Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: tKxdN21gy3llIhK2VRiQkIy1UYT+AZmMuhGtJHqPxtw=
Subject key identifier: 83:FC:ED:64:5D:F0:FA:AB:6A:54:92:BB:80:6C:EF:2C:06:D9:D9:C6
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 01935274FC7DCB4C1C80A07DD80FFE00A6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 0290
Signing time: Fri 22 Nov 2024 06:00:18 +0000
Manifest this update: Fri 22 Nov 2024 06:00:18 +0000
Manifest next update: Sat 23 Nov 2024 06:00:18 +0000
Files and hashes: 1: sFBBsVTJ0wKU3wqQ3RdEonpAFsQ.roa (hash: oXLY9YVbQ51sltpcenBm9dkZe73Ldv3pRi/W5K4xXYQ=)
2: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: aSEVtZYEhtM6q1TcdT/uyBW0ifUdbnxia9MwDnXWRTo=)
3: zUJDwWtarPud5bzFNriDRdjYULw.roa (hash: uQCnIUvCCS/Bxuvfpbjp/X3ojiWwT0fuya+j+HU4fFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:74:fc:7d:cb:4c:1c:80:a0:7d:d8:0f:fe:00:a6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Nov 22 06:00:18 2024 GMT
Not After : Nov 23 06:00:18 2024 GMT
Subject: CN=83fced645df0faab6a5492bb806cef2c06d9d9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:c6:a2:78:20:dc:3d:9a:64:d9:90:0a:26:
ae:4c:84:82:4b:4e:84:6b:5d:0a:64:93:be:0d:e3:
01:06:57:b3:59:43:9f:c0:f8:8f:57:f5:2f:04:29:
53:95:c0:11:7e:c5:04:7d:ad:6d:b5:6b:85:49:79:
12:bd:98:99:43:03:4d:20:de:eb:13:a9:f6:d8:77:
22:60:5d:37:19:5b:ec:61:8f:dc:c5:09:f6:56:76:
62:9f:05:4f:b6:bd:cd:34:d1:7c:da:ca:8c:37:a3:
ff:f7:0f:a3:61:90:d5:9d:b4:2a:65:86:4c:80:f6:
9d:73:ac:7a:8e:b7:63:9d:69:9b:37:75:19:78:f7:
bd:51:c4:66:15:17:61:5a:5f:d2:e4:1a:00:58:ed:
33:11:76:5b:6e:e6:51:5f:06:09:51:0e:84:36:a5:
e8:ff:16:e4:76:fc:40:5f:2d:16:05:21:77:c3:8d:
12:41:31:7f:c3:0d:17:78:ef:05:6f:68:ba:14:62:
c6:d2:c0:34:4b:21:09:33:76:b3:35:1c:a8:b5:82:
f8:4b:4a:2b:53:bd:3b:8e:bc:f8:1e:bb:82:1f:e3:
92:21:b8:1d:ef:c8:2e:2d:48:e8:19:79:09:37:30:
2c:db:a3:de:8f:37:f2:bc:05:ff:1d:26:15:f1:e0:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FC:ED:64:5D:F0:FA:AB:6A:54:92:BB:80:6C:EF:2C:06:D9:D9:C6
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:90:c7:10:63:8d:69:b4:36:f3:b8:d4:cb:00:47:cf:ad:76:
ac:d4:32:ed:8b:bb:37:ce:3f:38:27:fd:ee:ea:03:8a:cd:cd:
f1:f0:ce:6e:50:e2:93:84:61:60:e2:c8:68:3b:1b:51:17:97:
bd:cf:c3:ad:7a:61:03:54:69:a2:c2:ea:8e:02:5f:9b:8d:d7:
8c:55:fb:b3:73:76:1e:a3:d7:48:b0:12:1c:1d:45:f3:0d:5b:
d3:82:58:2b:fd:e2:6e:36:1a:a1:91:6a:95:61:04:b9:4b:5b:
71:96:07:0c:fc:26:38:eb:24:13:9b:cc:21:40:45:7c:68:7f:
9b:36:51:ea:7f:fe:72:b8:3d:28:bf:0c:06:c8:b4:18:a4:76:
7d:07:f9:2f:33:32:24:b6:02:75:25:3f:eb:a0:58:69:12:62:
74:7a:12:20:e6:1b:c6:53:ed:b7:c7:54:0e:c5:9c:34:a9:a2:
40:9b:ae:70:9a:79:53:e5:f6:5d:a9:c8:65:1a:48:5e:d2:8a:
3d:61:d4:9f:42:d7:b4:e4:b9:74:1c:73:42:59:d8:eb:89:dc:
ec:be:1a:83:5a:18:2b:98:09:79:b8:6a:69:fd:69:c2:6f:87:
3a:c6:ab:f3:ca:45:39:ee:21:da:bd:da:02:df:a1:04:56:fb:
68:fb:55:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:17 2024 by rpki-client on console-fra.rpki-client.org