Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: 6bbV0cyhCTKB38/yJcYamvHm1nqIddJR+NzxMLs6vDA=
Subject key identifier: 52:56:B7:08:D7:E7:B1:8A:61:FB:6C:27:01:78:0C:27:1F:25:8B:EC
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019356BFAD15174DAFAA8ABFBE7A92EED70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0BA4
Signing time: Sat 23 Nov 2024 02:00:22 +0000
Manifest this update: Sat 23 Nov 2024 02:00:22 +0000
Manifest next update: Sun 24 Nov 2024 02:00:22 +0000
Files and hashes: 1: czfYwrfqk2I1Sm6DC_sxW4yz5vs.roa (hash: pBjgze/S4gEyU+sLAz8KqTF5Mc7kcxKjMOCe7jpXlF8=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: Vx2LgW7iEKJYfVXH3N5XdEdRyZxNtbh69tpMy9lbrSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:ad:15:17:4d:af:aa:8a:bf:be:7a:92:ee:d7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Nov 23 02:00:22 2024 GMT
Not After : Nov 24 02:00:22 2024 GMT
Subject: CN=5256b708d7e7b18a61fb6c2701780c271f258bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:c9:0b:b2:f4:aa:98:21:1b:42:95:3d:ab:
84:b6:90:36:86:89:9e:0c:43:c4:c9:21:8b:cc:27:
1c:cd:25:c2:b2:69:b3:bb:59:cc:e5:a5:8a:b1:42:
0e:af:48:5f:77:26:30:be:31:9b:e5:90:09:5b:42:
ff:0a:48:20:b0:2f:91:42:e4:c8:3d:ef:83:47:80:
26:bd:b5:93:2f:44:ef:f5:a0:9c:69:49:e8:d5:f2:
63:53:d5:5e:81:9e:0b:57:1c:d8:9d:f8:48:04:73:
70:b0:d3:2e:3a:04:5a:b9:21:7f:98:2a:41:37:e8:
50:18:0f:39:4e:66:49:59:40:33:2e:aa:1f:70:17:
ca:bb:b5:09:b4:59:bf:b2:df:da:7e:60:c1:33:26:
f3:c8:a4:1a:fa:35:3f:2b:88:27:b6:e8:36:1d:1c:
0a:e1:03:b2:d0:ef:52:ad:34:9a:a8:d7:12:7c:de:
17:4d:5d:02:b4:10:db:b6:e8:38:92:cf:06:43:22:
02:1b:5a:ae:50:64:18:97:70:d6:e5:d0:cf:5c:7d:
59:b6:55:7d:97:65:a0:c2:f7:3a:71:74:af:2d:ca:
27:c6:dd:9b:10:a0:70:ad:6e:27:c8:31:e4:13:f5:
85:76:c9:41:d6:4e:85:2d:89:6d:ca:e8:3e:4b:69:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:B7:08:D7:E7:B1:8A:61:FB:6C:27:01:78:0C:27:1F:25:8B:EC
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:45:c6:23:e0:17:e5:e0:57:1a:d7:bc:d2:12:90:79:c0:40:
f1:87:18:ea:80:49:a0:9e:cb:a2:78:00:5b:77:65:18:6c:fd:
7f:1f:da:d8:40:39:96:14:8d:a3:ae:f0:9e:cd:ef:43:5f:23:
49:40:0c:e4:02:e7:87:67:7f:7b:84:0c:ac:49:f6:2e:64:7f:
86:ae:44:56:1d:88:c3:69:20:93:91:53:65:8c:d7:06:f8:43:
35:8a:79:c6:f4:0a:a9:96:d5:8a:4b:94:6b:17:8a:86:5c:7c:
48:d1:db:2a:26:43:47:54:b5:c5:60:9f:45:3a:8d:84:60:93:
7d:8c:0a:d6:c9:4f:ee:93:94:5a:e9:6d:1a:83:9f:43:8e:cc:
40:9b:e3:9b:9b:09:72:a7:2b:83:75:1a:3e:37:bf:8c:04:80:
d8:58:c7:d9:a0:3c:e2:de:62:5b:ab:5c:62:18:e2:b0:f0:87:
03:97:c3:c4:a9:8a:5e:f0:1c:da:b9:77:0d:13:3b:b6:6b:52:
fd:6e:79:26:0e:2a:70:fc:26:2f:94:a0:c3:2c:e8:97:bd:f4:
38:6d:81:39:4e:cf:7d:fc:25:f7:a0:bc:a6:fd:aa:9b:88:1d:
5b:73:a6:b6:8e:9b:a3:a2:f1:98:a4:44:27:a8:17:72:73:13:
62:f0:88:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:35 2024 by rpki-client on console-ams.rpki-client.org