Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: aO2r1oeRC/EpEWASh3Us1jauAeXN7Gf8argp7+spLKg=
Subject key identifier: 62:D2:77:2A:CA:E8:5A:D5:B4:C3:62:8D:BB:67:30:F0:BF:60:4E:38
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 019364B268ECD09C76A10F8C48D0608C6433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 1379
Signing time: Mon 25 Nov 2024 19:00:33 +0000
Manifest this update: Mon 25 Nov 2024 19:00:33 +0000
Manifest next update: Tue 26 Nov 2024 19:00:33 +0000
Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: v4H0Ye0wH+4Hk+Af3ZMSymzYdbOxA3VlTChnI7Pb4ZI=)
2: dlHaUCpB-B7G9y1FtZiCgUHTo3A.roa (hash: 0VvQSaG5xHvrKFZU1CxJ/ADNxLJUQN6QpsFOu5dGejI=)
3: iY-8NCJKA0Ki5rekGtjq9ddZEBY.roa (hash: 85S0R0vmySYtyyLfEk/Pfu8mZhTEtCcg37Mc+kUVOB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:b2:68:ec:d0:9c:76:a1:0f:8c:48:d0:60:8c:64:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Nov 25 19:00:33 2024 GMT
Not After : Nov 26 19:00:33 2024 GMT
Subject: CN=62d2772acae85ad5b4c3628dbb6730f0bf604e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:94:9f:09:08:cf:47:1b:71:e4:60:5e:05:
cd:98:89:0c:13:9f:4a:e7:70:19:c9:af:22:09:c7:
42:47:20:29:e0:6f:41:18:34:9f:a8:ad:b1:e1:81:
49:6e:4d:62:43:61:6c:8d:d9:9a:b6:33:91:90:59:
15:d9:2d:c6:59:14:9f:56:20:6f:4c:4e:24:3b:88:
67:e7:af:f2:84:4e:d9:82:6e:24:06:2e:df:4d:2d:
c0:66:20:02:71:3a:17:c0:16:48:60:71:22:1a:42:
78:46:44:5f:fe:2e:ff:bb:0d:d9:dd:ea:71:f5:19:
fc:8b:c2:67:cd:ce:64:94:33:b0:4e:c8:8b:3f:c7:
ae:0c:40:6d:af:7d:ab:af:85:81:e7:70:10:f8:f3:
04:a5:e3:52:30:29:e9:5c:72:0b:76:b7:17:33:17:
7c:ec:34:c0:e5:9f:ef:c4:9f:6e:a7:e6:c6:14:eb:
e4:13:2b:e8:e8:93:fc:39:06:fe:c3:ff:6f:a3:20:
a7:8f:e3:81:21:f3:18:93:6a:11:ef:9a:7c:e2:14:
af:1d:2e:b8:a5:9b:b4:9e:46:61:61:95:25:d1:76:
6e:a3:64:d8:48:26:11:95:7d:3e:e3:1a:44:90:3f:
c1:ba:d3:ee:e8:27:93:cf:4a:22:f2:cb:76:44:cb:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D2:77:2A:CA:E8:5A:D5:B4:C3:62:8D:BB:67:30:F0:BF:60:4E:38
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1a:8a:6b:7c:45:a5:81:16:b8:c9:20:57:2a:5f:97:a6:b0:
0e:1f:c1:7d:72:85:58:a0:db:ae:36:71:b4:cb:e4:c8:1e:50:
93:b2:e7:31:41:1f:0b:d1:18:02:42:91:5b:69:b7:d3:53:07:
b9:0a:ad:6e:b2:41:e0:5e:8c:e9:d1:b3:38:d4:94:54:f5:df:
3c:06:b6:a4:56:15:0d:f8:d5:d7:3d:a1:d2:d4:4b:10:62:02:
b0:2f:4a:d0:c6:38:4c:80:05:2e:24:73:ac:2a:5b:34:43:b8:
4e:ba:bf:d6:a3:59:30:5e:73:c3:29:23:70:5a:d0:9c:4c:96:
a7:d8:41:b6:df:21:81:28:76:b5:8f:70:4c:bb:ba:7a:7b:a5:
08:1d:0d:8b:d2:11:d6:8b:7f:d5:b5:82:fd:fc:62:1c:48:65:
d7:c4:9b:31:c5:1d:32:c4:ed:c7:bc:15:82:c9:e3:c6:9a:94:
a2:40:02:c2:87:56:cc:81:d9:64:2b:dc:c1:9c:bf:2d:8a:ca:
d1:71:ce:d4:7e:70:c8:2f:f2:1e:f0:6d:ab:48:98:05:25:45:
3e:22:ed:56:34:f7:49:bd:54:ea:c3:f7:c8:dd:eb:ea:03:3e:
05:a7:58:99:f2:6d:3b:00:68:d8:87:80:8f:8d:8e:fa:b0:8f:
71:c7:3e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:16 2024 by rpki-client on console-fra.rpki-client.org