Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
File: Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft (raw, json)
Hash identifier: JY8ddCpdrOSldqiFEg+RQRmN1nDVY9RhfKDdjG9MRWM=
Subject key identifier: B6:8D:3F:C4:44:58:05:3B:1C:40:7B:B9:E4:B7:75:5F:84:A4:01:14
Authority key identifier: 63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
Certificate issuer: /CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Certificate serial: 018F8749D2083AD959603967D73E1D408870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
Manifest number: 1176
Signing time: Fri 17 May 2024 16:01:53 +0000
Manifest this update: Fri 17 May 2024 16:01:53 +0000
Manifest next update: Sat 18 May 2024 16:01:53 +0000
Files and hashes: 1: 6EZkMG2ttg2ylYDdEUEFbJH39n4.roa (hash: X0U6j0mLLxjrFNhuHOdWK35++RiTs0B6ljCEUiOxP48=)
2: Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl (hash: CClz9F7l2g61BmdI19k42vLonNZPGpHTRCuKYT66g8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:d2:08:3a:d9:59:60:39:67:d7:3e:1d:40:88:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b498b77ad99cd36e876f0e2fed6998192bc612
Validity
Not Before: May 17 16:01:53 2024 GMT
Not After : May 18 16:01:53 2024 GMT
Subject: CN=b68d3fc44458053b1c407bb9e4b7755f84a40114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:81:2f:60:1b:b8:ac:65:d6:ea:e0:e2:27:d8:
fa:d3:5a:dd:da:42:81:df:53:78:7c:c2:33:1b:d9:
48:3f:5c:63:95:2d:d6:52:38:c0:79:e6:48:63:b3:
71:82:72:0f:7b:17:77:e1:e1:53:94:d9:8f:de:4f:
5c:af:20:51:1c:24:c3:94:fd:74:26:3f:fe:0e:7c:
d5:80:ba:03:4c:4c:d9:37:0d:9e:1b:5a:53:6c:75:
41:db:b6:a4:c0:c1:f5:96:78:8f:0c:38:f1:f3:4b:
37:ff:0b:88:a8:1c:3b:f6:23:3a:0f:fc:37:65:b8:
8e:a6:19:db:63:9c:f6:59:14:57:a3:ae:b2:a5:0c:
2c:4e:50:ae:33:03:1a:0c:2a:aa:41:a1:32:99:93:
d4:7c:e9:58:00:d2:4b:47:fc:0a:2c:b7:75:70:b6:
2e:c9:83:39:4f:ce:d2:f6:4a:22:2c:5e:e9:81:43:
24:a9:8d:6e:7c:21:c2:53:3f:94:6a:eb:a4:de:bd:
19:ba:7e:0e:7d:66:8d:08:1b:01:6f:f4:6a:e9:4e:
78:62:1d:b6:9d:d1:d1:47:ab:ab:91:91:07:0b:15:
a5:18:11:bb:b9:06:54:39:0d:d4:19:db:6d:46:f2:
30:be:e2:30:3a:79:05:0d:a0:06:9d:b0:d3:ff:4c:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8D:3F:C4:44:58:05:3B:1C:40:7B:B9:E4:B7:75:5F:84:A4:01:14
X509v3 Authority Key Identifier:
keyid:63:B4:98:B7:7A:D9:9C:D3:6E:87:6F:0E:2F:ED:69:98:19:2B:C6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7SYt3rZnNNuh28OL-1pmBkrxhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3b49d4-d92e-4fb6-ab7b-97dcda3a3ca5/1/Y7SYt3rZnNNuh28OL-1pmBkrxhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8a:33:59:92:b0:1a:7c:e3:46:a3:dc:6b:17:b9:75:0c:da:
ee:cb:00:10:35:ba:39:5f:d1:67:2e:37:e8:26:5a:3f:86:a3:
71:a9:70:30:0f:91:17:e9:a8:ca:31:76:e1:17:09:11:9a:ee:
84:a8:ac:76:aa:c5:42:70:8a:2d:b2:3c:11:f6:4e:68:f6:e5:
ec:35:23:a8:de:0e:48:cc:f7:8b:fe:ca:04:7a:be:9c:1a:f3:
ca:7f:c7:90:31:96:03:28:47:2f:23:54:45:46:ab:d5:c6:39:
77:e3:a7:ef:70:6f:b7:a9:02:45:c8:12:dd:8a:b8:23:bc:ea:
fd:2b:87:89:b2:6a:5f:91:60:d4:e7:0c:0f:48:e8:82:d4:a3:
2f:be:9e:f5:5c:f9:fc:25:c1:af:65:62:8e:6e:b3:cc:fe:eb:
9b:6d:0d:4a:40:47:be:cc:9c:00:25:8a:4d:36:74:97:f3:64:
de:c0:10:bb:7f:27:8e:95:7f:15:75:39:c3:bb:4c:c1:e1:31:
e2:1a:b7:54:7f:e9:55:44:d0:0a:4c:05:ec:51:61:44:18:e3:
a5:9a:31:c3:7b:44:a4:50:00:08:bb:93:c2:9e:9b:0e:3f:15:
a3:f7:e0:c1:b6:23:ee:62:d8:6a:c0:0d:45:4b:fb:0d:b5:e5:
eb:8b:11:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:24:29 2024 by rpki-client on console-fra.rpki-client.org