Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
File: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft (raw, json)
Hash identifier: 02Wqd8qgZA5iAuolMrvMdNYscTyitCfDrlOCQT2w0PI=
Subject key identifier: EB:FA:5E:85:FD:AF:13:2D:02:E1:6F:8E:2E:D0:13:D2:79:28:E4:4E
Authority key identifier: C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
Certificate issuer: /CN=c95998989fdb5a5f932147ad7162c63004e067a4
Certificate serial: 0194BA846D42FA17E34215B07439B9D5BB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
Manifest number: 090C
Signing time: Fri 31 Jan 2025 04:00:28 +0000
Manifest this update: Fri 31 Jan 2025 04:00:28 +0000
Manifest next update: Sat 01 Feb 2025 04:00:28 +0000
Files and hashes: 1: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl (hash: lbHDtGPqeclVSsDQARwlTseK5jT2HAPbCSuAY6a6BE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:6d:42:fa:17:e3:42:15:b0:74:39:b9:d5:bb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c95998989fdb5a5f932147ad7162c63004e067a4
Validity
Not Before: Jan 31 04:00:28 2025 GMT
Not After : Feb 1 04:00:28 2025 GMT
Subject: CN=ebfa5e85fdaf132d02e16f8e2ed013d27928e44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:32:14:a8:59:4e:ad:07:a6:4b:e1:0e:49:
1a:be:f2:c8:3d:3f:ee:50:f9:64:de:04:80:18:fc:
41:70:68:ae:a7:dc:ae:f2:34:ff:bc:a5:12:2d:c7:
c4:d5:ab:3a:8f:39:ad:a2:e7:de:9d:c8:87:2a:f7:
90:82:34:3e:4d:d7:49:1c:d9:3c:b5:06:79:a8:95:
a1:ce:f8:d5:e4:c7:72:a8:8b:5e:97:19:88:c8:ea:
2a:11:9d:ec:37:ac:2b:57:19:97:5c:9f:2d:fd:30:
51:75:73:77:24:e8:02:52:0c:6a:dd:ca:79:c1:eb:
b8:5a:e6:5e:0a:77:e8:85:57:ee:07:69:8f:84:ed:
58:e7:d1:be:ff:7a:c2:25:8d:af:72:8f:7c:ec:25:
65:68:0d:cf:8b:ca:78:da:af:44:04:0f:ea:aa:fa:
e9:7b:87:31:d3:df:4e:fc:90:e8:78:3e:3b:17:54:
71:09:a1:5e:80:2c:50:a7:9e:bd:50:26:b4:3f:7c:
fa:db:05:4a:fe:d8:e1:1a:36:7d:ad:83:dc:c6:2e:
36:83:cf:fc:3d:76:3f:2d:b7:df:a9:0b:46:ce:90:
fc:00:1a:84:0e:73:01:92:ba:51:68:72:fd:60:e4:
dd:f6:22:8e:a1:70:6a:17:52:d0:ff:75:50:7b:31:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FA:5E:85:FD:AF:13:2D:02:E1:6F:8E:2E:D0:13:D2:79:28:E4:4E
X509v3 Authority Key Identifier:
keyid:C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1a:c5:02:ad:d8:29:a8:71:09:ea:01:54:77:56:31:71:57:
ae:1c:57:82:7b:74:82:39:a6:1a:c0:69:95:fd:f6:dd:fd:41:
6d:b0:42:57:9a:8f:56:df:25:f6:0a:f6:f8:ef:34:b8:2e:73:
02:b8:22:cf:3a:5a:b6:a2:8c:c1:23:a7:07:63:5b:48:c8:f7:
b8:a8:66:49:c3:e0:5b:5c:a5:78:2c:c3:33:8d:c2:c4:e4:41:
16:af:cf:8c:bd:f0:f8:a5:95:f1:6d:53:36:c3:29:fb:d2:79:
d3:35:a4:a0:93:92:99:d3:90:2d:61:fe:3f:97:8e:04:73:2e:
c9:14:9f:94:6e:fb:80:93:b5:3d:9f:ea:74:1c:e5:fa:0e:b9:
b8:6c:07:1d:89:5b:d3:7b:c5:1f:dd:8d:d4:95:39:47:1d:df:
0c:d6:e5:43:7e:85:6a:68:9a:0f:22:39:b5:62:90:61:1b:c6:
54:f9:4e:17:e0:93:f5:b3:78:3d:71:56:42:e1:7c:79:59:34:
58:42:af:7d:55:af:c1:02:17:a7:1d:0d:d0:75:95:92:3c:f8:
7b:77:19:e6:e3:05:a9:e9:79:b8:7e:33:16:d0:e2:82:4e:70:
95:cd:6f:90:ea:4e:18:07:ec:d4:0a:80:57:6d:fe:6d:83:c7:
86:92:74:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:02 2025 by rpki-client on console-fra.rpki-client.org