Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
File: r_yn9tponMVFu7uVA5i6xAeXmqM.mft (raw, json)
Hash identifier: mOLRNjU7dWGI+nahwRlA7I2FSPQ5zjAIdt1lleHZbIs=
Subject key identifier: BF:CB:CD:0F:77:21:C7:61:E7:33:69:54:0E:3A:7F:45:67:9F:0B:0C
Authority key identifier: AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
Certificate issuer: /CN=affca7f6da689cc545bbbb950398bac407979aa3
Certificate serial: 0194BA846BDD93FD3770FAD78B83902079A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
Manifest number: 0193
Signing time: Fri 31 Jan 2025 04:00:28 +0000
Manifest this update: Fri 31 Jan 2025 04:00:28 +0000
Manifest next update: Sat 01 Feb 2025 04:00:28 +0000
Files and hashes: 1: r_yn9tponMVFu7uVA5i6xAeXmqM.crl (hash: HfSE2O80qEhdROzmX2dmv/qEk+mYGjP1NjQe2nnVwuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:6b:dd:93:fd:37:70:fa:d7:8b:83:90:20:79:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affca7f6da689cc545bbbb950398bac407979aa3
Validity
Not Before: Jan 31 04:00:28 2025 GMT
Not After : Feb 1 04:00:28 2025 GMT
Subject: CN=bfcbcd0f7721c761e73369540e3a7f45679f0b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:93:4d:b6:63:1c:0c:2e:27:1e:fe:bd:a2:
c8:5d:59:1d:11:0e:61:fa:b3:ae:0c:fc:b8:2e:4f:
07:bc:89:0d:50:0f:e2:78:86:21:ba:a8:fb:14:c1:
c4:76:c3:50:f2:b2:43:68:39:06:48:5e:44:4a:83:
5d:5f:66:a4:ed:9f:46:98:18:ec:6f:da:cb:86:32:
9d:bb:a5:7c:e3:28:85:ab:7b:d0:b9:e5:f7:12:ce:
7f:c7:df:5d:ad:ca:ba:e8:42:99:e6:f3:fc:6b:b1:
df:08:82:84:17:ca:7d:f9:bd:7a:b8:07:39:82:04:
f5:51:3e:2f:88:e6:56:f3:59:2f:b7:29:82:8a:08:
69:f3:a3:15:3a:64:46:be:96:95:cd:f9:73:a1:4f:
f5:e8:45:9a:92:f7:1d:c3:7f:bc:d8:ac:27:86:27:
d4:a1:37:c9:af:40:5f:88:07:b6:60:11:55:92:f0:
4f:45:b9:14:c9:19:f8:eb:44:60:4f:dc:ed:46:1b:
ae:b5:4f:cf:f1:82:8c:82:59:4a:4e:69:56:76:e7:
e5:15:97:e5:92:7b:10:9c:b8:9e:5b:97:14:2d:7f:
b9:ee:c2:cc:1e:06:a4:ca:06:a3:1b:41:cf:8c:d3:
0f:78:2e:70:0b:1f:78:d4:93:9d:cd:7f:7d:df:a1:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:CD:0F:77:21:C7:61:E7:33:69:54:0E:3A:7F:45:67:9F:0B:0C
X509v3 Authority Key Identifier:
keyid:AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4c:07:91:91:1d:99:9c:78:a7:73:c7:18:4d:37:1d:c8:83:
80:e5:32:68:18:8c:3e:f9:7a:a3:93:12:ec:0e:b9:db:c3:56:
38:31:14:cf:5a:18:55:7d:1b:e0:36:26:09:a2:38:cc:23:7d:
07:9c:d9:4f:9a:01:d2:fc:ef:5b:af:06:41:d5:f2:83:c6:8e:
af:3e:21:f6:9c:6e:47:4e:3c:e4:66:4c:7b:f9:1c:bb:90:3e:
7d:75:72:1a:d8:5d:2a:5f:b1:7d:7c:d8:b1:1e:d0:77:a1:c8:
7d:76:bf:a1:13:60:2e:8b:a4:4b:ce:5f:59:45:32:7d:43:a5:
11:a4:a5:b5:cf:00:3c:cd:5f:4c:3d:6a:37:25:60:8e:10:98:
8f:05:ba:cd:17:d6:d9:4b:f3:28:3f:ee:59:02:47:bb:01:1f:
ea:39:51:5a:0c:ef:64:13:7f:b3:ba:66:1a:c2:7f:96:29:28:
d1:db:91:eb:1b:6d:56:46:f3:6a:0b:1a:ba:7e:46:a9:94:ed:
14:aa:b5:e9:49:1c:cc:c2:b5:97:6a:6e:8b:5c:cb:c4:44:d0:
51:7e:43:0e:d7:2a:5d:0e:63:37:3f:c8:7d:34:d5:da:ad:3a:
f1:cd:c7:8c:ab:6c:6f:1e:16:cf:0b:01:98:18:f8:c0:d6:71:
2c:fd:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:58 2025 by rpki-client on console-fra.rpki-client.org