Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
File: yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft (raw, json)
Hash identifier: qgutiAYJ1yFCd6Pauvv45v6kTnHCArIAdZZ5J6fyk1g=
Subject key identifier: 09:8B:08:60:AA:15:06:23:48:F5:EE:5C:3F:CF:A4:3E:D9:A3:45:BB
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: 019356898A6814D8250E062713B4A3FB6F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
Manifest number: 0B1D
Signing time: Sat 23 Nov 2024 01:01:14 +0000
Manifest this update: Sat 23 Nov 2024 01:01:14 +0000
Manifest next update: Sun 24 Nov 2024 01:01:14 +0000
Files and hashes: 1: azw0SRAckXAbZHwLiQ_EoudLPGU.roa (hash: x017tWy/aNelbKTW8mwXR1dU/mGXE76XNapa1apltmA=)
2: yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl (hash: 1udTSMVqGKxTKBKm+dd/Uk7ZbFWhY4CRSNjN+MRtAFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:8a:68:14:d8:25:0e:06:27:13:b4:a3:fb:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: Nov 23 01:01:14 2024 GMT
Not After : Nov 24 01:01:14 2024 GMT
Subject: CN=098b0860aa15062348f5ee5c3fcfa43ed9a345bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:43:9e:5a:ab:76:bd:91:58:b3:e6:2e:e2:
8e:ec:05:ee:96:bb:66:b9:bd:f9:3a:ee:69:7e:ea:
45:6a:91:4d:5c:7f:eb:bf:22:15:8d:4a:d8:e1:7c:
05:ff:5f:f7:39:ff:8e:c6:aa:22:d0:d6:fa:11:b8:
a6:24:99:17:5a:13:f6:20:e6:df:4c:d7:76:15:a6:
13:41:71:ff:89:da:5e:81:96:ca:06:aa:2c:00:39:
da:a6:53:81:c4:71:e0:2f:be:61:d3:9c:ee:52:2e:
56:9e:1d:63:d3:3f:48:15:e6:83:81:74:ad:fb:f1:
a3:81:fd:08:a1:d1:92:4e:4e:ce:54:0b:02:31:42:
f1:75:01:8f:0b:f7:57:49:f8:00:20:e5:c1:55:a8:
e7:35:89:cc:76:40:52:c8:74:c0:c3:89:f2:3a:dd:
9f:74:7e:51:79:27:3e:5f:fc:93:75:86:d0:09:01:
ca:45:79:f4:b6:b6:80:cf:83:5b:a2:ba:2b:4c:ab:
7f:65:9e:a2:fa:b4:34:91:2b:a2:c0:47:4f:45:7a:
64:f4:9d:a3:e4:f7:ca:e0:55:76:e5:4f:4b:21:58:
f8:71:91:1c:f0:be:db:4a:28:2f:34:6a:55:61:a0:
e8:92:ff:00:60:db:ea:94:cc:c3:40:83:f5:b6:bb:
96:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8B:08:60:AA:15:06:23:48:F5:EE:5C:3F:CF:A4:3E:D9:A3:45:BB
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:71:05:b3:c9:60:9b:f1:24:e0:56:42:b6:7a:ae:5a:2d:87:
49:a1:a7:5a:4e:1f:fe:ad:96:fe:9c:ed:33:15:61:f8:0b:81:
f6:da:5a:79:6a:72:ad:aa:ce:b8:14:e6:5a:f2:93:a4:66:e7:
b7:0d:81:c3:e9:d9:55:b3:65:d9:92:af:71:a3:15:66:05:e3:
40:dc:81:19:a2:25:24:a5:f1:02:5f:4c:65:ac:11:90:43:0b:
12:85:a8:30:82:61:54:f4:d9:8a:b2:fc:0a:0d:25:65:f0:87:
94:d9:2d:15:d5:48:f8:3d:ba:26:3f:a8:b3:fd:c8:d2:22:ac:
a7:f7:b6:61:f6:9b:46:d4:91:74:34:7c:53:e3:59:bf:95:67:
0d:6d:11:fd:c3:d2:e6:a4:12:7b:de:40:23:2d:3c:b7:52:f9:
27:c0:79:8e:2e:05:50:b1:3e:02:dd:df:d9:81:0c:72:5d:d7:
91:42:7e:b8:a9:86:97:35:3d:6a:30:72:51:3f:35:7c:6c:e0:
4a:38:75:58:6d:19:bd:42:9c:0b:66:0d:f6:f8:3f:1a:70:73:
f0:cf:35:ee:a3:1c:8f:02:94:21:a5:01:4b:33:9f:94:9b:7e:
f9:d4:30:e1:46:d4:8a:53:52:c5:36:e2:f5:b1:53:c8:0c:82:
b9:0c:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:12 2024 by rpki-client on console-fra.rpki-client.org