Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File: Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier: czEnpxRc0i+HSf9ui4aRWRhTQD33K4L4/6tk4HsbtkU=
Subject key identifier: BB:A8:E6:13:33:69:F8:9A:C5:97:73:9D:E6:40:F4:4A:05:79:54:D6
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial: 0194BB974FDB4A1F083C740E254806BC9A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number: 135A
Signing time: Fri 31 Jan 2025 09:00:43 +0000
Manifest this update: Fri 31 Jan 2025 09:00:43 +0000
Manifest next update: Sat 01 Feb 2025 09:00:43 +0000
Files and hashes: 1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: EJri66T8VX3p1MCe/dAo7+pTejOwB669tOTmuiBM7hM=)
2: trc9WRrx0GcsdoyWUNx1ByDuLOs.roa (hash: O5foXyUGS0pgYakUN+dT6VqKLJZgwkNIaZ4jTeLOo7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:4f:db:4a:1f:08:3c:74:0e:25:48:06:bc:9a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Validity
Not Before: Jan 31 09:00:43 2025 GMT
Not After : Feb 1 09:00:43 2025 GMT
Subject: CN=bba8e6133369f89ac597739de640f44a057954d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:e4:86:f4:45:77:f1:28:78:18:62:cc:66:
f3:04:f3:f1:c2:0b:d6:21:4e:e9:bf:01:8c:c6:89:
b8:0b:cf:4f:c6:2c:fe:cc:91:ca:30:7c:67:50:2c:
f9:2d:54:9b:17:46:b1:2f:d2:04:de:a7:95:92:64:
bc:44:5d:d6:48:40:dc:a6:e4:af:45:7c:5c:af:4b:
71:23:6f:ed:02:5b:21:bd:10:a3:0a:44:c5:e8:24:
57:31:40:5e:fe:d0:49:65:9e:4f:4e:75:23:97:af:
da:b6:8b:94:5a:8a:e0:f0:65:49:82:21:a8:97:a7:
98:bc:5c:5c:75:3e:2b:2c:25:91:06:6d:88:74:26:
8b:ff:61:b8:04:a8:11:33:44:bb:73:f3:44:56:f8:
e6:d8:b3:57:2c:e5:22:d5:59:6e:17:24:e7:5a:30:
bb:a0:62:02:f1:1d:5d:27:78:1c:ae:4f:fa:fd:71:
ed:84:2f:5d:c8:58:c3:53:3b:f5:60:20:e0:ac:3d:
96:9e:2c:e8:fe:73:e6:0f:ed:91:60:9f:01:80:58:
1f:2f:7c:87:22:5f:70:bb:76:e3:c1:23:11:5c:78:
a4:70:de:ec:24:d4:82:8a:1d:04:d2:eb:00:fc:51:
40:c8:03:82:5b:4f:63:8c:11:31:45:b9:fb:16:a6:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A8:E6:13:33:69:F8:9A:C5:97:73:9D:E6:40:F4:4A:05:79:54:D6
X509v3 Authority Key Identifier:
keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b0:26:ac:84:cf:8b:36:04:6c:94:2f:7b:b1:bb:58:07:54:
9d:93:61:89:e9:6b:ce:df:13:4e:fa:1f:3c:29:f7:84:1d:e0:
81:04:82:9f:bf:62:7c:d7:a6:12:84:66:26:ee:94:1c:01:d3:
56:ca:c2:5c:a8:d5:89:62:64:67:87:68:a4:d4:ff:db:67:9a:
72:e0:41:1b:c0:9a:ea:7f:e4:55:d1:c5:5d:c1:53:26:56:f9:
46:39:1c:bc:b2:a6:7c:f8:e4:3a:62:5f:b4:0f:7b:7c:2e:8b:
3a:8d:9e:f3:68:c9:be:5c:fb:a3:d7:9a:96:8a:b5:b6:85:09:
01:3f:e3:12:98:2a:86:b7:29:18:8b:72:d9:d6:a0:1f:39:0c:
34:f2:0c:ae:29:32:11:3e:5b:3c:48:d5:1f:6f:9b:8b:6f:7e:
4a:19:84:37:b9:87:3c:c0:f3:cf:85:6a:a5:d7:f1:fb:86:92:
10:8e:07:4d:98:a5:2e:10:f6:fb:5c:8d:3f:5c:1c:fd:46:ab:
24:0b:03:58:7a:b6:35:6b:ff:2f:b8:80:c2:cb:0d:8f:fb:ec:
f6:e0:fc:ca:d6:a1:84:83:5a:85:cb:e3:58:db:84:b4:69:72:
cf:e8:42:c1:a4:05:09:80:f6:a6:83:ba:cb:ca:a2:bd:a1:0c:
04:57:f2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:47 2025 by rpki-client on console-fra.rpki-client.org