Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: fDn4qffMTbMo6srSn0iFMBYDAPf1t0ti7AVnYbwJm8g=
Subject key identifier: E1:EF:32:23:72:BB:19:A8:A2:D6:54:F4:1C:2D:AA:2E:BD:51:89:E5
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019353F61F4681EAE85122E06E85CCF40D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 13:00:59 +0000
Manifest this update: Fri 22 Nov 2024 13:00:59 +0000
Manifest next update: Sat 23 Nov 2024 13:00:59 +0000
Files and hashes: 1: FOKFSOVl96Hdf_k_AulGj2_NWfM.roa (hash: H12gfvqXJaO2k7tt9OGWz0KtgOga94RTpVLgBctRTZk=)
2: jP8H1ojEACltRTZkla3_yetVdVA.roa (hash: bgSYSOPG8ivUYvml8OIwBc5hEMTcp9N+4kpcb1T4Z88=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: JYMrwoMkq35wjM0hvtTwiWeNJxNj408JvLAEuYGxpdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:f6:1f:46:81:ea:e8:51:22:e0:6e:85:cc:f4:0d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Nov 22 13:00:59 2024 GMT
Not After : Nov 23 13:00:59 2024 GMT
Subject: CN=e1ef322372bb19a8a2d654f41c2daa2ebd5189e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:9a:bb:62:6b:06:60:e5:22:3d:03:72:0e:
9c:02:6b:ee:48:23:37:6c:5e:d6:a7:e9:61:72:36:
6d:30:75:61:0b:3e:e2:da:aa:d8:d6:49:e6:75:9b:
4b:45:86:56:c5:c8:bc:05:8c:db:6b:e9:99:50:97:
30:a6:0b:27:89:c4:cd:67:48:19:2b:9c:83:6a:8c:
a2:b7:fb:ca:62:a7:41:c7:27:84:f7:04:d3:94:56:
4e:7f:b8:a6:5c:a4:b8:f5:46:9b:32:92:7a:35:89:
4f:53:27:42:ca:79:23:7b:fd:ea:de:b9:e2:b3:81:
a7:38:89:8d:8c:af:d4:73:1d:4b:fa:70:d7:f7:69:
ad:36:90:28:d7:62:b1:d2:84:68:76:40:c1:63:ab:
74:33:72:b8:4c:e0:4a:8b:b1:b4:53:ff:f7:0e:f5:
19:6a:9f:30:9d:fe:81:7a:5f:af:63:03:8e:0a:06:
ac:6d:bc:13:f7:0f:49:0a:73:b8:b1:49:e7:12:12:
9e:03:cc:be:29:bd:be:9f:64:61:e9:86:8e:08:63:
36:dd:86:7e:48:19:69:26:ed:80:65:0f:6a:64:87:
56:c2:98:30:2b:11:52:35:bf:f2:64:09:a2:b1:27:
a9:25:3b:17:72:33:05:b0:9f:ce:1d:19:bb:38:25:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EF:32:23:72:BB:19:A8:A2:D6:54:F4:1C:2D:AA:2E:BD:51:89:E5
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4e:70:b4:83:1e:d5:d1:10:42:b1:9f:05:02:9d:32:a6:63:
c1:03:8a:2a:85:79:95:bd:9c:d7:1d:58:bd:16:f8:ce:d9:76:
f3:09:29:22:25:61:39:89:44:56:29:09:ff:6b:92:cb:27:90:
da:98:62:c6:78:f2:8d:68:ff:cd:51:de:de:03:4e:dc:70:5a:
ff:7e:e9:b6:63:bb:a4:28:87:bd:9a:71:40:c5:98:0c:7e:b7:
4a:11:ea:20:b7:8e:90:8d:27:ba:b2:d2:51:3a:5e:44:06:22:
79:26:ea:a6:3b:91:03:15:e9:4b:94:88:6d:74:12:be:55:7a:
0c:8d:68:0c:36:d1:f4:04:d0:c6:50:3f:5e:ac:7a:7d:0b:05:
e8:e6:40:4c:ec:b9:60:55:32:c0:a8:bb:68:38:a1:b4:10:42:
f1:ea:6a:82:f5:7f:99:94:d9:0c:85:b3:08:c0:9c:ec:cd:56:
0d:df:4d:e6:be:2d:a9:e4:6a:11:4c:bf:7b:ee:22:22:ec:40:
80:0d:60:f1:61:8b:30:42:0f:99:10:01:3a:04:5e:73:d3:f9:
46:fa:0b:58:01:7a:64:7e:be:b7:a0:4b:dc:82:13:f9:6e:bd:
0a:c7:b7:60:f3:84:60:29:c5:b4:71:4a:9c:b7:c6:f3:0d:ca:
20:99:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:27:08 2024 by rpki-client on console-fra.rpki-client.org