Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json)
Hash identifier: r4ms3UQqFquV3eKiIenGXLTK0h8lQzGu3CcO8acy/Q4=
Subject key identifier: D7:57:DC:C9:98:BE:2A:59:79:AC:C2:3A:8A:72:4E:FB:02:76:1B:CA
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 01935877A7E22BBC49414A12B9EA8FD95158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
Manifest number: 0DD8
Signing time: Sat 23 Nov 2024 10:00:56 +0000
Manifest this update: Sat 23 Nov 2024 10:00:56 +0000
Manifest next update: Sun 24 Nov 2024 10:00:56 +0000
Files and hashes: 1: MiNEYKSaJ1laCfiwJNbobIXOgpw.roa (hash: JmcsS2pmzh7jsxu5s/hZu7SuGZOPIc9rBVVctD1eh9w=)
2: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: T97ckqe09y3pHQTRz+H6H4QUQI6tBY28aEpgGof3bEM=)
3: t5qpPRU2oLtcBX_Cng5vAqe6F3U.roa (hash: ogMu1OouGOGcTl3DU/k8296zqtq+TRdff5LeSDddyHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:a7:e2:2b:bc:49:41:4a:12:b9:ea:8f:d9:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Nov 23 10:00:56 2024 GMT
Not After : Nov 24 10:00:56 2024 GMT
Subject: CN=d757dcc998be2a5979acc23a8a724efb02761bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:a1:e7:f0:38:cf:30:fa:5f:b0:6d:b5:60:
29:cf:0d:a6:4b:9e:a0:f8:ac:cd:ed:25:26:94:ee:
8a:f4:6e:72:a7:b5:85:1c:2b:49:56:9a:6c:c7:a1:
a9:36:7e:bb:fd:1e:00:d6:19:06:2e:e4:9b:23:38:
0a:d1:27:b6:5a:3b:15:35:5a:e4:f7:22:41:13:07:
ce:37:7e:7e:f0:84:49:b6:06:09:43:11:52:4e:26:
c1:d9:36:ca:ca:1a:8c:ca:f8:b8:4a:dc:ee:7a:a3:
48:69:35:65:c5:8f:1a:e7:4e:66:c2:c8:f6:d8:1a:
f8:86:20:91:ce:d6:8a:92:dd:b3:71:f6:e8:29:d2:
6e:08:36:01:81:16:d8:8d:c1:f0:38:fc:ad:0f:36:
d7:95:5c:59:a0:5d:55:84:e1:9f:f8:a8:5e:fc:da:
2e:e7:70:f7:0a:ce:e5:68:b2:2a:de:6e:e0:e7:d2:
cb:cc:8c:1f:e1:61:38:9b:3d:ad:1d:4d:c0:62:24:
d4:86:fa:cb:e3:d4:f8:01:ee:bc:3a:eb:24:96:54:
d2:db:26:d7:16:4e:95:f8:2b:ce:4e:db:23:e0:47:
1a:33:85:8c:4f:fe:39:de:9c:51:0e:db:b5:11:2f:
d4:9e:76:87:1a:41:a5:4a:70:07:42:28:a5:5a:dd:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:57:DC:C9:98:BE:2A:59:79:AC:C2:3A:8A:72:4E:FB:02:76:1B:CA
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e2:6c:e6:4b:ee:0f:87:f9:b2:dc:7d:d6:6c:34:99:46:fd:
f4:c8:f5:75:c2:f0:69:b6:f9:61:eb:53:50:96:66:69:e4:e0:
6b:47:01:55:eb:01:2e:0a:de:a4:7e:eb:e8:e2:c0:ab:89:e2:
0b:2f:e9:0d:df:28:d8:20:5a:23:5e:33:a2:ec:f6:7b:55:9a:
65:76:3d:82:11:86:69:6b:62:6e:cd:4d:ae:6e:46:30:16:14:
a9:ae:51:21:7f:17:f8:19:2d:1c:83:78:89:ce:ef:16:94:48:
40:69:a5:63:fc:3b:c5:42:f2:8f:8b:8c:58:41:9a:66:fb:04:
ae:b2:e9:16:ce:43:7e:7e:b9:b1:d8:ad:f7:bd:7d:d0:56:6b:
88:d3:89:bd:89:65:0d:bd:f3:a0:af:aa:8b:16:f6:84:2d:91:
ce:1e:11:ef:c0:d6:d5:05:36:23:c5:2a:a8:3d:93:13:94:12:
1a:1b:27:7d:12:05:05:f5:68:00:df:14:b8:36:ec:b1:69:68:
76:23:ab:f2:43:a5:1b:20:ab:d4:81:6d:e4:e2:78:a1:1f:e9:
d8:c1:8a:c5:73:2a:0f:46:42:e5:ff:df:06:82:26:b5:d1:6a:
fa:68:b1:f5:d9:44:c6:e0:f9:30:39:9b:19:a9:e2:25:a7:95:
9c:d0:96:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:18:27 2024 by rpki-client on console-fra.rpki-client.org