Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.mft
File: yz65T8gixYUUKHlA6NzdwEGw41k.mft (raw, json)
Hash identifier: tDKdoAjPToCltWCu6eP9kfUElQHftpiHtEmG8snNed4=
Subject key identifier: E2:00:70:BF:04:DC:FB:68:49:C7:F4:81:12:AA:9E:C9:53:7B:AE:0E
Authority key identifier: CB:3E:B9:4F:C8:22:C5:85:14:28:79:40:E8:DC:DD:C0:41:B0:E3:59
Certificate issuer: /CN=cb3eb94fc822c58514287940e8dcddc041b0e359
Certificate serial: 018F9428B6C87CFF02364497B1A4CE20CB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yz65T8gixYUUKHlA6NzdwEGw41k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.mft
Manifest number: 0BA7
Signing time: Mon 20 May 2024 04:00:47 +0000
Manifest this update: Mon 20 May 2024 04:00:47 +0000
Manifest next update: Tue 21 May 2024 04:00:47 +0000
Files and hashes: 1: yz65T8gixYUUKHlA6NzdwEGw41k.crl (hash: Qx/FX3MdYJHb6g9lwcjeI1BLaInpLd22wLgqIcZZbG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yz65T8gixYUUKHlA6NzdwEGw41k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:28:b6:c8:7c:ff:02:36:44:97:b1:a4:ce:20:cb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb3eb94fc822c58514287940e8dcddc041b0e359
Validity
Not Before: May 20 04:00:47 2024 GMT
Not After : May 21 04:00:47 2024 GMT
Subject: CN=e20070bf04dcfb6849c7f48112aa9ec9537bae0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:1b:6e:9d:15:0f:0b:ad:a7:1f:e4:37:56:
a0:15:07:aa:5f:28:ac:14:d7:24:1a:8a:c4:23:33:
b5:10:d6:ad:c5:a8:c9:02:70:3b:bb:5f:43:76:a0:
d5:93:b7:ac:8f:d7:47:8d:ac:e9:cf:b7:1a:59:fd:
8f:a0:70:eb:77:35:27:d7:86:b4:5f:55:ef:3f:d4:
75:4c:ad:79:ae:c0:51:a7:9c:f7:0a:e7:f5:19:9d:
fd:fc:93:52:80:56:e5:94:58:ab:45:31:89:28:54:
15:96:f7:9f:b1:cf:eb:42:b6:9b:57:76:9e:79:30:
db:e9:30:5b:5d:a9:d6:22:9f:e1:19:29:fb:22:11:
76:39:98:08:27:23:c2:a8:94:b1:38:d7:26:52:d3:
00:31:26:d0:c7:3c:3a:7c:9a:85:76:b3:52:f6:51:
58:f3:d9:a0:5c:4b:89:50:ce:6e:72:5a:c8:24:4d:
8a:26:da:95:a3:70:23:4e:db:30:a9:05:c8:2c:4e:
36:37:12:4b:c3:d7:05:44:e4:aa:54:cc:28:27:25:
cf:0f:a1:7e:45:14:56:e7:9e:98:8a:26:33:0d:5a:
cb:66:25:3b:82:0c:17:c1:02:2f:ad:22:49:63:b6:
e1:f7:eb:af:05:ea:7d:c2:43:6e:b0:31:7c:1e:9c:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:00:70:BF:04:DC:FB:68:49:C7:F4:81:12:AA:9E:C9:53:7B:AE:0E
X509v3 Authority Key Identifier:
keyid:CB:3E:B9:4F:C8:22:C5:85:14:28:79:40:E8:DC:DD:C0:41:B0:E3:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yz65T8gixYUUKHlA6NzdwEGw41k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8ea881-dce2-4066-8508-12c349e39d9a/1/yz65T8gixYUUKHlA6NzdwEGw41k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:90:12:fd:34:f9:41:f8:c4:c0:af:4b:88:ae:c3:e5:e3:ef:
60:38:ce:56:94:4c:a4:c2:d5:80:68:db:48:1d:2f:70:29:22:
5f:87:a0:7b:1b:77:0e:4a:db:82:4f:8e:34:ff:88:52:a1:b9:
af:4b:7c:c5:f5:d9:b5:eb:17:4d:a4:c1:1a:cc:2e:f1:8a:87:
d2:aa:29:e8:0f:9e:5f:b8:46:21:18:6c:ab:47:ad:8d:81:e7:
f6:d4:a9:a9:bd:e6:20:07:6e:06:83:f3:2e:c7:2f:2e:d9:2a:
9c:e1:fd:84:d9:f3:cd:8d:b8:7a:23:c8:c2:ce:b2:1d:d0:0d:
0f:0a:97:8e:ab:0d:f5:ad:47:d1:17:ce:99:9a:08:d4:01:0c:
2c:4e:ff:37:33:63:76:f4:88:e3:d3:95:7b:d6:ab:39:36:f1:
9e:e5:d4:e4:63:d8:02:71:72:30:f3:82:2a:c3:1d:cf:0b:fa:
56:bc:44:d9:fd:0b:21:a8:e3:87:0a:ee:fb:e8:7e:2b:92:ad:
39:e6:48:78:17:e6:93:02:a8:05:55:aa:40:ea:1f:aa:c5:25:
cb:4b:e7:66:fa:c4:f3:e5:74:5d:a9:4e:96:ad:4a:0d:c1:8b:
8d:79:3e:ec:5f:fe:86:66:2c:fc:9b:e5:12:74:2e:19:18:ff:
c5:88:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 05:21:01 2024 by rpki-client on console-fra.rpki-client.org