Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier: Q1KgHQqrntjapmIKmkUe0+8SnVVycXF0edgrwb9lwM4=
Subject key identifier: A1:15:1E:5F:AD:24:05:DD:60:1C:C2:78:BA:3F:4F:88:69:4F:02:AC
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 0193553F66A71468C8215C83F55F5185C1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 19:00:38 +0000
Manifest this update: Fri 22 Nov 2024 19:00:38 +0000
Manifest next update: Sat 23 Nov 2024 19:00:38 +0000
Files and hashes: 1: XuE6YZYmqLIiYLMvLDqkAxBdl3Y.roa (hash: XUpd1IG5yn8i2pdDNWs6OmFV0qnbE6flR+aTwRHSYlk=)
2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: SvG1vYbKX8g3xWgAqVW6fULYy0RXC+OiFD1KjE8b4pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:66:a7:14:68:c8:21:5c:83:f5:5f:51:85:c1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: Nov 22 19:00:38 2024 GMT
Not After : Nov 23 19:00:38 2024 GMT
Subject: CN=a1151e5fad2405dd601cc278ba3f4f88694f02ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:92:62:cd:87:f1:42:42:a7:93:03:e2:76:
d0:8c:de:97:bc:5a:89:03:45:2e:92:94:77:23:28:
c3:5c:43:d0:6b:ba:52:8b:1c:e1:4b:ce:88:f3:13:
f4:0a:dc:c0:97:2a:3e:02:d9:22:6c:fc:8d:74:92:
82:ac:22:76:9a:c0:6f:f9:68:1d:67:53:39:0e:78:
7f:bc:b9:96:e1:ad:9d:9b:36:e9:94:93:45:4c:a4:
14:c9:a5:cb:0f:f7:6f:c8:c6:95:0f:6a:61:eb:a0:
ae:d1:66:5e:b1:0b:69:f3:28:ec:98:3c:5e:54:7e:
07:6b:94:c2:39:7f:54:f3:08:9f:8b:d1:d4:88:81:
c9:d4:1a:07:16:d2:95:a6:a7:e6:9c:f7:6a:01:34:
64:93:37:5f:69:29:0f:d6:ce:52:18:6b:a6:b0:bf:
c1:92:ea:6e:04:69:37:00:d1:ba:2d:25:75:1d:75:
f5:84:77:13:b7:67:fa:0b:d1:29:53:a1:3d:da:e0:
fa:5b:ff:b8:60:d3:7c:29:9e:1a:3c:30:d6:2d:79:
21:06:46:4e:0c:df:50:08:d7:69:75:8d:62:66:8b:
c9:d9:8e:c9:b5:08:a8:79:d9:5f:c1:76:03:bc:24:
78:e5:13:62:d0:9f:6f:e7:7e:b4:6e:6b:87:61:21:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:15:1E:5F:AD:24:05:DD:60:1C:C2:78:BA:3F:4F:88:69:4F:02:AC
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:da:18:45:71:ce:b7:6a:ab:3a:16:ba:67:1d:79:cc:90:2b:
47:2f:3c:7a:bf:5a:1c:f8:d6:87:43:e5:0d:ce:ea:f0:12:9c:
86:bb:cf:eb:85:77:0a:08:aa:33:94:0f:54:ac:39:50:2d:66:
9e:a6:2f:5a:25:04:0f:54:49:c0:ae:0c:11:c4:e5:52:18:e1:
96:9b:ac:b0:76:cd:0e:6c:3a:5a:24:72:fa:3c:b7:33:58:1f:
ed:bc:7e:33:b6:80:e0:e6:53:ca:47:3a:36:ab:02:fe:2c:9f:
aa:92:ef:a6:cc:6b:26:4c:06:94:08:34:89:5e:26:14:5e:33:
b5:15:dc:7a:87:32:7c:f4:a4:29:46:39:e5:2f:bf:31:f3:ea:
42:17:de:46:86:4b:a7:a1:c1:86:8a:9c:09:75:a5:b4:ed:b1:
49:30:58:3a:20:f9:f2:08:ae:4d:96:60:b7:c4:44:e6:be:38:
61:da:0d:18:aa:d0:a7:37:c2:a0:df:e7:ee:59:7c:71:cd:ef:
89:02:92:63:f3:bb:32:02:12:8c:30:cd:ec:5a:f2:ee:ad:cf:
4a:f3:20:cb:be:5e:4b:3c:36:42:a1:2f:cb:15:c9:80:0c:3a:
cd:61:36:08:16:e7:a2:9a:f3:5e:5c:ba:0f:0a:3c:47:9f:20:
4e:4b:c7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:43 2024 by rpki-client on console-fra.rpki-client.org