Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: PXHw+Madhwxco+HjPIDO6kbTVyjQ8JEdfzbrqcSj1Xg=
Subject key identifier: 37:5C:DE:DD:1E:EF:A9:20:4A:B5:38:33:07:28:4B:76:90:4F:10:53
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 0193568A5C0FEB8135DBB07EF40A6E42D507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 0572
Signing time: Sat 23 Nov 2024 01:02:08 +0000
Manifest this update: Sat 23 Nov 2024 01:02:08 +0000
Manifest next update: Sun 24 Nov 2024 01:02:08 +0000
Files and hashes: 1: BqS1vbMcWf2Pe3LIEEjZmnSi8Dg.roa (hash: /VEm6e9WBmMxLfWQ8YWG7PpX8ytUI3aPcNZX+KIK4vI=)
2: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: L6C4upSp+vI/fxKeG0TkcAmgmCE1FIBsGf9nvrudEVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:5c:0f:eb:81:35:db:b0:7e:f4:0a:6e:42:d5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Nov 23 01:02:08 2024 GMT
Not After : Nov 24 01:02:08 2024 GMT
Subject: CN=375cdedd1eefa9204ab5383307284b76904f1053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:94:51:c2:27:75:02:12:16:63:ea:0b:10:
10:95:86:c9:18:a9:9c:c2:9d:ce:79:25:4f:64:40:
9e:6c:8d:d4:fd:a1:0f:32:a6:8b:b2:3c:e8:aa:76:
79:cb:25:7a:f0:28:c4:6e:37:b9:f4:c5:32:8d:ca:
cf:0a:03:86:02:cb:04:f6:ac:35:96:f7:00:67:4d:
7b:7d:04:1a:2b:19:c8:ee:a1:64:30:95:27:9c:40:
b8:ea:27:0f:31:2b:04:2c:f9:e0:f4:46:9a:a1:d3:
6e:c1:ca:68:4c:06:5a:59:2b:b7:c7:ac:d3:6b:33:
a2:bc:e2:84:c8:04:67:61:6d:f8:72:05:0d:0d:31:
33:fc:b6:81:82:8e:fb:01:70:90:86:bc:23:3d:91:
92:d7:56:93:0b:ac:1f:dc:a0:94:6e:6a:b6:d0:bb:
de:29:e6:22:29:cb:31:c2:1e:53:ad:ea:40:2e:ed:
b6:8c:78:67:37:21:da:29:ef:d0:d8:a9:d7:c2:a4:
c4:cb:6f:8a:c8:b3:e5:94:84:27:95:fc:3c:40:52:
ae:6b:58:22:fe:3c:78:24:3b:60:85:00:8a:ce:e2:
21:72:f4:77:13:2e:bb:71:fb:d4:08:ee:1f:5a:3e:
fb:a7:ad:26:07:52:6f:15:f5:80:20:4b:e6:c8:7d:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:DE:DD:1E:EF:A9:20:4A:B5:38:33:07:28:4B:76:90:4F:10:53
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:65:cd:49:fa:ac:0d:ce:e2:a0:bd:63:7f:71:19:9f:dc:d7:
4e:49:1d:31:35:5a:cb:64:d6:ca:b8:c7:97:02:62:f8:dc:15:
37:52:f0:9c:e0:ac:04:8d:03:1d:a8:5f:ee:a5:80:01:af:9a:
9e:6f:71:c0:b5:87:ff:bc:93:5b:2e:aa:11:e7:cc:67:84:88:
aa:cd:57:76:cb:c4:0a:35:28:7f:99:85:a7:3e:5b:d5:5c:87:
e8:d2:13:92:2b:4f:18:c2:61:3a:a3:f0:38:ba:c7:13:bd:fe:
86:a9:9e:97:bd:e4:e0:5c:9a:9b:08:00:b5:40:c2:6e:01:4e:
42:b6:86:3c:ab:81:3c:77:88:e0:9a:3e:3d:ce:17:93:46:3d:
ed:9c:de:87:1e:0a:9f:d3:e8:4f:3b:06:52:50:45:d8:fc:67:
2c:59:49:b8:31:a3:13:cc:23:88:55:99:fa:88:59:44:c2:ee:
c6:5a:aa:50:9a:c6:5d:22:a2:68:5d:d3:f2:b7:36:f8:60:01:
c5:51:c7:f8:24:96:c9:d5:a6:60:59:cb:fe:95:41:1e:a9:9c:
95:f3:71:4a:b1:51:75:eb:2e:e8:b0:80:ef:67:1b:52:4c:e0:
d7:06:32:8b:a3:84:47:64:19:66:8d:5c:d7:cb:d9:09:00:e1:
b8:21:bd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:37 2024 by rpki-client on console-ams.rpki-client.org