Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: /UYARcBDgSRZQENnAMWMozPnYQDaRUVHxzbxaRqxqgU=
Subject key identifier: 5D:0A:A7:2E:C5:A1:EC:A7:B0:8C:55:A0:F5:75:32:76:33:BB:34:FB
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 0193640DCA674A2B65CAFA47949AE7E2E4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 130A
Signing time: Mon 25 Nov 2024 16:00:45 +0000
Manifest this update: Mon 25 Nov 2024 16:00:45 +0000
Manifest next update: Tue 26 Nov 2024 16:00:45 +0000
Files and hashes: 1: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: 0c+j2Qwwpg4Cy4vdKFvOZOFMVp+HhmaOB42lGq8VWH4=)
2: zpHBXy6xl0YQdWyNWtrMvoJxoKE.roa (hash: jXnvrp/Fl43QltJLNJZAo7NZC16d4wbMx8lcAKplpI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:0d:ca:67:4a:2b:65:ca:fa:47:94:9a:e7:e2:e4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Nov 25 16:00:45 2024 GMT
Not After : Nov 26 16:00:45 2024 GMT
Subject: CN=5d0aa72ec5a1eca7b08c55a0f575327633bb34fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:42:eb:0d:2a:89:80:b8:d1:28:77:71:f4:fc:
5c:0a:08:f1:45:a5:47:a5:4f:c7:26:21:7a:60:0f:
92:00:57:47:79:61:20:ef:f5:4e:3d:39:57:9f:61:
b0:d9:a5:6f:ef:e4:14:61:e6:4d:33:cf:a4:83:33:
fd:ca:76:14:3e:24:d7:aa:4f:92:88:46:8f:27:91:
0a:a1:a4:55:87:33:61:27:8d:1a:0f:24:2c:99:d1:
5b:b0:2e:8f:14:55:8c:7d:c6:ac:cc:8b:5a:8c:f2:
18:8f:77:71:56:55:bb:ab:b9:72:59:59:9d:a1:03:
2a:55:02:e4:a4:38:f3:9f:e1:98:5f:12:4e:c5:15:
d0:94:bd:75:55:7e:98:ec:87:33:28:8c:db:42:ee:
dc:07:72:77:d1:b2:8d:21:93:fa:37:d6:fc:b3:de:
07:0f:84:38:67:7c:b1:86:c2:91:0d:fe:13:3b:2a:
7d:4e:ad:e0:95:13:38:19:d5:4a:3c:24:f9:1a:91:
31:12:0e:55:ae:94:f4:ce:90:78:cf:dc:97:38:5b:
d7:75:a3:13:a1:3b:b5:c7:4f:88:bd:b7:36:e1:e2:
5e:40:72:f4:fa:c8:f5:88:48:55:f0:b9:5f:36:e2:
8b:fc:2b:65:da:e9:47:d8:70:98:bf:99:ea:c9:d3:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0A:A7:2E:C5:A1:EC:A7:B0:8C:55:A0:F5:75:32:76:33:BB:34:FB
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f8:cf:56:3e:31:c2:2a:38:d5:32:30:2f:09:48:e7:0a:81:
7e:77:eb:3e:58:12:1b:5f:00:3a:d4:50:34:a4:84:f1:d5:30:
d3:5a:1c:91:cc:db:23:a7:71:50:92:61:a3:62:e7:bf:40:a3:
1b:64:4a:4c:bc:38:6b:fc:b8:b3:03:62:4f:10:5c:7d:52:22:
23:03:e7:7c:04:85:1c:28:47:6b:b0:bd:82:59:6e:6b:b6:db:
f4:64:c8:56:6a:2d:7e:e7:c7:85:16:71:b5:25:58:7f:3a:5d:
a2:e5:5c:93:9b:9f:8b:55:b9:e2:45:69:6d:65:f2:be:35:88:
37:40:c2:3a:43:b1:df:5e:50:cd:48:5c:e0:a0:8f:7f:9f:f4:
20:c0:1e:fd:31:35:cb:53:35:3a:4f:fc:f1:f7:45:49:05:c9:
1e:cb:4b:4e:e2:ef:f6:a7:43:48:d0:5e:f6:98:25:d4:3c:f9:
78:b8:a9:8a:cb:7d:e8:3a:eb:87:8d:c4:c9:66:21:a4:de:43:
7a:22:38:e9:fa:a6:68:3f:d9:57:58:1a:21:66:63:5d:ac:37:
90:e8:33:4a:ab:f9:11:ff:fb:63:36:fb:b0:e7:a7:f6:d8:9d:
0a:32:27:2a:08:ab:91:28:9f:19:a3:92:b1:83:93:94:1b:2d:
40:01:c3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:49:18 2024 by rpki-client on console-ams.rpki-client.org