Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
File: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft (raw, json)
Hash identifier: OQxqAw38ZCUhJ9EKIvFxaZsDi4fEzG5baQUgC2nieUo=
Subject key identifier: DD:03:3F:24:12:3C:41:DF:E9:C6:0F:37:D5:8B:1C:54:34:8B:1C:08
Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Certificate issuer: /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Certificate serial: 0194BB291BC2952721884A2623485C9F5EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
Manifest number: 0888
Signing time: Fri 31 Jan 2025 07:00:20 +0000
Manifest this update: Fri 31 Jan 2025 07:00:20 +0000
Manifest next update: Sat 01 Feb 2025 07:00:20 +0000
Files and hashes: 1: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl (hash: xyAskEnuLDGKrl/EBNuqAau4aj+S0nIS38JTRnMiIsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:1b:c2:95:27:21:88:4a:26:23:48:5c:9f:5e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Validity
Not Before: Jan 31 07:00:20 2025 GMT
Not After : Feb 1 07:00:20 2025 GMT
Subject: CN=dd033f24123c41dfe9c60f37d58b1c54348b1c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:d9:94:8a:67:35:5f:aa:32:bc:20:18:73:
cc:3a:fe:61:b7:f5:43:c7:45:25:11:f8:3b:db:78:
ec:55:6d:f5:e6:0f:65:8b:9f:1f:28:3b:01:55:45:
1c:81:bd:4c:5f:13:7b:9b:9d:e4:5e:24:80:95:68:
fb:c6:94:34:b0:57:6e:df:d9:45:b2:c1:01:9d:74:
60:88:44:bc:14:99:8d:f0:b7:50:21:85:2a:dc:20:
37:d6:f9:b7:1c:89:41:e1:6f:1b:98:d3:fe:0a:eb:
cb:4f:ce:80:bf:f2:e1:1c:38:3b:fd:f8:ad:63:76:
ce:30:6d:fc:a2:c2:03:3b:bb:f7:76:48:de:c5:0b:
b0:2d:f9:d8:2e:72:29:e5:d6:5f:f4:dc:63:7c:c0:
8d:0f:5a:1a:63:db:9b:d4:5d:de:1d:24:b7:9f:5d:
7e:0f:c5:16:8c:c5:c6:09:7f:16:96:b0:d3:dd:b7:
34:f4:18:b3:50:38:39:4c:de:77:6e:10:7a:61:d9:
38:1a:4f:e5:13:4b:e9:5a:7a:a3:a8:31:da:7f:80:
ff:fb:6a:4c:8a:e9:18:9b:23:e8:1d:fd:53:3a:f8:
e6:93:f7:0e:df:9f:c9:73:b5:2d:f3:b9:c1:dd:9a:
6c:9b:03:91:a2:72:2f:62:42:45:8e:04:f5:cc:e5:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:03:3F:24:12:3C:41:DF:E9:C6:0F:37:D5:8B:1C:54:34:8B:1C:08
X509v3 Authority Key Identifier:
keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:76:da:91:3a:7b:66:ce:2a:21:24:a1:a2:dc:56:52:d6:55:
6b:76:ae:aa:c7:46:67:fb:fc:6f:45:6d:9d:c9:d6:05:a4:66:
78:15:41:cd:a6:a5:6e:14:b1:a7:f1:03:c8:c0:cc:0d:2d:e5:
3d:a1:dc:2b:05:98:7d:12:75:07:17:99:72:32:12:6a:6b:22:
0a:70:17:d0:a7:7b:bd:2c:9b:48:77:ec:8f:fc:51:c7:fe:61:
74:6e:9c:19:d6:00:40:dc:ba:4c:60:93:3f:dc:66:eb:8f:46:
d3:0b:c4:43:65:82:61:7a:dc:eb:f6:3b:36:8c:c0:7b:52:ab:
9d:fc:40:97:d5:5f:ae:52:f8:2f:95:c6:7a:4b:35:c6:38:66:
d5:42:08:05:bc:4b:27:74:4e:a2:ff:31:92:f7:97:76:c5:f6:
52:7c:91:e4:8b:de:59:06:91:cd:e1:8a:66:fc:c0:6d:f8:28:
03:64:82:a7:aa:26:74:57:b0:41:09:69:f7:f0:c7:92:c9:e3:
11:dc:4c:d2:a3:17:0c:fb:be:9d:86:3c:d7:4d:3f:28:38:89:
86:55:a9:a1:56:67:a1:07:9e:80:e3:73:48:b1:da:07:08:e9:
15:62:69:ec:5d:f2:f7:f5:1d:43:a4:94:e4:7d:3e:09:1c:ad:
e6:ca:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:13 2025 by rpki-client on console-fra.rpki-client.org