Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier: sLZTivPFF+D4zboswg4fTtkhL/y6o5juZhWy9N2pd6w=
Subject key identifier: 95:B5:CB:71:8E:10:07:F8:37:ED:F1:2F:CF:80:97:CD:60:84:52:B2
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 018F9B3D6B057897EAA68E1B3AE508195F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number: 1182
Signing time: Tue 21 May 2024 13:00:44 +0000
Manifest this update: Tue 21 May 2024 13:00:44 +0000
Manifest next update: Wed 22 May 2024 13:00:44 +0000
Files and hashes: 1: XuE6YZYmqLIiYLMvLDqkAxBdl3Y.roa (hash: XUpd1IG5yn8i2pdDNWs6OmFV0qnbE6flR+aTwRHSYlk=)
2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: LeQ9QQZN1nXnAEIoJYqFypWm0+PoTuueHDQm6VyBqng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:3d:6b:05:78:97:ea:a6:8e:1b:3a:e5:08:19:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: May 21 13:00:44 2024 GMT
Not After : May 22 13:00:44 2024 GMT
Subject: CN=95b5cb718e1007f837edf12fcf8097cd608452b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:f3:23:3d:e4:18:7e:cd:22:41:f8:35:56:
3d:e4:20:3b:1a:80:11:7c:d3:06:d0:be:2f:73:cb:
8f:f1:ea:a2:9b:d1:81:f0:fb:09:33:9b:a1:75:1b:
78:85:86:d5:da:de:c3:5f:0a:3d:75:d6:5a:c0:1a:
2d:f0:86:a7:c8:93:27:1e:46:b5:8e:16:ac:13:e0:
01:c8:1a:be:2e:92:21:7b:89:55:52:a9:38:d7:95:
37:66:8d:ee:c5:5b:8b:84:3b:12:42:2d:3c:94:34:
de:6d:64:7e:9b:a7:0b:20:0a:20:5d:f5:ae:0c:e2:
2c:6f:63:76:58:60:89:19:3a:90:2a:38:73:9b:73:
ee:66:13:c7:7b:b8:3e:dc:1b:52:df:17:63:c1:31:
38:eb:1b:5a:98:c4:1b:94:c1:28:d0:d0:a5:08:f0:
c2:ab:7a:48:cd:ed:7a:56:12:51:2b:73:9e:e9:54:
14:b8:bc:d7:17:f3:d4:e1:b5:14:f9:54:17:8a:d0:
5a:c6:fd:27:fc:a4:d8:91:14:94:2a:9d:e0:c3:f7:
d0:67:12:4f:01:d4:f0:04:07:67:b8:2c:dc:c1:db:
f5:70:bb:e7:db:79:c5:07:a7:64:c1:7b:10:8f:c5:
bc:a2:77:ac:68:f1:e6:16:ae:b1:6d:1c:02:48:64:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B5:CB:71:8E:10:07:F8:37:ED:F1:2F:CF:80:97:CD:60:84:52:B2
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:df:b4:b2:4c:67:5d:b3:36:49:1a:1a:a8:bb:d5:55:e5:6e:
fe:8a:5c:f4:e1:1c:2a:31:1d:f0:ea:e0:c1:03:bb:a9:0c:5b:
bc:a1:0e:d6:a0:4c:d4:3a:23:5e:fa:19:02:74:05:a3:55:87:
d6:3f:72:d4:02:3c:dc:f3:95:1c:41:af:0c:6f:3a:dc:dc:92:
cb:16:31:c2:9e:f0:57:de:43:df:9d:81:04:21:56:07:d7:ff:
cd:9b:cd:2d:d1:d4:9e:5f:99:6d:f2:9d:84:88:73:3b:c6:e6:
18:76:29:0f:f9:da:c5:ed:b6:af:d0:ad:c2:cc:ad:c9:d9:2d:
6c:3e:45:d7:12:13:de:ef:bf:77:44:79:8e:90:e4:72:18:a1:
a4:dd:f4:8b:33:1f:4d:e0:c0:87:bc:4f:0b:11:be:ff:60:41:
ce:90:26:6a:a3:a9:b4:d3:2b:23:8f:8e:2d:98:06:01:e5:f6:
0f:2f:46:31:a4:db:77:81:88:da:fd:c7:29:9f:dd:1e:b9:50:
08:67:8c:0d:40:60:08:1d:a8:4c:c7:b2:ad:6a:aa:a7:ad:fb:
2c:84:6c:4b:b1:ec:f1:d2:9f:01:cf:ca:a1:fd:eb:f4:ea:5b:
10:fb:2b:b1:92:3d:8a:64:e1:f1:ca:1f:96:08:c0:aa:0f:f5:
0d:d4:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 15:49:11 2024 by rpki-client on console-fra.rpki-client.org