Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: IqXzC8LEoTPBalosjucrBC8+4fAAM5pMEWo7N+OQh9E=
Subject key identifier: 38:4A:39:63:09:55:FA:01:A0:37:F4:A2:67:02:1A:80:5E:73:86:41
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 0194BB5FF9B71AB2F746294ECDF88D2AB715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 1441
Signing time: Fri 31 Jan 2025 08:00:16 +0000
Manifest this update: Fri 31 Jan 2025 08:00:16 +0000
Manifest next update: Sat 01 Feb 2025 08:00:16 +0000
Files and hashes: 1: lIzlzaB9MfYSOvJtbmvms4JbSXQ.roa (hash: 7pNuzEMq5SGi7oY7hUTVuLhRAftrVbTi7LJ5DaYy2Z4=)
2: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: 9UiwZZhOfMBotCDnYj0E8//uptjE0YPZ7NXSFFaKgEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:f9:b7:1a:b2:f7:46:29:4e:cd:f8:8d:2a:b7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Jan 31 08:00:16 2025 GMT
Not After : Feb 1 08:00:16 2025 GMT
Subject: CN=384a39630955fa01a037f4a267021a805e738641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4d:c2:66:80:16:10:a1:42:af:bd:00:bf:e7:
8c:17:9e:ba:37:70:5c:d6:b8:ca:ac:cf:8b:04:20:
1c:94:14:c1:fa:c9:19:7a:99:83:f5:11:3b:a3:a4:
a2:1c:92:66:86:06:48:2c:3c:c8:85:0d:83:7f:af:
4d:cf:d6:69:6d:9c:a7:5b:c6:42:f2:ac:03:fa:79:
bc:db:6e:b2:44:a8:60:2d:fb:01:40:a9:fe:d3:66:
d5:03:8f:d2:59:dd:54:72:ca:b2:d6:b9:e1:87:e9:
f3:82:b8:96:a7:0d:7f:18:50:10:a1:09:bd:fa:58:
c4:39:ca:dd:64:d4:00:f6:40:78:3e:87:3d:8b:70:
23:52:5d:a0:56:0d:fe:58:67:bd:35:b9:56:05:65:
2d:88:70:04:6e:97:db:7d:9c:ca:cd:42:ee:85:13:
38:95:a8:ff:bb:11:21:52:88:7d:b0:53:6e:27:80:
b4:0c:12:2b:b1:8e:37:fa:30:34:45:d8:11:4d:d5:
84:d7:55:b6:52:b1:1b:e3:0f:9c:e0:0a:9b:11:05:
81:7e:52:11:47:ae:6c:ef:a5:f5:b1:1f:6a:e4:46:
09:33:14:ae:91:7a:6f:e9:f7:8a:39:51:05:39:b2:
aa:73:55:1a:02:49:22:91:e9:c6:b7:5a:b9:bd:9c:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:39:63:09:55:FA:01:A0:37:F4:A2:67:02:1A:80:5E:73:86:41
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7b:6a:84:cc:14:d4:c4:f9:4c:ba:27:eb:59:b3:46:eb:6f:
b0:74:3e:0b:56:a2:6b:bc:15:e6:3e:4d:98:5c:96:c7:59:e3:
5d:27:af:42:1b:78:2a:95:5d:56:24:09:a9:47:10:2e:b4:13:
97:b4:b4:14:60:93:cd:8f:55:9b:b8:50:78:69:fd:e4:11:5d:
d4:56:68:0e:72:2f:4a:34:98:63:76:ac:dd:17:bb:dc:63:eb:
fe:06:80:2e:0c:11:f4:de:51:2e:8e:22:a9:0a:bb:df:61:ee:
07:32:14:36:fd:f5:0b:0d:d4:b8:ba:6d:62:2a:2c:8a:a5:96:
ab:90:2b:38:7a:a3:af:bc:59:45:73:4f:e2:c5:23:29:ab:29:
62:b3:8b:7a:2b:70:ff:aa:91:20:cc:10:08:cf:c1:0e:f6:d2:
60:bb:31:92:a3:1d:ef:8c:7d:b1:b8:d7:35:84:c9:fa:2c:a5:
59:cd:b7:a1:ba:c8:36:a1:8f:bc:0b:2f:9f:5d:f8:8b:b8:d4:
ad:b6:e2:a4:b4:44:4b:f4:bd:ba:07:2a:e1:bc:49:ef:6b:01:
d4:50:d6:67:09:ed:1e:0c:d6:3c:31:25:f5:cf:eb:e9:65:12:
90:3f:6d:9a:2f:28:8c:43:63:2b:a8:a4:d1:37:38:01:d0:f0:
21:75:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:59 2025 by rpki-client on console-fra.rpki-client.org