Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: VGceEzu+iAJ3f37801EeX2elA5H8dSRHMNTIic3ZehI=
Subject key identifier: 99:ED:5B:F8:95:4E:1D:CF:EF:CA:45:B4:CC:2A:86:03:4F:EF:28:A1
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 018F8748CCDFA0CF644B5A1B514BF631137F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 0361
Signing time: Fri 17 May 2024 16:00:46 +0000
Manifest this update: Fri 17 May 2024 16:00:46 +0000
Manifest next update: Sat 18 May 2024 16:00:46 +0000
Files and hashes: 1: 1cFDlNo0Chn7JkbdPAlimCGNQE4.roa (hash: Z+4FEpLwXtWecJwfCey3FLdg1ChDIufzdjbLIT57DNM=)
2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: MnLs2FFdpsoM2zPlaAk6LVtWtlFWEBq2QUJMC1Cj6dw=)
3: eyQvK29JgahCGAgYcLb6YNe3-Jc.roa (hash: RabhGqIatcoajOJCb3/HGCvkcqMo8FBFAtZfifKFyAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:cc:df:a0:cf:64:4b:5a:1b:51:4b:f6:31:13:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: May 17 16:00:46 2024 GMT
Not After : May 18 16:00:46 2024 GMT
Subject: CN=99ed5bf8954e1dcfefca45b4cc2a86034fef28a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:7f:97:c2:ae:dc:e5:91:b7:3f:47:26:e5:
fe:db:55:1f:c4:91:ad:9d:fd:7e:67:b9:b6:7c:e9:
37:84:24:a7:84:00:06:01:39:04:09:60:cf:08:23:
a9:8b:c0:a5:1d:03:87:58:dd:d4:da:5d:be:fd:f9:
74:40:48:8d:c5:ba:8f:5c:77:ba:de:45:6f:e5:7d:
16:55:8a:b7:73:3f:46:7d:39:20:7b:75:4c:93:fe:
be:34:42:39:63:41:e4:70:ac:f7:ae:c2:6d:60:8e:
85:4b:4a:18:83:dc:24:c1:b8:03:83:9f:1f:86:41:
eb:a3:ca:1b:3d:fb:81:84:ef:b9:84:da:0c:ef:a5:
62:09:9f:00:7e:ff:8e:92:41:18:3b:11:cd:61:b8:
78:84:50:29:ea:03:10:2b:a2:2b:43:a1:f9:77:49:
07:af:95:b7:47:53:27:93:ad:cc:e6:b3:f9:31:22:
82:42:89:cb:92:c5:11:f0:fb:54:57:6f:bb:1a:3c:
d1:47:b7:07:0f:59:54:17:16:b8:c7:dc:14:6c:d9:
41:11:c1:67:e3:51:c6:16:14:af:fb:f4:23:c8:1d:
c6:46:e5:20:10:e5:9a:9b:5d:54:f5:d2:ac:e5:2c:
00:af:b0:fc:8a:92:e1:2d:0b:d8:40:84:44:a5:bd:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:5B:F8:95:4E:1D:CF:EF:CA:45:B4:CC:2A:86:03:4F:EF:28:A1
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c0:4b:8e:ce:9a:ab:a0:78:57:2d:16:60:0a:9c:5e:6b:be:
30:0b:76:a8:bb:e5:17:74:f6:32:b2:4d:bc:5f:71:eb:b8:6a:
91:35:e4:a1:cd:2d:43:a6:03:5f:13:42:70:8b:04:be:ff:2b:
f3:55:64:04:7d:7c:84:83:c6:ea:5c:4c:6b:39:05:2f:dd:64:
9d:d5:93:28:8a:dc:a1:d0:cf:d2:63:b7:0d:34:63:b7:c7:32:
e8:53:c1:39:ad:44:cb:a2:f6:f0:38:57:92:e0:d4:d6:56:86:
1f:53:a1:8c:4e:1f:cf:43:8e:ee:04:c4:7f:9a:87:45:52:07:
19:a2:15:05:e1:ff:85:6a:5d:b9:4e:d7:5f:81:11:54:15:00:
40:76:01:07:f8:d9:e6:1b:dc:be:ba:85:04:61:cb:ba:bc:ab:
20:d9:98:f5:d6:ff:91:78:79:df:24:b9:a8:3d:f3:2d:b4:5b:
a1:48:28:43:98:41:30:82:9d:f6:2c:1d:87:94:ca:01:2b:b9:
12:fe:22:a4:f0:c8:a1:43:80:08:61:ec:10:e4:0d:e2:d4:93:
97:43:17:0d:40:ce:d0:80:50:f4:b2:e3:54:9b:04:24:b9:c5:
95:22:ea:32:ba:14:e2:5d:3e:bf:1c:5e:f0:ca:a0:c1:09:97:
68:2b:e7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:54:52 2024 by rpki-client on console-ams.rpki-client.org