Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: 6MxLMCWtnJzJJM74RTl7/jWsKeKX2OI71prY67GUnZU=
Subject key identifier: 9C:B3:9A:CA:4C:96:17:98:DB:C1:95:6C:A1:CD:3E:B8:6C:CA:08:E2
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 01936AB4C88DC4D9F978E5622E564041F4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 1031
Signing time: Tue 26 Nov 2024 23:00:52 +0000
Manifest this update: Tue 26 Nov 2024 23:00:52 +0000
Manifest next update: Wed 27 Nov 2024 23:00:52 +0000
Files and hashes: 1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: BIKSBSfALrBTcpPcbFnNLB34a6KBZVlK43V3RktC24I=)
2: ch6va8ZO6Y45tpp1hNp9kWH9-fs.roa (hash: /a/ZZS+XnJRyIUWb3gWGugyrU9MSbbItuvo4DVd9DVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:c8:8d:c4:d9:f9:78:e5:62:2e:56:40:41:f4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Nov 26 23:00:52 2024 GMT
Not After : Nov 27 23:00:52 2024 GMT
Subject: CN=9cb39aca4c961798dbc1956ca1cd3eb86cca08e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:11:b1:ee:b0:cc:d5:c4:95:2f:e0:1b:9f:
cd:49:a9:2a:44:41:4d:c2:34:cd:71:ad:55:54:64:
50:3b:7d:1f:86:9e:3e:fe:38:b7:1a:78:f7:a6:6d:
23:5f:d3:0e:e5:81:00:a9:3b:71:bc:00:06:7b:b8:
50:cb:c1:a1:38:cc:24:50:e0:7e:95:c0:03:15:e7:
af:37:38:b0:f6:2c:e8:52:a7:6d:26:7f:af:f0:51:
96:8f:49:e9:cf:77:7c:5c:7e:3f:81:37:32:53:23:
4d:c7:9f:57:a5:81:9f:1d:45:25:06:05:d9:24:da:
11:54:3e:d9:a0:7d:f8:bd:fc:2b:39:84:7a:92:56:
c2:77:83:95:fe:70:fc:3d:ac:02:ac:bf:43:97:76:
fb:e0:39:1c:69:dc:67:5f:24:5b:63:81:05:58:40:
49:55:ab:21:99:b3:35:50:3b:de:b7:e3:fc:63:9e:
79:bf:1f:eb:3b:ff:a9:d4:d0:ea:14:c3:c8:fc:91:
f0:2d:22:14:8f:0e:98:08:65:9c:f2:c2:b8:ff:ba:
0b:d2:67:25:a0:90:6d:12:d1:c7:bb:f8:a0:0f:e2:
f0:48:06:5c:0b:ef:be:a3:4a:a9:77:94:a0:ba:69:
75:62:45:58:f8:41:fb:a0:04:72:64:5f:ed:b2:e2:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B3:9A:CA:4C:96:17:98:DB:C1:95:6C:A1:CD:3E:B8:6C:CA:08:E2
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:18:d0:74:70:cf:39:bd:95:65:84:f6:d1:f0:4a:6a:66:96:
be:8e:c3:26:6d:7e:d4:28:c4:12:43:6b:89:d2:3f:80:d6:0a:
c0:d1:34:40:66:7f:66:a7:60:62:54:e1:02:96:33:8a:e8:8a:
16:d4:6d:76:24:bf:48:fc:31:26:74:c6:e9:96:cb:86:18:a2:
2b:72:eb:23:83:a8:1b:66:65:8e:71:50:2e:d0:19:66:73:ad:
59:e7:7a:61:56:56:ca:55:4b:05:4f:79:2e:c2:86:61:67:2e:
c5:3d:dd:00:a0:43:a2:5f:03:34:22:2e:e9:46:38:56:fb:1b:
f1:85:fb:fa:21:43:b9:cd:97:0a:12:11:8f:5e:aa:20:28:e4:
8c:74:83:c5:f9:b1:2a:5a:17:62:aa:c6:da:b5:d7:9b:40:fa:
16:41:41:67:76:2c:6b:3c:d2:61:8b:28:47:25:61:e2:87:25:
1e:61:37:66:86:ed:cf:fe:47:4f:ae:47:a2:ed:da:b7:94:f4:
d1:f2:76:92:96:18:eb:c6:81:80:6d:d3:e2:1d:79:1a:c0:2d:
75:cb:b9:ea:d4:d4:0b:b7:36:01:5e:3f:96:4f:0d:02:62:db:
0e:16:68:a4:b3:31:dc:2d:7f:fb:26:30:09:ad:b9:19:65:9a:
e7:a7:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:29 2024 by rpki-client on console-ams.rpki-client.org