Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
File: yjuG5lRw-ZTfptb-6OJk22LiSvk.mft (raw, json)
Hash identifier: 0ktP7mZMdAKFIaCFpPDgQ62JcNTYR6K/x3TI6A7z3VE=
Subject key identifier: 1B:6E:F7:59:E2:35:28:ED:78:77:68:7B:6E:C6:49:E1:FA:3D:EC:34
Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Certificate serial: 0194BB974F1A4FA2D0AB3D453F035F427080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 09:00:42 +0000
Manifest this update: Fri 31 Jan 2025 09:00:42 +0000
Manifest next update: Sat 01 Feb 2025 09:00:42 +0000
Files and hashes: 1: Db8DTjUYkYFq1VL2utnrt9ZhoOQ.roa (hash: d9GgydKG9uk/HAxIswAdFFBoSDorEX71FTaOERwLhzg=)
2: RfiogXB75ZZcw60YgsMcLXMGreQ.roa (hash: CxagJfgQ+HRjqYYAQUHG4nzSSm5GU9hHUNpe0/HqHLA=)
3: Vsvw7zSK2cjlfLBPzsEjNibepw0.roa (hash: fMTdJF0J/U/sST/3YzLYOWjYa8T84ONedHLdQ86kfmA=)
4: WTl9wt0Rp1_SP8V72BWndXzvVXk.roa (hash: BI9xuqlMchALIUZfnOAm1MAIdvbV4MZUCOFrf3rfZgA=)
5: yjuG5lRw-ZTfptb-6OJk22LiSvk.crl (hash: AcWgWzT415XcGFtFgzT0RkUU9dDZSnLo9Rb/k4zrSE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:4f:1a:4f:a2:d0:ab:3d:45:3f:03:5f:42:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Validity
Not Before: Jan 31 09:00:42 2025 GMT
Not After : Feb 1 09:00:42 2025 GMT
Subject: CN=1b6ef759e23528ed7877687b6ec649e1fa3dec34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:2c:97:9b:30:6a:3b:f3:8e:e8:be:ed:7b:
27:1a:c4:8c:4f:1a:db:f2:aa:7a:3c:b0:34:6f:16:
02:f6:c7:76:10:c0:3c:74:f8:67:af:5f:af:77:8f:
7c:9c:02:5c:ac:90:dc:43:fd:d4:3c:27:e3:34:16:
41:30:49:72:a2:c3:84:b8:31:b5:4e:1d:68:48:83:
60:6d:bb:4c:eb:58:a7:0a:f2:c4:8d:7f:dd:48:3a:
f3:7d:9e:f7:7e:ad:32:4d:f0:ed:3f:86:bd:0a:41:
da:8c:32:b0:47:b7:13:1c:4f:ac:31:ba:35:28:e7:
ad:2a:c1:35:f4:87:26:e5:01:64:79:1a:ff:06:72:
2a:b8:ac:32:b5:36:e3:d8:2b:b8:74:18:21:95:51:
e6:c5:45:f4:41:e2:a2:22:d4:91:8e:76:2d:6e:57:
c7:40:10:69:5f:d5:c8:4b:b1:9e:b6:6f:54:dd:38:
11:e4:90:72:01:fc:e0:5d:37:e8:12:66:79:dd:d8:
ad:e7:59:3b:f9:e8:e7:1a:e8:5b:39:c9:06:de:ee:
71:de:5c:3a:2a:53:5b:86:1a:8c:d4:72:85:d6:df:
f6:76:2d:81:a4:94:d3:da:f2:b6:65:c7:b2:1d:c8:
8c:8e:39:5c:bd:27:e3:fc:c1:69:06:e7:c8:a0:4f:
9f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6E:F7:59:E2:35:28:ED:78:77:68:7B:6E:C6:49:E1:FA:3D:EC:34
X509v3 Authority Key Identifier:
keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d2:ff:2c:c4:5d:29:49:ce:10:d5:19:b4:00:18:64:af:82:
d3:92:ba:b5:2d:58:f4:6e:7c:4f:ed:9a:32:1d:5f:b5:7c:ec:
47:5b:e4:7c:06:fd:6b:01:98:8d:cb:cb:3b:e5:66:64:59:a0:
63:09:d2:64:fe:cc:fa:dc:ee:5a:b1:67:8f:24:73:98:33:ba:
c4:0f:ca:16:d4:19:4e:4c:1b:bc:29:28:75:0a:e9:ca:5c:da:
d0:32:f9:15:3d:55:c2:32:3e:ba:f7:cb:50:e7:74:8d:59:96:
52:af:ad:bf:f9:ae:15:17:89:cf:b5:06:61:08:aa:59:31:f0:
59:13:11:22:12:e2:72:10:6b:be:52:31:f4:1e:79:39:06:fc:
81:69:95:eb:ca:fa:d6:f3:58:7e:2d:df:71:52:ca:08:37:bd:
94:da:00:8c:6f:3f:87:a5:71:36:eb:50:a0:bc:8f:61:bb:57:
8b:e6:2a:2c:98:92:7b:b4:50:29:95:65:4f:5c:cf:a6:99:ae:
fb:22:32:a2:55:b5:44:04:3c:c8:16:11:12:7a:85:28:0c:00:
b0:a3:28:4d:59:23:f5:49:f5:59:08:93:63:f8:17:e7:b8:3d:
34:98:ea:e0:9d:c1:79:55:27:20:86:14:d7:59:3e:10:a6:1b:
db:a0:76:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:25 2025 by rpki-client on console-fra.rpki-client.org