Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
File: YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json)
Hash identifier: 0HxhuG2h+XQBGHON1AjCB46PPsmsFmPqGGCqdgL2Dvk=
Subject key identifier: 62:3F:0E:BD:38:87:9E:48:DF:34:76:B3:11:74:96:76:89:4A:41:6F
Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Certificate serial: 018F94CF1E2D42A6D0EFD17966790D7F84FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
Manifest number: 117C
Signing time: Mon 20 May 2024 07:02:32 +0000
Manifest this update: Mon 20 May 2024 07:02:32 +0000
Manifest next update: Tue 21 May 2024 07:02:32 +0000
Files and hashes: 1: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: GUqmDrbQrAH+q28j5BCILgB/BEz8vZMNwEBMpeEy5Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:cf:1e:2d:42:a6:d0:ef:d1:79:66:79:0d:7f:84:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Validity
Not Before: May 20 07:02:32 2024 GMT
Not After : May 21 07:02:32 2024 GMT
Subject: CN=623f0ebd38879e48df3476b311749676894a416f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:98:d9:40:73:1b:ce:56:ff:0d:dc:a0:21:
94:93:33:5b:f7:31:f5:9c:1f:ca:85:74:39:b8:32:
d4:79:bf:6f:da:46:f7:fd:88:ba:91:5f:c3:cd:bc:
a5:f8:77:60:2c:22:2f:45:72:56:b4:17:f5:1d:2f:
25:5b:4b:1a:f0:3a:99:e7:8b:01:9a:32:63:b3:5d:
27:44:ee:b0:bc:79:74:bf:c2:eb:47:8a:47:55:b4:
9b:fd:51:56:b1:b8:2c:f1:80:79:5c:00:4d:0b:fc:
8c:60:8a:87:fa:e2:b6:09:0c:a7:f9:b0:90:4a:fc:
09:44:cb:f5:93:90:93:02:fd:8e:0c:97:a4:05:cb:
7d:a8:65:f2:c8:35:13:24:34:31:0a:ab:f5:8b:e4:
03:cc:0f:a8:54:76:8a:94:8f:0b:07:82:77:7d:4f:
84:ea:bc:1a:2a:dd:4b:24:94:51:05:bc:cc:27:cc:
cb:fc:b6:5a:db:1f:4f:8b:2d:a2:0c:af:fa:36:d0:
64:20:26:d5:80:7b:3a:02:7c:a8:04:6b:bc:dd:8e:
f7:d2:eb:1d:64:09:51:12:16:3d:fe:bf:75:59:b4:
52:da:2c:e8:d3:fe:5a:66:10:79:b9:8d:0b:16:b2:
f5:ac:94:54:6b:f9:04:5c:11:ad:0b:85:99:38:1a:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3F:0E:BD:38:87:9E:48:DF:34:76:B3:11:74:96:76:89:4A:41:6F
X509v3 Authority Key Identifier:
keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:30:ba:50:a8:1d:72:2c:b5:63:9d:9a:4f:b6:f6:0c:94:e8:
7a:b0:87:c2:18:5e:77:d5:b0:8a:5a:69:b5:7a:fc:51:1e:bf:
6d:77:20:5d:91:a5:88:e2:29:a0:cd:72:5d:fd:83:df:a5:fe:
df:ee:a4:3c:15:86:56:5f:49:12:a4:c7:85:b2:f1:17:ed:9b:
2c:c1:17:c4:a7:ba:41:33:19:13:d1:a8:95:4d:a5:a2:35:92:
b0:4a:0f:18:6c:21:11:6f:cb:03:c0:31:dc:fd:cf:06:d7:8d:
02:6a:4c:7e:3b:42:4f:f6:e9:a8:30:0e:77:73:93:55:ff:bf:
b9:b5:dc:14:d4:6b:8a:60:90:62:5b:eb:8e:c4:6b:7a:43:8e:
e6:a7:a5:32:39:41:c6:e0:e0:46:e2:c7:2f:70:87:c5:58:c6:
bd:1c:7e:be:2d:08:78:87:30:c7:dc:76:03:51:3b:b6:b3:e8:
46:9f:13:47:47:88:fa:62:f0:30:83:6a:0f:b2:d1:96:88:72:
81:2f:06:02:58:ca:58:69:a9:b0:9e:b8:31:da:e0:73:ce:93:
bf:78:ec:e6:64:cf:d5:0c:31:00:7e:65:14:48:b1:bb:b1:27:
cf:a0:48:78:39:9c:56:54:d3:a3:c7:b3:e7:b6:a7:bc:25:56:
6a:0c:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 10:11:02 2024 by rpki-client on console-fra.rpki-client.org