Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier: ZjKejv3xxrjjo1bjCkJYz8cL/QfSDpVDGBvK71JPfCo=
Subject key identifier: 07:5A:2C:1A:F8:B8:FA:BF:5F:BB:97:E1:E0:F0:64:BB:95:06:5A:B8
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial: 018F98AACC5E490D35BF0CCF3D14A11E2769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number: 117E
Signing time: Tue 21 May 2024 01:01:21 +0000
Manifest this update: Tue 21 May 2024 01:01:21 +0000
Manifest next update: Wed 22 May 2024 01:01:21 +0000
Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: FJXiV129DSostq9S/GktGjIiuWXtoKdY9dIYsz50SzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:98:aa:cc:5e:49:0d:35:bf:0c:cf:3d:14:a1:1e:27:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Validity
Not Before: May 21 01:01:21 2024 GMT
Not After : May 22 01:01:21 2024 GMT
Subject: CN=075a2c1af8b8fabf5fbb97e1e0f064bb95065ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:c6:ec:a9:0a:f3:a2:a8:75:13:4c:d2:45:
fd:99:d2:04:dd:60:12:c9:53:fe:cb:2c:1e:86:28:
ea:51:4f:2d:45:db:d2:31:85:f3:ce:1e:db:4f:d0:
0c:cf:a6:be:10:64:90:77:68:40:67:94:ad:c6:88:
87:98:70:49:f0:ea:c8:e5:01:19:56:f6:78:52:20:
d4:e0:4e:48:5b:95:ed:dc:aa:ef:67:7f:81:60:dd:
41:f3:2f:3e:f4:f6:47:36:4f:03:3f:24:fb:b0:d7:
b1:cc:d9:af:b2:61:5c:bc:2c:a0:78:57:08:9a:a0:
13:28:a3:77:04:64:f8:6a:ca:98:6f:77:6c:8b:e5:
49:b4:63:b6:83:42:ec:09:34:d6:4a:fc:60:dd:8d:
e1:fe:c7:7a:18:c0:75:58:bc:c9:b0:c9:8c:32:9d:
26:44:fb:93:89:e2:24:5c:ec:75:be:2c:58:1e:70:
c0:ad:3f:db:82:bb:7f:7c:7f:11:28:e9:d9:75:30:
fe:97:8e:08:e0:65:4f:92:8f:7a:74:ed:cf:45:5e:
54:72:d8:f7:56:a7:0f:97:3e:3f:5c:07:f8:75:92:
d6:e3:fe:0a:c5:21:21:f4:2b:1b:0f:de:27:0a:61:
f0:60:fc:7a:9e:f1:59:2b:85:70:6f:e2:2e:4b:4b:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5A:2C:1A:F8:B8:FA:BF:5F:BB:97:E1:E0:F0:64:BB:95:06:5A:B8
X509v3 Authority Key Identifier:
keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fd:23:c1:67:dd:46:e6:db:b4:59:99:e6:35:c0:e2:cf:43:
d2:20:8d:bc:7f:75:dd:f6:88:6f:02:b0:44:8c:55:73:91:44:
b3:19:42:5b:3d:9e:7b:3f:c1:20:43:e5:2a:16:41:6c:00:fc:
4d:a9:e4:4e:0e:e9:2a:17:cf:8b:80:95:ef:ba:c3:39:92:a0:
ea:f9:e8:db:ab:56:41:85:4f:7c:7f:ae:4e:10:82:6b:59:97:
e6:23:76:1b:69:26:09:44:5c:ed:e6:41:87:aa:2c:9d:03:a4:
3b:72:ff:a1:a9:19:64:07:f3:0a:70:ba:0c:06:39:1e:5f:e1:
e2:fe:5d:46:01:20:26:ad:2c:a8:25:86:78:ba:07:25:f5:6e:
e7:cd:ec:8b:6f:fb:a7:3d:56:b4:88:32:58:71:fa:a4:e8:0e:
6c:2b:ff:6b:26:a8:b3:69:27:09:43:09:f8:55:c9:19:fa:9f:
04:63:46:bb:55:7a:3c:bd:b5:cf:cf:55:13:ec:15:b3:b5:7d:
5e:90:fb:cf:00:1d:f9:94:9e:5e:a6:0f:bc:d4:89:87:46:06:
5c:a7:94:14:1d:45:08:9d:fe:98:b4:9c:a0:31:94:f3:d9:11:
db:ab:8e:15:73:ae:58:37:f2:01:18:43:49:e2:10:1d:0f:9a:
35:a2:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:16:20 2024 by rpki-client on console-fra.rpki-client.org