Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
File: yPanLDQ-dkd2JEov8RJx_rIu3_k.mft (raw, json)
Hash identifier: rc3Th0QUxZOIrPN/26dhFhAS3hjpBFVtvqx4keTBnPU=
Subject key identifier: F0:3C:C0:21:FA:8F:B2:3C:79:73:9E:3B:13:DA:0C:DE:5B:52:B3:93
Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9
Certificate serial: 01936C6C3D076E91030060C8872C31ED3A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
Manifest number: 0386
Signing time: Wed 27 Nov 2024 07:00:53 +0000
Manifest this update: Wed 27 Nov 2024 07:00:53 +0000
Manifest next update: Thu 28 Nov 2024 07:00:53 +0000
Files and hashes: 1: yPanLDQ-dkd2JEov8RJx_rIu3_k.crl (hash: UqCfMN5xg7Qdue3pLDwbhPG7RouIwszzZJrv3QGTRO8=)
2: yfIQIEY5e0z3kGiSsCEdSwbnJb0.roa (hash: iurUwQ0NdKkCLKrKwiD5EPdX2eAsm71cth7fx47wsME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:6c:3d:07:6e:91:03:00:60:c8:87:2c:31:ed:3a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9
Validity
Not Before: Nov 27 07:00:53 2024 GMT
Not After : Nov 28 07:00:53 2024 GMT
Subject: CN=f03cc021fa8fb23c79739e3b13da0cde5b52b393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a0:22:d8:4a:05:8f:ea:67:45:46:13:36:62:
bc:da:66:51:9c:98:0b:11:6c:db:ac:4e:ef:61:d0:
8f:70:b7:d7:83:2b:88:13:82:c5:a2:30:63:2f:bc:
fe:8c:6e:62:09:a7:6d:78:64:e9:b3:fc:05:4c:60:
13:45:b5:ad:55:b0:03:a8:c6:3e:02:76:08:a2:01:
a3:0c:c8:c6:2a:6e:73:05:08:10:83:42:3a:d5:4c:
72:f7:b6:ea:19:de:71:8a:6f:5e:d1:40:40:d8:59:
0e:5b:51:44:66:87:53:33:39:73:f0:76:f9:46:54:
86:aa:cf:5d:1c:b7:00:c7:a7:e2:a1:cc:fb:48:1f:
d1:ff:f9:64:e8:a6:a3:57:0f:a5:c5:c3:f5:95:2a:
a0:bf:18:5d:35:ce:d4:22:2d:e4:48:25:69:a1:8c:
d0:60:f8:f1:a5:bb:59:3b:a3:09:9f:45:cc:58:f4:
86:bc:35:df:8a:cd:f0:79:2c:2b:38:8e:ee:1f:4f:
4b:1e:97:2c:52:6e:95:8f:d3:a5:4e:5c:b0:ec:56:
bd:a9:df:f5:a0:1c:c7:c7:dd:48:aa:12:e1:95:39:
30:e3:b7:1d:7e:79:a9:f6:32:d8:09:35:6b:f3:db:
a9:05:06:3c:59:7c:15:30:a0:95:aa:42:10:32:06:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3C:C0:21:FA:8F:B2:3C:79:73:9E:3B:13:DA:0C:DE:5B:52:B3:93
X509v3 Authority Key Identifier:
keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e6:ac:a9:64:c1:4a:54:a2:31:8e:7e:97:87:e1:8f:b2:2e:
f2:85:e1:97:84:47:df:31:9d:df:18:4b:c6:1c:a3:bd:bb:d7:
c0:38:51:49:40:39:23:24:c7:06:d4:bf:b7:bd:a0:cb:73:8a:
0a:ee:a4:90:5f:0d:aa:e7:f1:57:4c:e0:e3:cb:90:88:7b:32:
b6:84:07:3f:68:e7:0d:0b:94:c3:87:ca:8c:32:d9:09:34:7e:
1c:47:c5:b5:27:4b:fb:02:d7:d5:bf:0e:ac:01:39:9a:7f:db:
ef:ce:6d:f2:34:38:00:a4:35:32:58:a1:8f:ad:05:6e:40:af:
62:20:29:45:c7:25:02:9a:6d:cb:c5:bb:fd:a9:9d:37:05:a7:
21:0d:79:42:86:04:6c:b6:bb:c4:ad:d5:62:bf:32:00:e2:ad:
44:5c:99:a1:ac:d8:ac:d5:17:39:a6:46:e5:07:93:85:28:43:
87:69:96:f3:34:ea:65:79:2a:83:42:e1:49:d4:d4:b1:b4:29:
51:55:09:18:f7:8d:19:d9:b7:48:30:2c:ae:af:b2:5f:a9:98:
4a:31:89:38:a3:ad:57:2a:7f:9a:7b:a8:6b:e9:64:0e:ea:c4:
40:9f:13:eb:fb:77:c9:76:95:93:99:22:33:1b:42:3f:a1:4e:
38:da:1e:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNsbD0HbpEDAGDIhywx7TooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjZhNzJjMzQzZTc2NDc3NjI0NGEyZmYxMTI3MWZlYjIy
ZWRmZjkwHhcNMjQxMTI3MDcwMDUzWhcNMjQxMTI4MDcwMDUzWjAzMTEwLwYDVQQD
EyhmMDNjYzAyMWZhOGZiMjNjNzk3MzllM2IxM2RhMGNkZTViNTJiMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KAi2EoFj+pnRUYTNmK82mZRnJgL
EWzbrE7vYdCPcLfXgyuIE4LFojBjL7z+jG5iCadteGTps/wFTGATRbWtVbADqMY+
AnYIogGjDMjGKm5zBQgQg0I61Uxy97bqGd5xim9e0UBA2FkOW1FEZodTMzlz8Hb5
RlSGqs9dHLcAx6fiocz7SB/R//lk6KajVw+lxcP1lSqgvxhdNc7UIi3kSCVpoYzQ
YPjxpbtZO6MJn0XMWPSGvDXfis3weSwrOI7uH09LHpcsUm6Vj9OlTlyw7Fa9qd/1
oBzHx91IqhLhlTkw47cdfnmp9jLYCTVr89upBQY8WXwVMKCVqkIQMgb1VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA8wCH6j7I8eXOeOxPaDN5bUrOTMB8GA1UdIwQY
MBaAFMj2pyw0PnZHdiRKL/EScf6yLt/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mMzBiNTQtMjRmNy00MDE5LTkxY2It
YWRhNmU2NDMwN2M5LzEveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9mMzBiNTQtMjRmNy00MDE5LTkxY2ItYWRhNmU2NDMwN2M5
LzEveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuasqWTB
SlSiMY5+l4fhj7Iu8oXhl4RH3zGd3xhLxhyjvbvXwDhRSUA5IyTHBtS/t72gy3OK
Cu6kkF8NqufxV0zg48uQiHsytoQHP2jnDQuUw4fKjDLZCTR+HEfFtSdL+wLX1b8O
rAE5mn/b785t8jQ4AKQ1Mlihj60FbkCvYiApRcclAppty8W7/amdNwWnIQ15QoYE
bLa7xK3VYr8yAOKtRFyZoazYrNUXOaZG5QeThShDh2mW8zTqZXkqg0LhSdTUsbQp
UVUJGPeNGdm3SDAsrq+yX6mYSjGJOKOtVyp/mnuoa+lkDurEQJ8T6/t3yXaVk5ki
MxtCP6FOONoeHw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 12:04:58 2024 by rpki-client on console-ams.rpki-client.org