Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File: y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier: P0QMU9PbpVPOcaudUGYalgtlY/H0sLH8ICZcqrCMiFs=
Subject key identifier: 23:E0:49:23:84:41:B7:BB:E4:E8:5D:BD:E4:C7:88:9B:58:B9:FD:91
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 0194BAF2499BB7AAE69C8649132BA1458955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 06:00:28 +0000
Manifest this update: Fri 31 Jan 2025 06:00:28 +0000
Manifest next update: Sat 01 Feb 2025 06:00:28 +0000
Files and hashes: 1: dUXiZWgEMzgw5vFZ8qDaH6XmlYU.roa (hash: M6xcVpwF4WkFbvgKn4KRPQKsmRd0Zva6dQ1TxO+Djpg=)
2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: ryONjyN3i+Iu2LkqO1GJWRnYQ8yh+bsc4RUg4YpfI/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:49:9b:b7:aa:e6:9c:86:49:13:2b:a1:45:89:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Jan 31 06:00:28 2025 GMT
Not After : Feb 1 06:00:28 2025 GMT
Subject: CN=23e049238441b7bbe4e85dbde4c7889b58b9fd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9e:25:86:b5:41:d0:5c:4b:7a:4b:b1:00:db:
bf:f8:db:b1:00:29:96:0f:39:20:9a:81:bd:ac:c6:
e3:76:62:71:66:2b:22:ca:ea:f2:7a:d8:a7:7d:89:
a3:25:b7:58:b9:e4:80:23:65:ca:50:39:f7:d3:5e:
7c:f9:75:20:64:03:91:2e:a5:57:93:f7:61:19:b4:
9d:53:e8:32:1e:1c:87:df:70:38:1f:d4:3b:cb:e1:
12:1f:36:a7:66:eb:5a:8c:8b:8f:80:70:28:83:1b:
a2:19:14:b8:67:9b:72:8a:b5:05:a7:f0:97:6d:5a:
96:80:f9:6d:94:c4:56:07:0a:28:37:6c:81:85:43:
b8:57:ef:c1:80:15:31:f4:99:57:bf:12:c4:73:e1:
77:e2:a8:31:57:bc:e0:a5:77:04:41:7b:65:d5:58:
f8:9c:cc:80:c8:17:65:e4:ad:c0:5c:27:2d:b7:13:
42:bf:a1:55:a1:77:df:03:98:72:c6:0c:48:2c:0b:
e0:63:46:6e:34:e4:a7:c0:5e:12:dd:57:a5:90:c8:
88:c4:9f:e5:97:63:82:b2:dd:90:60:70:24:c9:35:
a8:16:0f:f3:a3:8f:9d:0f:6d:04:15:38:15:3c:c7:
c6:1e:55:8f:a3:e4:5c:a6:ab:c9:e8:b3:60:f3:32:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E0:49:23:84:41:B7:BB:E4:E8:5D:BD:E4:C7:88:9B:58:B9:FD:91
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9b:ed:a8:91:44:3b:eb:fd:56:33:19:e9:0b:56:ad:f6:07:
20:be:f9:c6:22:34:ed:0f:83:5d:d3:1b:fa:0c:0d:28:49:5c:
a2:72:65:e1:a6:75:d1:d0:95:42:36:db:e3:6f:fa:83:09:20:
29:e8:f0:87:28:21:30:c3:1e:d9:08:a6:7a:5d:32:4f:60:b6:
af:73:c3:72:32:20:c3:64:0b:60:45:f2:16:5a:0f:44:80:b8:
40:79:1a:8e:f9:fd:27:a3:e9:cd:74:88:61:ef:2e:a3:de:3b:
39:c2:2b:fa:03:7e:6e:85:b1:f9:25:cf:f6:31:0c:4c:72:42:
56:6d:08:64:5f:fc:18:9c:eb:03:92:69:72:8c:19:ad:b6:66:
ff:3c:9a:67:6b:e1:44:f3:e9:ea:5b:3a:31:e7:3b:c1:64:9e:
a1:6f:db:60:c6:33:e0:8e:a2:5e:8d:3a:4b:2e:2b:2b:5e:76:
9c:2e:01:7a:68:c8:1e:b3:3c:a1:d5:7c:9c:4d:93:e0:42:80:
1d:b6:8a:e5:b3:42:c4:09:99:1f:51:e7:b0:3c:69:9e:c5:7c:
1a:22:87:a4:da:8e:df:24:1f:8d:9c:ae:74:70:ec:7e:71:89:
f1:b2:04:cd:a6:23:e8:03:7c:12:65:88:c5:d3:33:7a:16:ce:
9d:2d:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:48 2025 by rpki-client on console-fra.rpki-client.org