Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: Z6+dRdXohgfPp3PGVw18f69fak3h0R09iYbwzwGc0eg=
Subject key identifier: 8C:6A:11:C5:62:4A:B7:72:97:B3:EC:BD:33:53:4D:03:B6:B5:6D:2E
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 0194BB974B284D37C38E527AF22BE8292FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 0862
Signing time: Fri 31 Jan 2025 09:00:42 +0000
Manifest this update: Fri 31 Jan 2025 09:00:42 +0000
Manifest next update: Sat 01 Feb 2025 09:00:42 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: RLCQ9w+Y63ptTLRGMkYH/+7tdT86EpVZ6uR5xi3ulAA=)
2: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (hash: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:4b:28:4d:37:c3:8e:52:7a:f2:2b:e8:29:2f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Jan 31 09:00:42 2025 GMT
Not After : Feb 1 09:00:42 2025 GMT
Subject: CN=8c6a11c5624ab77297b3ecbd33534d03b6b56d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:38:9d:f0:bc:a9:1f:25:53:ef:84:11:cd:
4a:89:4e:69:8c:f1:c3:0a:5c:a6:08:0c:d0:94:0f:
ce:f7:5b:50:47:f3:c4:ea:16:79:f6:45:3e:e1:b5:
b2:64:d6:e4:2f:81:7e:d1:97:6d:d0:bd:26:4e:c0:
08:07:d1:76:a0:b5:72:d2:4a:a1:94:c0:c6:a0:bf:
1c:e4:8d:8b:a0:99:1e:32:ba:d2:5e:df:c1:13:46:
07:d7:5a:60:d7:b2:e5:9b:88:4a:7b:7c:bd:bd:d7:
42:38:ca:ed:3e:e3:c0:f8:90:64:9a:cd:4b:61:4b:
3b:96:72:00:61:46:c7:ea:d4:90:bd:77:be:30:23:
b9:58:e2:d4:89:40:2f:66:07:bc:8c:86:80:35:a6:
19:1a:51:e7:e2:73:20:8c:43:9e:28:b3:cd:30:f8:
1b:62:bb:c9:a6:43:e8:a7:12:5a:53:6b:2b:f3:35:
6e:b4:3b:f6:98:c2:7c:90:aa:9c:ab:eb:28:7f:3f:
76:d0:8c:17:7d:bb:a9:51:d8:39:6d:7b:21:32:af:
a7:57:c5:d6:8c:c2:19:73:48:67:28:6b:42:67:f8:
e3:00:ee:c2:b7:86:92:84:17:61:17:46:41:b9:29:
0d:07:88:96:48:45:ff:79:a7:ea:ca:5a:f5:6a:1b:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6A:11:C5:62:4A:B7:72:97:B3:EC:BD:33:53:4D:03:B6:B5:6D:2E
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b8:2b:32:93:ad:7d:ff:6c:65:17:46:76:4f:bc:b8:6c:4d:
40:6a:8e:8f:f3:a6:fc:ae:b5:0f:19:c9:ee:31:f0:a3:c5:a8:
5b:ff:f0:b4:57:67:85:3f:8a:59:46:a3:6a:3a:58:5a:89:42:
3f:13:b7:5e:a2:a0:63:18:51:7f:64:74:1e:10:fc:ee:ea:68:
55:8d:26:0f:1a:40:a2:35:23:1e:f7:74:ea:f0:49:0d:66:b6:
91:40:3b:51:70:43:af:1e:f1:4f:88:a7:0e:9d:92:26:fb:7c:
40:00:1f:62:b0:f5:dd:07:59:7d:59:0e:dc:1d:8c:79:64:9a:
da:35:05:c9:0f:c3:b7:b4:6e:3e:6a:88:54:89:81:8b:f9:97:
89:fd:7e:84:32:41:01:e4:0e:f7:bc:2b:93:27:57:e5:a1:31:
3f:ec:a2:c6:da:3e:3f:32:27:56:e2:f4:47:76:06:a7:9e:55:
57:55:73:74:96:02:57:5a:2c:c9:6a:61:97:d2:95:ec:2e:c6:
89:a0:d6:33:a8:fc:57:70:31:c7:97:42:b8:09:e5:33:4a:b5:
63:0d:94:ba:b5:22:0f:b5:53:47:55:d2:14:c1:2d:de:59:3b:
0a:56:12:ec:a0:4b:09:82:00:af:36:ee:a3:ee:86:b2:80:83:
66:7f:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:42 2025 by rpki-client on console-fra.rpki-client.org