Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
File: y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json)
Hash identifier: xQGiB2FK5pb7zdxxTRIcYgK9YMVgWYJ1xiykwClxnqs=
Subject key identifier: 5E:A1:41:B6:BD:B1:D7:80:F4:FD:E4:8E:BC:87:F7:8D:31:51:9B:71
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial: 0194BB6051C95E372172D2553AF72761E9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
Manifest number: 038B
Signing time: Fri 31 Jan 2025 08:00:39 +0000
Manifest this update: Fri 31 Jan 2025 08:00:39 +0000
Manifest next update: Sat 01 Feb 2025 08:00:39 +0000
Files and hashes: 1: qeRkAxuKV7jDoBRtnwhgHvVO2oU.roa (hash: AbAyYkMckXNzAm/R63UZOCSEewsBDfH65FR66tVjq2s=)
2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: IVlOQC0o9lGpEjnkPbGCH4FKhHniBrFDtk7qEkqQvro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:51:c9:5e:37:21:72:d2:55:3a:f7:27:61:e9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Validity
Not Before: Jan 31 08:00:39 2025 GMT
Not After : Feb 1 08:00:39 2025 GMT
Subject: CN=5ea141b6bdb1d780f4fde48ebc87f78d31519b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:95:89:52:61:02:c9:1f:54:20:15:c1:33:
e5:be:d6:3e:e5:f2:4e:f2:4d:13:5c:56:cd:5f:03:
30:7a:8d:59:b0:4b:a4:5b:3f:46:8c:ad:4c:3c:8c:
a1:b0:40:a0:51:8b:5c:6a:c0:90:82:49:d2:e1:f4:
7c:78:b5:92:a0:d0:12:94:53:12:e4:20:ee:09:e6:
d8:f3:b7:5e:ab:28:ff:a7:06:55:a9:98:f6:4f:a4:
26:ca:5f:b0:c0:9b:22:db:62:92:c1:45:ea:e5:73:
10:7a:9f:93:ff:cb:b8:c9:6f:e4:59:b3:86:a7:5b:
ec:8a:a5:27:83:19:e2:db:8d:7c:7e:79:60:cd:a4:
1b:fd:6e:ad:c1:de:52:19:c2:b0:1a:2e:ad:45:a2:
8f:bc:dd:2e:99:b9:4d:48:c0:14:51:ec:8e:96:8d:
f7:62:1c:25:b4:94:a8:9e:b9:8d:77:59:72:3a:e2:
3a:b7:3d:e1:fe:f8:13:ae:24:5a:8f:39:55:d0:ba:
3e:19:8f:d6:66:ab:22:b1:60:a3:95:ac:33:4c:d3:
48:b7:12:df:70:32:cd:32:2b:78:d6:b3:10:3e:1d:
b7:86:17:ef:7f:ff:c1:60:49:6c:d4:e9:fa:3b:6a:
b9:71:00:e8:e8:d7:31:38:82:9e:93:52:97:33:97:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:41:B6:BD:B1:D7:80:F4:FD:E4:8E:BC:87:F7:8D:31:51:9B:71
X509v3 Authority Key Identifier:
keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f2:5a:d9:e3:bf:10:ec:54:fe:7a:c6:1b:20:40:a5:08:c3:
38:e2:ec:d3:89:0e:96:b0:70:0d:0e:5b:12:2b:da:3f:29:e7:
32:a6:2c:ed:09:55:1b:ae:e0:91:be:ce:f8:bd:bb:d5:97:a3:
6d:44:aa:81:85:9a:33:39:71:04:6a:36:20:1e:e7:c6:34:f6:
8d:16:90:a5:23:a0:f9:69:6f:e1:24:1e:3d:7b:97:b5:e2:1a:
55:08:c3:4f:e1:dc:50:d1:6d:fe:8f:9e:e2:59:e5:bf:41:e9:
ff:38:35:8c:cd:b5:a0:b7:60:10:0c:21:be:dc:54:ba:82:19:
0e:3e:44:21:ab:12:c0:37:ea:fa:6a:86:f6:18:3c:85:1d:8e:
83:d4:e7:d3:1c:cc:fa:21:3d:5e:e9:ea:1e:37:e2:91:4f:c6:
78:7e:a4:82:8e:8c:69:5b:17:13:39:57:3c:b8:1b:56:af:92:
10:c0:6b:52:6b:11:61:9f:2f:67:06:76:29:97:f7:47:13:38:
fb:ba:b3:04:90:ac:02:01:e1:67:b4:f9:7e:6b:d9:82:75:65:
0a:b0:34:95:8a:fa:2b:c5:97:7b:14:95:ba:27:46:52:aa:f8:
52:b4:75:2b:d7:eb:4d:fe:03:9d:14:1f:3b:7b:14:cc:99:28:
1c:7f:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:37 2025 by rpki-client on console-fra.rpki-client.org