: KlAlr38tSOfYEFmob/opK86hxvrny93ZMjDWc70C/z0=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: KzVNYul4vijgNNrE4o/LC7QDuCw6YcSmsrzXGTwS3Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1c:52:8a:a6:88:e2:5f:9d:13:3c:25:2a:53:5a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Nov 23 13:00:48 2024 GMT
Not After : Nov 24 13:00:48 2024 GMT
Subject: CN=1ebd3d39d8f5ac8f936e1d4a389b03a013e8bf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:15:06:81:39:86:1d:5c:9d:45:d9:ab:f6:
53:28:dd:2c:7b:fe:fe:de:fe:7f:25:25:74:58:c3:
61:88:af:a2:02:4f:73:f1:1a:61:cb:f2:b2:47:dc:
2a:a6:8c:1b:12:cd:93:f8:ff:68:c8:d6:34:5d:5e:
2d:f0:99:2d:bf:45:30:37:fb:1c:00:b7:b8:ea:26:
bf:f1:63:fd:e4:b7:4a:f5:13:10:f7:8a:d4:38:37:
fd:44:a3:dd:01:16:2b:32:88:8e:69:5a:4c:5e:a6:
6b:9b:ec:a2:ac:46:d6:b8:03:9c:8c:a6:81:85:60:
1d:d2:62:a3:70:be:1a:18:d5:45:93:a5:63:9d:cf:
a0:c4:9d:6b:58:4b:ea:58:98:df:a3:6e:57:39:b6:
9d:e3:9b:35:91:80:d2:a8:02:1f:0c:da:60:09:e7:
48:b0:1e:dc:1e:77:4b:71:92:59:c4:9d:9c:91:82:
2d:af:24:c6:81:4d:fa:39:cc:07:05:d3:a5:11:9c:
ae:3e:88:59:75:82:c9:db:c8:0d:46:1f:ae:08:c3:
4a:c8:4b:b0:07:80:f7:49:54:c6:9b:0c:b2:d8:d4:
af:3e:6d:fa:d2:a5:c4:76:57:f2:7d:25:00:a2:0c:
a6:ed:97:26:64:90:c6:38:f6:20:2d:27:a5:c6:78:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BD:3D:39:D8:F5:AC:8F:93:6E:1D:4A:38:9B:03:A0:13:E8:BF:20
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9e:8a:88:e2:cf:69:c6:cb:02:e9:81:d2:6a:5d:04:70:31:
4f:81:72:bf:1d:ca:3c:54:f8:b8:16:54:8d:82:d0:31:28:4d:
19:9a:8a:06:38:7c:d1:0e:8c:cd:75:48:a3:8d:a5:52:54:f6:
da:91:be:e1:62:c2:a4:05:37:8f:d3:79:53:59:d6:ed:d6:cf:
17:fd:40:37:db:92:01:6d:2d:06:56:45:fc:36:30:22:68:bd:
83:2e:96:95:0f:e5:e5:70:2c:7d:ed:46:30:5e:7d:e4:d6:9a:
60:cf:ce:22:b4:db:52:b2:08:a0:f7:49:fe:d4:f1:50:59:49:
6f:8d:c3:13:57:ba:58:64:e0:69:d0:60:63:67:38:5b:56:9e:
b6:5a:3f:ce:bd:6d:bd:af:11:eb:45:f9:60:41:43:e3:fe:13:
83:61:0b:ea:22:83:2a:74:e0:89:df:a3:1d:67:d1:7d:1c:d1:
2d:82:b9:c9:ac:a8:95:cd:23:58:2c:13:21:de:dc:45:9e:b1:
be:52:20:17:fb:cd:fe:f1:6f:ba:b9:5a:0f:63:32:cb:ea:82:
3e:71:3b:91:4a:e0:01:db:ed:b6:1d:ba:06:19:b9:10:49:30:
c6:3a:7f:26:92:c0:7f:eb:e3:d3:69:93:ed:d8:b4:68:cd:da:
ec:8c:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:27:36 2024 by rpki-client on console-fra.rpki-client.org