Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: b57pqK4D0QISvfZlDdTglRb2y6ek5ELqr9GF+e2I9pA=
Subject key identifier: 95:7C:56:6B:AD:A6:21:AB:9B:8A:BB:E4:B0:20:FA:A7:A2:79:C2:EB
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 0194BA84BA214657D64618AF649EE6F2584B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 0A37
Signing time: Fri 31 Jan 2025 04:00:48 +0000
Manifest this update: Fri 31 Jan 2025 04:00:48 +0000
Manifest next update: Sat 01 Feb 2025 04:00:48 +0000
Files and hashes: 1: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: pZTzJ2Z4ChTKHCbmEvtInRoybYXT6Mq1JV9UF3MzPY4=)
2: kVcJYJ6Q63B4lKtQ5vKu6QeoxFU.roa (hash: zBFFe6GTU3Rj12iW+TDrkgjiFgVWN+v43RC3XAW3nrQ=)
3: xBRxdmpfvYOwV2CG-TGZUb7lV80.roa (hash: BYeaby5+zBYzTYQvAAICT6cMk4h5pLzaoyyqUhm5i9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:ba:21:46:57:d6:46:18:af:64:9e:e6:f2:58:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jan 31 04:00:48 2025 GMT
Not After : Feb 1 04:00:48 2025 GMT
Subject: CN=957c566bada621ab9b8abbe4b020faa7a279c2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:f5:a8:04:26:06:23:a4:43:29:4a:c3:cf:
05:d7:ef:b7:98:fb:ae:8a:78:b9:90:80:f1:0d:59:
07:75:4f:0f:d5:50:b7:3b:f8:80:ab:2d:f2:4a:aa:
07:ec:f5:86:60:b1:3d:79:ca:7e:2f:f0:aa:bf:e4:
19:21:70:ee:e0:58:23:bf:86:1c:e3:27:42:99:a4:
b7:9f:4e:70:6b:59:34:f6:78:fe:66:a7:61:23:8e:
87:d1:93:83:d2:27:f9:df:32:64:25:65:57:55:8b:
ac:e4:d3:61:d0:54:ad:2a:ae:9b:1f:52:7d:c0:ac:
4a:41:9a:d7:03:c9:da:af:ce:b0:90:59:de:43:c7:
04:a0:f7:23:e4:07:b7:65:df:6a:41:c9:6c:b4:79:
e9:44:53:63:8b:55:42:df:9f:3d:43:e7:21:47:ab:
2c:57:00:f3:24:a8:eb:57:0c:8c:46:21:46:e6:93:
d3:89:58:b3:62:8c:3b:cf:eb:04:28:b9:3f:46:b2:
66:13:9f:a4:f1:92:67:a9:f6:c1:a3:65:22:4e:d1:
a8:b6:94:cc:d4:c5:7b:57:44:9f:08:ac:dc:eb:ee:
2a:05:59:b8:f1:d7:97:e3:c0:bd:50:3d:57:d0:7b:
8a:5d:7c:13:6a:3b:d9:cd:79:51:e1:9f:6f:3c:0b:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7C:56:6B:AD:A6:21:AB:9B:8A:BB:E4:B0:20:FA:A7:A2:79:C2:EB
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:38:82:75:c0:bd:67:68:37:07:34:9f:cb:c9:e0:08:48:58:
0e:ba:dc:bc:56:7e:0d:7b:f6:c5:03:32:74:d8:01:55:22:c1:
0e:bd:67:62:bd:6a:c4:06:59:36:a2:85:75:78:3d:28:f0:5b:
2c:19:39:53:d4:dc:39:82:17:64:39:5e:f0:0d:af:05:df:e9:
92:3f:5a:4d:bb:90:40:8e:a0:d4:79:b0:25:0c:2d:83:40:bd:
80:92:32:34:6e:e6:c3:20:f0:99:76:f3:e7:b8:86:10:7b:92:
4f:b5:cd:d6:aa:bc:28:5a:b6:85:4b:f1:65:b8:d9:e5:9b:64:
29:8f:1b:f5:56:7c:31:ca:3a:99:c4:11:9f:fc:47:78:31:15:
cd:21:96:17:78:2b:6e:14:03:57:5c:bc:a5:b2:d6:7c:3b:bb:
80:aa:09:5a:99:e7:11:7c:78:37:ae:eb:e8:84:3f:46:00:b4:
17:01:28:19:4d:d7:37:c8:49:c6:fc:af:9c:bd:94:d4:9f:e5:
30:83:11:e1:18:92:0e:a8:a2:ce:e3:f6:eb:c7:fa:71:3c:ae:
7a:f2:57:b4:df:c2:cf:07:98:c2:60:0c:c1:a6:37:c8:4c:0f:
de:c5:2e:6a:07:f4:bd:bd:42:9e:22:30:61:a1:cb:7f:f4:b9:
14:30:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:58 2025 by rpki-client on console-fra.rpki-client.org