Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
File: YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json)
Hash identifier: iwjK9iJvj7GpTXiaYSQA4sBlJ/kqvGZg4bu5lokuGhg=
Subject key identifier: E8:D8:0F:17:D3:16:15:8B:CB:B4:91:05:3E:70:F7:8C:43:F1:9C:45
Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26
Certificate serial: 0194BABBAE17489EAFAD684D8DBD2DE0B126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
Manifest number: 0485
Signing time: Fri 31 Jan 2025 05:00:49 +0000
Manifest this update: Fri 31 Jan 2025 05:00:49 +0000
Manifest next update: Sat 01 Feb 2025 05:00:49 +0000
Files and hashes: 1: Wb7gIaowM175_4hbQACvXGxElnc.roa (hash: pkwDFkxfWqeO5qm1OaqoMf2SYa+I4A9Fn1qiqLC0gYE=)
2: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: WyxOfR7bPzsu3CbnwD7VC+LVpjLOOLeQQ5FBzogsb30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ae:17:48:9e:af:ad:68:4d:8d:bd:2d:e0:b1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602d570b542e7302885d367418df802f99494f26
Validity
Not Before: Jan 31 05:00:49 2025 GMT
Not After : Feb 1 05:00:49 2025 GMT
Subject: CN=e8d80f17d316158bcbb491053e70f78c43f19c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:f6:8b:33:1f:ee:a3:d2:f1:b2:58:c3:ea:
ed:04:d4:36:01:13:7a:5a:f3:6f:80:1c:73:80:44:
ce:5d:21:eb:f0:5b:39:79:b4:e7:47:88:8d:39:30:
4c:00:5d:b3:b1:e1:9a:28:78:b4:c3:e4:19:2d:b6:
57:dd:8c:35:ef:ef:db:09:72:ea:7c:21:01:9d:f4:
d2:e9:f5:c6:cb:a9:9c:ca:ee:84:63:52:5c:c5:f1:
77:01:06:a7:4d:3f:f0:d6:2a:69:f2:82:f3:a4:ae:
10:6c:c8:0e:58:02:b0:32:37:69:bb:d5:13:96:c2:
78:c6:6e:88:47:33:0d:44:54:b1:10:42:d6:a2:75:
4b:5f:06:ac:0e:98:d3:ba:f7:46:69:b4:00:68:f5:
b0:e2:80:4f:cb:3e:74:95:48:41:d9:b7:0a:63:56:
11:75:84:9e:b3:04:90:5e:b6:b9:9c:a0:ff:93:f2:
e1:9f:2a:8e:1d:9b:45:c5:51:78:19:22:c6:df:df:
e8:e5:29:c2:1b:62:8e:c0:ee:e1:c5:48:bc:85:eb:
b3:14:f9:81:23:8d:d1:2d:46:94:57:ba:dd:95:5a:
0b:25:a9:f5:16:9d:c8:01:1e:7a:66:9e:f2:d8:8c:
b5:94:cb:d0:aa:01:70:a1:c4:f2:a9:38:64:ab:14:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D8:0F:17:D3:16:15:8B:CB:B4:91:05:3E:70:F7:8C:43:F1:9C:45
X509v3 Authority Key Identifier:
keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e4:59:3c:4a:de:03:1c:fa:a1:ce:3e:09:8e:ae:03:82:82:
e7:32:84:00:de:b0:f3:2d:f1:54:57:b4:d1:c5:09:0a:32:af:
f9:15:d8:59:43:93:25:b2:2e:34:ad:40:1f:42:9e:17:41:7c:
2d:26:5d:ce:46:fb:9b:0c:78:be:b5:b1:ef:95:92:1d:66:f4:
e5:94:84:70:d9:00:3e:ee:3b:e4:28:73:fe:ef:25:c5:de:97:
06:5d:48:0f:8a:86:74:17:3f:2a:84:b5:2d:3d:75:6f:12:16:
15:d6:89:56:b3:08:fe:aa:a8:8f:28:10:ca:8d:ef:90:56:f1:
63:7f:0c:59:3b:f0:a6:6c:1b:4c:56:56:af:68:11:76:27:df:
18:4a:84:37:3e:7c:b6:e4:f4:01:3b:38:93:a6:e9:70:91:2f:
89:c4:25:87:1d:25:64:18:48:86:2b:32:c7:80:e2:f2:d4:01:
8e:4a:9d:7e:27:e0:ba:78:11:bd:5c:2f:79:1b:24:ab:ba:9a:
55:1b:99:9b:e4:5c:90:2c:68:64:a4:7c:ba:4b:74:99:26:b3:
40:a0:36:17:90:45:30:69:aa:6b:84:d7:9f:9a:51:2c:2b:0c:
19:c5:7a:ac:7f:8f:6c:09:0e:ba:59:85:ba:f4:d8:a7:93:fb:
5f:f2:0f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:18 2025 by rpki-client on console-fra.rpki-client.org