Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.mft
File: y_b4rqvrMWfRGS1ihIDH4r_Zckg.mft (raw, json)
Hash identifier: rIymPn9rZvUsGvN6G/rAWXWbZCMmJO6ZU8v1KUBD/A0=
Subject key identifier: A1:14:75:98:C0:B4:25:DA:EE:62:F0:A3:83:0C:CC:F0:42:AB:5C:0D
Authority key identifier: CB:F6:F8:AE:AB:EB:31:67:D1:19:2D:62:84:80:C7:E2:BF:D9:72:48
Certificate issuer: /CN=cbf6f8aeabeb3167d1192d628480c7e2bfd97248
Certificate serial: 01935764608BFBEE05C7CA1701152BE97046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_b4rqvrMWfRGS1ihIDH4r_Zckg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 05:00:16 +0000
Manifest this update: Sat 23 Nov 2024 05:00:16 +0000
Manifest next update: Sun 24 Nov 2024 05:00:16 +0000
Files and hashes: 1: jgL9i6k6hUTzexxKi9nSwm4QtOQ.roa (hash: vihQJGIfXAFdhrwbbg3f4EsLUrkCRO5GYA3+ibJDENA=)
2: y_b4rqvrMWfRGS1ihIDH4r_Zckg.crl (hash: Wnx+TtQLsdKxbMRpKGBSjhg9HYw78Bry9n45ddAtjsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_b4rqvrMWfRGS1ihIDH4r_Zckg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:60:8b:fb:ee:05:c7:ca:17:01:15:2b:e9:70:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf6f8aeabeb3167d1192d628480c7e2bfd97248
Validity
Not Before: Nov 23 05:00:16 2024 GMT
Not After : Nov 24 05:00:16 2024 GMT
Subject: CN=a1147598c0b425daee62f0a3830cccf042ab5c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:b3:2a:58:9c:75:e2:ed:f6:bc:e3:17:b2:
ea:40:14:3e:2b:e9:41:a8:9c:8b:7f:ba:7e:43:67:
e7:63:31:83:ab:1c:6f:60:7e:f6:dc:d8:55:90:a5:
df:f9:e8:81:86:7f:62:42:34:54:3d:67:ad:d2:83:
63:30:6f:24:e9:f1:2a:b0:89:08:92:58:fb:92:11:
df:0e:5a:0b:49:a9:74:af:cf:e6:99:d4:92:ff:71:
fc:97:a7:28:0c:9e:34:c4:fb:dc:4a:26:1c:ab:c4:
cc:63:0b:b2:cb:c8:f1:c3:32:e4:ca:56:8b:d2:95:
22:2f:c4:b0:42:96:de:12:d4:c3:1a:28:98:fb:5b:
f3:39:1d:ee:e1:f6:42:e7:f9:20:f4:e2:cc:9c:7c:
a8:a2:f0:db:f9:78:af:b2:f8:49:80:e2:3a:f3:59:
1c:e2:31:f2:84:84:0d:ac:34:18:91:36:33:66:69:
4b:56:ae:0d:84:f8:55:a8:a5:47:c8:57:4c:82:80:
72:5a:08:25:22:ca:2e:cc:7f:8e:58:75:ac:2c:9d:
b7:a3:9a:5e:07:b7:3c:91:94:e1:7e:a3:79:9f:d7:
68:1d:5b:8f:72:f4:70:21:32:44:b4:fa:50:ca:a0:
f2:42:a7:8b:08:38:2d:bc:ab:5c:5c:26:df:4b:5c:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:14:75:98:C0:B4:25:DA:EE:62:F0:A3:83:0C:CC:F0:42:AB:5C:0D
X509v3 Authority Key Identifier:
keyid:CB:F6:F8:AE:AB:EB:31:67:D1:19:2D:62:84:80:C7:E2:BF:D9:72:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_b4rqvrMWfRGS1ihIDH4r_Zckg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cb:d7:76:93:b3:26:60:b5:a8:66:d9:8d:21:5a:aa:be:f9:
51:94:d1:7c:19:cd:67:65:fa:57:e9:42:6f:8b:6d:94:a5:7b:
b6:7d:2a:3b:4e:36:97:c6:5b:7b:06:6e:27:9e:4c:86:4e:df:
68:c8:63:17:04:4c:93:32:63:b4:e6:c1:0a:a6:8f:87:dc:bd:
e5:ce:70:d5:19:a4:60:87:3e:c3:59:b0:7d:e2:43:83:d7:f6:
38:f5:99:32:0c:b1:9a:88:5d:e0:fa:9e:02:63:3f:7f:20:8f:
7d:fc:3b:e9:db:04:21:2a:95:1c:8e:2f:e5:9b:89:3c:bc:4c:
6d:10:97:20:da:31:a9:c0:d2:02:76:7b:05:c8:00:61:d8:37:
9c:25:19:9a:a7:15:21:ab:33:eb:33:bd:1c:a6:57:f1:a2:65:
8c:8f:47:db:2c:fa:a2:74:ef:3b:b2:83:c6:fc:3d:4e:a1:8d:
e0:f1:ee:17:d6:77:b1:67:f7:2e:32:e0:aa:c8:49:08:fe:ff:
01:ef:e4:53:c4:68:4e:9d:50:f3:3d:07:a3:5f:5c:1c:8a:6d:
01:a5:bd:39:c4:24:51:b9:33:50:a2:95:d1:d4:d4:7f:c2:2c:
d0:60:4f:0c:b5:41:c6:80:2a:69:a6:63:bf:0b:0b:ec:a1:b9:
be:72:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:16:55 2024 by rpki-client on console-ams.rpki-client.org