Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
File: yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft (raw, json)
Hash identifier: mUqxHjVaPSJKNoCWr0fxj8M7u6+qMerpyzlChttHVY4=
Subject key identifier: E5:AF:22:CA:9F:8C:2A:DA:4B:0E:24:84:74:A5:72:F0:A1:D6:00:82
Authority key identifier: CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
Certificate issuer: /CN=ca37843f0752224459e6034569a217c8b611564b
Certificate serial: 0194BB96F8D62FFBC9BDD38F2CCB71A3D852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 09:00:20 +0000
Manifest this update: Fri 31 Jan 2025 09:00:20 +0000
Manifest next update: Sat 01 Feb 2025 09:00:20 +0000
Files and hashes: 1: VUGB_aCyOLA1Q6JSyAIK8Xkmymc.roa (hash: IOfuqkQd8JjyCobA5qA+5uEdvI2UFX4aZo+Aq0Rs/7c=)
2: Wp47mYbGIM1Wn1TH4UytNLnpCRE.roa (hash: s3jKeR589toj6Nv3VDplJDroNH801WsVAu93zGQYjRo=)
3: yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl (hash: gP+LsF9KfVTooQkDuHtfcIn2lx+JSoG9JQbYWIM6wHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:f8:d6:2f:fb:c9:bd:d3:8f:2c:cb:71:a3:d8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca37843f0752224459e6034569a217c8b611564b
Validity
Not Before: Jan 31 09:00:20 2025 GMT
Not After : Feb 1 09:00:20 2025 GMT
Subject: CN=e5af22ca9f8c2ada4b0e248474a572f0a1d60082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:6b:fb:7d:76:e3:c4:b8:d4:67:a6:ce:a1:
bd:21:07:de:8c:99:3f:84:07:af:c5:09:50:23:f6:
70:c8:34:9b:cd:64:90:62:96:f2:0f:e4:d6:3a:ea:
d4:2b:05:2d:a6:78:8d:03:37:bd:dc:b3:5f:2d:c7:
9c:e8:ef:e1:1a:7f:bd:fa:7f:16:97:64:ed:e0:a0:
b1:6e:c1:99:9b:7e:ce:74:25:ab:e8:0d:34:6a:e5:
fd:8b:62:1c:85:5f:47:71:5e:f5:0a:93:2d:59:6b:
48:1b:7b:db:8f:30:b0:3e:12:69:34:67:75:73:da:
cb:e0:e1:09:0b:09:79:9f:77:fe:07:b5:87:7b:39:
4f:27:bb:08:57:3c:4d:21:37:1f:fa:7d:e6:c2:07:
3d:2a:57:c5:f1:39:72:22:85:b6:74:78:cb:1b:d0:
79:5e:4e:94:b5:40:b7:01:43:89:66:7a:54:a6:96:
81:53:ad:f9:67:a6:ca:35:55:ef:69:93:ef:84:97:
5d:6a:7a:05:1f:ff:f3:b2:2a:43:10:e6:c7:35:5e:
5e:c1:28:f4:c1:8e:a0:f0:91:b4:d2:af:ac:70:9a:
db:99:b2:a7:f2:8d:4c:38:12:91:e7:91:6d:66:a6:
60:74:14:c6:ad:89:c0:e0:cd:eb:b1:0e:63:8f:49:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AF:22:CA:9F:8C:2A:DA:4B:0E:24:84:74:A5:72:F0:A1:D6:00:82
X509v3 Authority Key Identifier:
keyid:CA:37:84:3F:07:52:22:44:59:E6:03:45:69:A2:17:C8:B6:11:56:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjeEPwdSIkRZ5gNFaaIXyLYRVks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d716cd-d79f-4484-9685-8fe784e31e5d/1/yjeEPwdSIkRZ5gNFaaIXyLYRVks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:83:27:e9:47:a3:4b:c1:3c:56:f0:c0:ee:34:a1:1a:33:82:
d1:4c:0d:3a:d4:2e:52:eb:93:a1:d4:ae:2d:cd:4d:ee:7d:3c:
95:37:67:9f:d4:6b:f2:dc:5e:f0:95:67:94:ec:45:37:96:a7:
3c:b3:6a:93:7d:37:86:5e:af:3e:61:08:77:e0:02:ee:99:6c:
77:38:eb:1e:4b:8c:5d:f2:86:5a:db:1b:8f:25:a3:5e:6d:cc:
04:e5:d4:57:b5:6d:90:72:2a:ee:47:28:32:98:e5:21:82:54:
43:1b:9a:6e:5f:13:99:18:f1:47:c9:39:1a:bb:6f:64:65:30:
01:92:2d:d4:0f:32:ea:a1:bc:94:3e:79:60:47:14:10:42:e6:
ba:97:f8:c2:f9:dc:9e:46:55:2d:e8:0f:79:6c:45:8e:91:2a:
3d:9c:00:fb:94:67:d5:71:5e:4f:82:ec:6d:86:a5:a2:5f:97:
d9:91:d3:49:2c:ad:b6:cc:c0:c8:9f:51:83:f5:f1:7c:5c:c7:
a0:1a:be:da:ea:90:c8:96:5b:7a:af:02:a6:52:c9:cc:3d:90:
77:15:e4:04:42:8c:a2:e5:1a:bf:55:0a:8b:89:9e:64:2c:7e:
51:3c:65:f6:1b:91:ef:5e:9f:3c:10:ae:53:b3:c5:b0:81:c8:
0a:ff:ec:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lvjWL/vJvdOPLMtxo9hSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzc4NDNmMDc1MjIyNDQ1OWU2MDM0NTY5YTIxN2M4YjYx
MTU2NGIwHhcNMjUwMTMxMDkwMDIwWhcNMjUwMjAxMDkwMDIwWjAzMTEwLwYDVQQD
EyhlNWFmMjJjYTlmOGMyYWRhNGIwZTI0ODQ3NGE1NzJmMGExZDYwMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fxr+31248S41GemzqG9IQfejJk/
hAevxQlQI/ZwyDSbzWSQYpbyD+TWOurUKwUtpniNAze93LNfLcec6O/hGn+9+n8W
l2Tt4KCxbsGZm37OdCWr6A00auX9i2IchV9HcV71CpMtWWtIG3vbjzCwPhJpNGd1
c9rL4OEJCwl5n3f+B7WHezlPJ7sIVzxNITcf+n3mwgc9KlfF8TlyIoW2dHjLG9B5
Xk6UtUC3AUOJZnpUppaBU635Z6bKNVXvaZPvhJddanoFH//zsipDEObHNV5ewSj0
wY6g8JG00q+scJrbmbKn8o1MOBKR55FtZqZgdBTGrYnA4M3rsQ5jj0nNCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWvIsqfjCraSw4khHSlcvCh1gCCMB8GA1UdIwQY
MBaAFMo3hD8HUiJEWeYDRWmiF8i2EVZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUt
OGZlNzg0ZTMxZTVkLzEveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9kNzE2Y2QtZDc5Zi00NDg0LTk2ODUtOGZlNzg0ZTMxZTVk
LzEveWplRVB3ZFNJa1JaNWdORmFhSVh5TFlSVmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4Mn6Uej
S8E8VvDA7jShGjOC0UwNOtQuUuuTodSuLc1N7n08lTdnn9Rr8txe8JVnlOxFN5an
PLNqk303hl6vPmEId+AC7plsdzjrHkuMXfKGWtsbjyWjXm3MBOXUV7VtkHIq7kco
MpjlIYJUQxuabl8TmRjxR8k5GrtvZGUwAZIt1A8y6qG8lD55YEcUEELmupf4wvnc
nkZVLegPeWxFjpEqPZwA+5Rn1XFeT4LsbYalol+X2ZHTSSyttszAyJ9Rg/XxfFzH
oBq+2uqQyJZbeq8CplLJzD2QdxXkBEKMouUav1UKi4meZCx+UTxl9huR716fPBCu
U7PFsIHICv/sBg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:27 2025 by rpki-client on console-fra.rpki-client.org