Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: WweJhT37J0xE+dADIlVGckWumlr1kptPNS/OxXF3WDI=
Subject key identifier: 82:28:6B:2A:28:75:BC:5B:02:31:91:2E:C3:AB:2D:6C:B4:42:9C:F4
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 0191FB22DBD76EB63778FB787D0FF5BFDB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: E4
Signing time: Mon 16 Sep 2024 14:00:51 +0000
Manifest this update: Mon 16 Sep 2024 14:00:51 +0000
Manifest next update: Tue 17 Sep 2024 14:00:51 +0000
Files and hashes: 1: 1YjUG6dbDuaJGU-pGPiowxRKSkU.roa (hash: /IyfliTfh/ApQV5993ktkjhDCyHCwuKF/CTKwxwnuiM=)
2: 9Av8yqu-QbjMMsm-zmFY7DjINQA.roa (hash: Ilf9gfh/Zl9adF1J04lpxXCKTdbjkBrI6E3LSXUFlpo=)
3: NiIyQc4-WlCedIn6p8ScUSrBMCw.roa (hash: ao3kFnmR/+F35EeF8PMOSiarB8BoKWoU9LE5ic0qSt8=)
4: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: QVpC20t92fL2IwQMk5J2DmJb8TYnhtJgXxUCbYfSciM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fb:22:db:d7:6e:b6:37:78:fb:78:7d:0f:f5:bf:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Sep 16 14:00:51 2024 GMT
Not After : Sep 17 14:00:51 2024 GMT
Subject: CN=82286b2a2875bc5b0231912ec3ab2d6cb4429cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:40:66:e1:19:9c:f0:fd:e8:a0:6a:8c:14:08:
4d:c7:56:b1:8b:5e:60:89:87:7b:39:45:d5:aa:a7:
9d:10:ad:6a:ba:bd:71:8b:fa:eb:e1:4c:18:08:4b:
70:af:59:be:f9:29:88:61:53:08:9f:dc:e5:c6:03:
73:24:03:59:4d:7a:ee:f6:37:81:0e:fd:ff:e8:64:
cc:5b:9f:da:c6:e3:29:5a:84:fa:b7:43:bb:8e:22:
9d:21:6f:44:fe:d1:94:cb:d2:bc:24:af:6c:fb:1a:
82:7b:5b:42:38:71:06:47:ea:d9:c4:ad:9a:c7:c9:
2a:a0:dd:ec:27:43:5d:4f:99:ec:80:0d:91:0c:e3:
ee:b3:ec:92:ef:28:75:7d:4b:34:56:65:bc:9d:3b:
fb:de:31:09:52:df:1f:47:d6:36:ed:2a:2d:4c:f6:
38:84:0f:fe:71:fd:f3:b1:2d:6c:af:25:52:f6:17:
96:f2:29:87:e9:79:47:c6:d4:5a:5f:7a:e2:ff:05:
22:72:c0:a9:09:8f:8e:3d:8b:b0:70:c5:3f:64:b5:
04:28:70:1c:22:9d:09:54:17:e4:6e:c7:9f:82:7a:
98:e1:b1:2c:13:56:7a:e3:ba:5d:70:65:25:0f:cf:
44:67:6b:65:ce:61:6a:ec:9a:bc:2c:9c:f3:08:bd:
36:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:28:6B:2A:28:75:BC:5B:02:31:91:2E:C3:AB:2D:6C:B4:42:9C:F4
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:09:1f:3e:11:37:af:f5:00:dc:08:0a:dd:a1:5d:c3:60:71:
8b:fa:99:a2:c0:ba:6d:8b:c0:f7:f2:f6:8e:f0:f7:e6:f5:53:
34:d6:55:9c:88:a5:ca:91:8f:45:13:e7:d7:84:67:97:2b:eb:
de:1c:b3:f0:1e:5d:21:be:c7:a0:24:04:40:d6:7f:71:7c:9b:
27:89:ce:ec:66:00:b2:49:28:28:8f:5a:41:5b:b5:e8:11:f1:
58:05:36:83:e4:d9:03:c8:5c:cd:1a:51:58:e2:bb:cc:92:5d:
40:8a:15:3c:a9:a3:ae:2e:c0:6d:71:b3:17:fe:ed:bb:74:ea:
e7:17:13:d3:c9:80:d2:6f:14:2d:25:af:91:1e:59:ad:8b:24:
f1:8c:05:0c:cf:82:51:87:d7:e3:82:a5:87:28:9d:b8:51:e7:
ad:d0:a8:15:a6:41:87:cc:5b:b2:63:05:bd:a0:e9:85:73:f7:
03:74:2d:70:30:7c:17:2c:b7:dd:35:34:5d:0c:c7:2d:f1:16:
b9:52:d0:ad:e3:00:28:86:e3:d0:50:a7:8c:32:a5:e1:df:07:
71:f1:f4:6a:77:6d:ff:9e:82:8c:5f:f0:af:ac:c7:38:b2:1e:
21:0c:e6:e2:ba:36:6b:06:b6:fb:aa:a2:22:02:04:87:75:89:
51:39:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:37:44 2024 by rpki-client on console-ams.rpki-client.org