Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: WA0W+UF1K0vuOnapP6gpeE9WK9701Vf2pjquX+UJEeE=
Subject key identifier: 5E:DC:F9:27:01:4B:FD:00:C1:C8:77:60:23:4A:07:D1:41:42:14:40
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 019351D07567204AB8E303BF395CCE9B31CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 0E11
Signing time: Fri 22 Nov 2024 03:00:36 +0000
Manifest this update: Fri 22 Nov 2024 03:00:36 +0000
Manifest next update: Sat 23 Nov 2024 03:00:36 +0000
Files and hashes: 1: Rxsp43mqExsYzcrt4Q_XLl9A3gw.roa (hash: TLxEeiMzikH1YkwLsg2gzkImCJ9aaUSjBt4rAxwGzK8=)
2: X4yu8N6fzZRHf29LRRyfASf8aUY.roa (hash: m4ZXig00CTVsHk/nstd/t+YbwGbzVxa/iHuVD4bygSw=)
3: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: xYHT769hwv5+nYaAPNCESzI1AV6D4u/lKzdllLGIrlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:75:67:20:4a:b8:e3:03:bf:39:5c:ce:9b:31:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Nov 22 03:00:36 2024 GMT
Not After : Nov 23 03:00:36 2024 GMT
Subject: CN=5edcf927014bfd00c1c87760234a07d141421440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:e5:90:10:e8:67:be:58:10:90:cb:bd:04:
86:41:aa:9f:1e:9d:64:39:d8:6a:11:e7:78:b6:4a:
70:ca:30:a0:4f:9c:1d:77:16:3b:c1:1b:79:24:22:
17:f0:f6:84:85:4c:82:a2:28:6e:7f:9b:9f:21:59:
1c:a3:5e:d9:d1:75:af:9d:37:78:b6:92:58:8c:23:
2a:f2:c6:62:da:f6:17:dd:a6:6d:e5:1b:b8:47:2a:
18:ed:fc:bc:90:db:93:90:25:f1:24:4b:2b:8c:17:
94:cd:5b:83:09:b7:15:09:5a:79:e1:23:9d:54:10:
41:c9:e7:63:06:fb:ef:36:07:37:d5:11:d3:2f:5f:
46:23:1a:09:48:b7:fc:dd:0e:a1:0b:22:bd:2e:7f:
1d:ae:3e:14:fb:12:c4:e2:df:d9:7d:4f:e4:cc:af:
45:c2:d4:a9:13:50:a3:24:08:c6:37:37:82:08:83:
fd:b6:6a:de:36:31:31:4a:aa:b6:38:a0:59:ba:67:
e3:3d:7a:0e:3e:cd:8b:be:fe:2e:71:f8:5c:66:04:
c6:c6:b7:23:4e:4e:94:3c:78:3a:9f:70:24:b7:ab:
00:bf:c9:f4:da:43:47:fd:37:a7:d4:8f:76:41:2c:
42:01:c9:3c:d5:25:14:22:f5:99:04:bd:77:9c:85:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DC:F9:27:01:4B:FD:00:C1:C8:77:60:23:4A:07:D1:41:42:14:40
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a6:ff:9d:3a:2d:df:74:fe:1d:08:3a:7d:7b:cb:29:ec:82:
08:54:34:30:15:1b:82:8c:2e:ef:49:08:cd:cf:81:f8:3f:0b:
44:37:fc:89:2d:a7:fe:55:26:ca:04:c4:aa:25:96:e0:c5:11:
49:fd:75:17:d2:2e:7f:c2:99:34:fe:08:64:20:ff:06:9f:32:
80:96:50:67:ac:ca:c7:85:03:e4:02:0e:7b:24:63:4b:f1:e4:
22:71:07:8d:82:8c:1c:b1:02:b1:a8:72:0b:c9:76:9e:c5:0d:
cd:57:6f:e4:e7:d9:81:67:c2:36:2b:95:02:e1:25:f4:9a:d6:
9a:67:0e:94:4b:13:ec:35:21:4b:ad:bb:27:87:9b:20:ae:5d:
48:88:55:32:4d:2f:88:41:b7:92:64:03:f5:b5:2e:0c:78:cd:
7f:71:ec:44:cb:7e:29:c4:a9:cb:b0:ee:2f:ff:38:3a:27:af:
10:08:4f:68:61:69:df:71:b1:b3:96:8e:5e:0d:d4:e4:9b:e8:
0f:ff:31:99:f9:99:3b:31:69:b9:ef:f3:f5:1a:1f:f5:08:ce:
0e:57:11:19:f4:c0:79:d6:34:1b:3c:b3:4b:bb:8d:ae:bb:e5:
24:21:5f:75:11:99:27:b1:7e:4b:a5:d9:7a:63:a1:4a:e5:da:
c8:e0:ea:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:38 2024 by rpki-client on console-fra.rpki-client.org