Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: Fi6DNxIyKdStcQptleyl8YyLuAJijQ4pYrJfpYJh4Fo=
Subject key identifier: 2F:6A:4B:54:5F:69:18:B9:64:A7:18:93:BC:43:0E:46:8A:89:BA:BC
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 019356892F7C5E13EB0D9B75FE7AF536C16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 0706
Signing time: Sat 23 Nov 2024 01:00:51 +0000
Manifest this update: Sat 23 Nov 2024 01:00:51 +0000
Manifest next update: Sun 24 Nov 2024 01:00:51 +0000
Files and hashes: 1: hkVSYQAl3rS3uKQrcUyQYqz-Jb4.roa (hash: 1WQziYP1Of1YxLVsprt82cRzU7fwgmn2dGufyHtfPgg=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: nTGCdNSlNW2F/TLQbf+RBLxrJMxRjGbU87Dx7rCRf1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:2f:7c:5e:13:eb:0d:9b:75:fe:7a:f5:36:c1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Nov 23 01:00:51 2024 GMT
Not After : Nov 24 01:00:51 2024 GMT
Subject: CN=2f6a4b545f6918b964a71893bc430e468a89babc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:c3:1c:51:a5:c1:fb:4a:c6:dc:3a:b4:a1:
2e:0b:55:eb:48:d7:08:6a:07:b5:f3:85:44:a3:fd:
4c:95:70:1f:86:89:7b:9a:bc:96:89:f3:dd:22:0b:
b9:eb:8a:a8:0f:e6:15:5e:10:bc:8d:3a:c1:3a:41:
e0:4f:94:f8:6b:e2:41:63:b3:07:8a:6a:8e:44:29:
a2:c8:c8:b1:e2:8d:ea:0d:24:14:94:2b:22:db:9f:
6a:ce:84:d0:0a:bd:ec:03:b6:8e:a6:d7:99:bd:4e:
08:ef:84:c8:29:9d:91:16:19:66:45:a9:39:db:ef:
68:1d:e8:95:33:52:6e:d6:ef:d9:2c:c5:38:0a:03:
7f:78:43:9a:49:4b:d2:4b:e3:16:62:22:19:12:e4:
27:46:f5:d6:48:30:2a:7c:bf:f6:2a:36:c4:a4:57:
f9:56:01:2d:2a:6b:28:4c:5e:e2:ef:11:2c:4d:c4:
60:e2:1b:a4:77:91:1f:34:9f:f3:26:a4:a3:cf:50:
9a:14:2a:9c:5e:e9:f7:2e:10:91:6c:9f:a5:11:4e:
a7:f2:d9:83:df:cf:2b:c6:01:18:ec:7b:46:dc:ec:
f8:32:46:35:d5:8b:65:1d:93:0c:99:a1:1e:9c:fe:
63:c8:8f:74:f2:28:03:36:5f:db:2d:88:15:86:3c:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6A:4B:54:5F:69:18:B9:64:A7:18:93:BC:43:0E:46:8A:89:BA:BC
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a3:ed:8e:17:c3:a1:89:24:b6:d7:11:f7:87:a4:87:30:8b:
2c:93:05:38:bb:78:3e:cb:fb:68:c4:df:16:56:ed:02:5e:6d:
c8:c4:d7:34:a4:a8:5d:5e:03:a8:1f:73:70:3b:81:48:e5:7b:
42:eb:05:5c:bf:6e:0a:e2:69:e1:bf:92:cd:e6:9b:0b:8e:58:
7e:33:e7:04:8f:7c:58:bd:5e:da:e0:f1:fc:a0:fb:cd:08:10:
74:c0:f9:75:3f:bb:41:5d:01:1f:08:02:78:34:58:bd:87:b6:
c1:5c:22:ce:fc:49:cc:bd:20:0e:22:0e:e4:6c:a2:4a:99:17:
f7:55:b1:4b:53:68:b3:5f:41:7c:d3:70:5c:45:45:0a:e5:de:
9c:5e:69:6d:d0:4f:79:12:26:be:41:76:b7:eb:1f:69:c5:b0:
b6:c7:9f:83:55:57:9f:10:a7:e4:81:dd:d5:a6:06:ba:74:97:
de:6e:a8:6b:0b:7d:1f:1c:18:18:49:2f:f3:86:c5:f7:c0:e0:
0b:82:9c:b8:d2:e5:51:89:44:cb:1d:3a:4d:a1:00:c1:dc:e3:
cd:9d:18:02:57:eb:fa:0b:74:bd:b7:f0:42:35:4e:0b:9c:45:
fa:8e:59:6e:4d:bf:b2:fa:6d:c1:8d:c5:c0:0d:56:96:ca:1e:
ef:a2:58:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:13 2024 by rpki-client on console-ams.rpki-client.org