Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: RAkWJ4pERBw/vOJ3jmKEL7S5XkU2bzR3lrZZMnCoKjI=
Subject key identifier: 82:E3:EE:60:BA:3B:FE:75:7D:E9:79:F6:DF:4C:DB:EF:92:64:82:22
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 0194BA84569A01F9A9A284893B5134FA62B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0A3D
Signing time: Fri 31 Jan 2025 04:00:22 +0000
Manifest this update: Fri 31 Jan 2025 04:00:22 +0000
Manifest next update: Sat 01 Feb 2025 04:00:22 +0000
Files and hashes: 1: 1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa (hash: ruSOhXJd1v3gKBskv3cjew+PBFyYM840a6Wjo+pKuTw=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: FkfsGF2GmN/3EakmMPb7Cx6RGUFJWQchG6gHk7mO7/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:56:9a:01:f9:a9:a2:84:89:3b:51:34:fa:62:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Jan 31 04:00:22 2025 GMT
Not After : Feb 1 04:00:22 2025 GMT
Subject: CN=82e3ee60ba3bfe757de979f6df4cdbef92648222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a3:bc:5c:2a:85:0d:5a:40:ad:62:e0:9e:e5:
3d:22:d4:c0:6c:0b:00:5c:2d:b0:c4:bd:ff:36:7c:
27:fb:f2:85:c7:e9:a5:41:9b:12:7a:8b:96:cf:bd:
a7:19:9a:f1:9e:a0:08:9e:85:b9:32:b1:1c:19:72:
a3:44:c2:99:b2:51:e1:cf:79:82:26:2a:03:3b:37:
2f:6f:45:fb:0d:71:9a:b6:87:0e:10:5f:73:f3:25:
ef:e9:00:d9:e0:a9:ad:40:e9:c4:52:f2:3f:57:df:
2b:5c:e3:95:3b:51:90:bc:55:82:0e:be:08:b5:de:
e7:40:1c:fa:e7:a1:08:62:10:af:c1:b2:c7:b5:f8:
8a:99:e6:e3:9e:fb:40:c8:74:43:e7:5c:47:f6:bc:
5b:24:b7:04:a9:6f:de:69:e0:14:75:c5:44:c9:c0:
90:cd:d1:ab:15:f1:4e:94:6b:6e:c2:19:17:b0:39:
b2:21:8e:e7:61:4e:38:53:c9:6f:cb:73:ce:05:46:
5a:44:3c:3b:5d:40:54:25:9c:01:a6:42:a5:0f:ef:
b1:c6:ed:e4:c8:86:43:b5:e6:8b:c1:b3:c8:2c:4c:
3b:2a:c5:2c:3b:df:af:30:cb:42:c3:5e:4a:b5:c0:
ed:32:d2:62:0e:70:aa:7b:b8:9f:93:f8:b3:0a:e6:
c8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E3:EE:60:BA:3B:FE:75:7D:E9:79:F6:DF:4C:DB:EF:92:64:82:22
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:83:52:29:a4:d7:90:65:43:6e:5d:34:1c:ba:f3:63:86:a8:
40:b8:86:29:62:fe:37:3e:0d:ba:61:b2:17:1a:a6:03:d2:ab:
94:fc:b4:03:63:2f:4e:96:ef:75:73:f7:d1:7a:23:75:30:6a:
b6:a9:aa:23:12:88:e8:eb:63:76:af:b6:b5:41:a6:65:c2:bd:
d8:7a:eb:c3:99:3b:c3:52:17:85:d9:f9:19:7b:06:f8:3b:a2:
0d:00:c0:cb:68:ae:c0:53:94:0c:4b:c7:af:cd:12:44:ba:ad:
47:dc:57:65:ee:37:51:d4:e6:d0:97:e7:b0:05:dc:2d:93:56:
87:29:66:5b:4f:cc:82:4e:2d:70:62:f6:cd:0e:b8:2e:93:a8:
a8:60:3f:0b:4d:8a:2e:af:8d:0f:cb:c4:b0:01:30:9e:f9:1d:
b4:e7:fe:79:90:4d:4b:fb:b0:1d:ec:53:ee:54:a9:cd:ba:b6:
30:c1:c4:6e:39:4f:e1:f1:d7:0a:b6:b4:1b:63:b1:0a:c2:51:
d0:e9:bf:69:7e:0f:d6:9c:da:e7:79:1f:da:3c:24:ad:bf:d8:
59:ca:9a:04:27:4f:6a:e0:17:a9:da:61:8b:94:7a:72:a2:60:
fa:02:d1:ad:79:7a:07:aa:e3:ea:9c:7f:99:1d:57:7d:cf:f5:
82:5e:bd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:04 2025 by rpki-client on console-fra.rpki-client.org