Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: bBmZmrVWN6onq+CcOxyvgIq2NvSPpi+BlX1fzqQg2c8=
Subject key identifier: 40:8D:8A:29:00:56:C6:27:5A:50:83:C3:CE:93:F0:48:16:9A:44:7B
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 01935274F6000EFF0AB4150DAD3EFCD26179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 02AE
Signing time: Fri 22 Nov 2024 06:00:16 +0000
Manifest this update: Fri 22 Nov 2024 06:00:16 +0000
Manifest next update: Sat 23 Nov 2024 06:00:16 +0000
Files and hashes: 1: k38sCvObWiOo_GcGhGyuOcxAHI0.roa (hash: ErsTl3uLZMSaftsOs40vxGX9NRveO+AlU/TWNHr9X3c=)
2: pbvNlToyhbEyCyynL-ULpUAlGXU.roa (hash: LJVWMceroVr1dKry+f79TV5muY3pUYVFTP7kyP1Pt/k=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: Pig1fXAOP/+7BjgO360XQMbw2WdybNTRfnfPBsxUYOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:74:f6:00:0e:ff:0a:b4:15:0d:ad:3e:fc:d2:61:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Nov 22 06:00:16 2024 GMT
Not After : Nov 23 06:00:16 2024 GMT
Subject: CN=408d8a290056c6275a5083c3ce93f048169a447b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:e3:4f:1f:a3:72:9a:01:f9:4e:42:a4:55:
44:c2:f9:6c:08:ea:0b:62:e5:40:c9:5f:00:1f:a4:
87:cc:f6:b5:b0:bd:bb:9e:47:9b:98:85:05:3a:3d:
a2:0b:21:0a:b6:64:26:db:a7:31:0c:06:ad:a2:18:
b3:34:bb:27:48:28:09:a7:67:73:b9:30:f4:7f:53:
66:89:1e:e8:37:81:07:cb:64:fc:1d:cc:2d:5f:00:
3c:c8:ec:0f:c9:b7:7e:b0:70:ce:31:d8:05:67:56:
49:8b:8b:92:e3:e3:a2:66:2b:94:8d:44:6f:65:d3:
30:0c:35:88:5f:a5:ae:09:6c:7a:a2:24:d5:a2:88:
c0:19:35:69:f4:61:0a:4b:c8:50:be:0b:05:72:5d:
53:95:db:41:13:5d:80:b8:73:37:33:81:de:e8:02:
59:6d:b0:ff:f7:fa:1c:33:46:dd:9e:33:33:e1:93:
c8:7f:64:cc:f8:5d:4b:22:af:12:7d:05:e1:0d:ea:
a9:1a:58:2e:fe:b5:bb:83:96:85:a7:6f:a4:72:20:
81:f6:ac:4e:6c:f9:39:bd:b0:af:9a:37:4a:b8:31:
5b:93:82:dd:ce:0b:7a:5b:54:4d:f6:b4:7f:31:2d:
3a:ea:e6:f2:a0:c0:67:a4:0b:cc:56:c5:42:45:cc:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8D:8A:29:00:56:C6:27:5A:50:83:C3:CE:93:F0:48:16:9A:44:7B
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:af:4a:12:9c:40:20:12:c8:c4:f1:7a:fe:d7:47:21:0f:5f:
12:d7:05:4a:38:d7:2c:95:95:31:1c:38:d3:10:86:15:69:98:
ac:4a:4c:80:26:f3:21:05:5f:ba:44:ff:02:f1:8a:2b:b4:d0:
a9:37:f5:38:fb:2d:28:52:e2:b4:c7:13:4f:c0:f0:10:54:fb:
fa:02:de:5e:d3:ed:85:87:9a:12:86:91:cb:cd:94:cf:f7:d4:
2b:a5:90:1f:66:85:9a:08:e7:3e:78:d8:5b:c6:5c:c0:93:5c:
dc:13:47:80:c9:98:38:e9:3b:54:5f:2e:51:f4:f6:4e:0c:28:
a4:69:13:da:e2:c9:9b:6b:17:68:9c:4b:4b:a4:eb:a1:38:d4:
ff:8d:fc:d1:56:37:8e:43:af:07:56:45:a0:42:0a:97:49:81:
2f:5d:96:bf:8d:01:b1:5d:9d:5f:96:2a:d3:6f:68:76:ae:26:
95:a1:e3:0d:a4:f4:b9:f7:93:b3:16:8e:0f:06:d1:c9:a6:56:
00:13:84:f1:ef:f9:8e:be:40:88:f7:78:3f:30:ce:73:91:37:
3f:0c:c4:a7:0d:ee:a5:25:7e:99:fc:da:0b:a0:5e:2d:69:83:
f9:79:94:7b:59:b8:52:c2:23:16:39:5b:75:fa:11:e2:55:99:
b9:a4:25:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:12:55 2024 by rpki-client on console-ams.rpki-client.org