Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
File: yuMiUfEbz-mT0lR4AkweYd1Hp58.mft (raw, json)
Hash identifier: yUS4opVV46Re/RbCAORnCTBaUzCcAOQ6fk/+6C+VhRE=
Subject key identifier: 1E:56:AF:2F:B6:E7:BA:19:D4:F4:C8:DE:94:42:71:7A:93:E2:94:E7
Authority key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
Certificate issuer: /CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Certificate serial: 0194BABB426EC6740D6E29BAB62703FB7F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
Manifest number: 0412
Signing time: Fri 31 Jan 2025 05:00:21 +0000
Manifest this update: Fri 31 Jan 2025 05:00:21 +0000
Manifest next update: Sat 01 Feb 2025 05:00:21 +0000
Files and hashes: 1: yuMiUfEbz-mT0lR4AkweYd1Hp58.crl (hash: 69CT/eUwPIPZkl/XoAVXCF9bbxxtoF1FUJt2XNKksCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:42:6e:c6:74:0d:6e:29:ba:b6:27:03:fb:7f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae32251f11bcfe993d25478024c1e61dd47a79f
Validity
Not Before: Jan 31 05:00:21 2025 GMT
Not After : Feb 1 05:00:21 2025 GMT
Subject: CN=1e56af2fb6e7ba19d4f4c8de9442717a93e294e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:bb:cc:9f:27:a3:48:e6:7d:a4:82:d0:ce:
6d:ce:51:96:dd:bf:3b:72:a9:63:da:9d:78:5e:2f:
2b:fb:0a:71:3c:e0:3d:e7:0f:6d:22:f8:1b:0b:c5:
08:9b:b9:7c:aa:1a:27:19:d3:e2:10:df:56:a0:84:
db:72:7c:5c:7f:6f:80:fd:ff:94:9d:6b:d4:f9:cd:
c3:fe:55:82:21:b6:f6:90:91:0b:31:84:7f:37:03:
65:ac:ed:d0:4c:57:39:5d:d0:32:86:56:d6:d3:20:
6a:7c:0f:dd:21:3c:14:18:c7:10:f1:da:a9:c6:da:
f3:ed:86:76:9f:24:a2:01:0a:a6:f2:16:eb:22:0a:
3f:b4:8a:70:96:8c:39:a3:2a:dc:95:e8:eb:45:a9:
b1:c7:64:94:4b:ea:06:ab:cb:67:e1:18:2c:e4:fe:
8f:ad:f3:cf:43:24:3c:3e:5d:e5:71:d5:e1:21:55:
d1:82:43:af:68:49:dd:9f:57:3b:0a:bb:68:2a:c2:
0a:23:19:6d:f2:7d:c7:9a:b5:87:5e:30:fa:f2:75:
b6:d3:fa:8b:a7:51:84:32:ac:0b:74:b0:5b:87:bf:
65:31:4e:1c:29:7e:c2:dd:9c:de:a9:82:c9:3b:d1:
80:cd:03:82:e3:be:58:c7:76:ad:e0:c6:a8:77:e6:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:56:AF:2F:B6:E7:BA:19:D4:F4:C8:DE:94:42:71:7A:93:E2:94:E7
X509v3 Authority Key Identifier:
keyid:CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c7:04:e9:b5:1c:d2:31:33:40:e1:61:19:dc:f5:0a:f5:60:
45:e8:4c:97:df:79:fe:ee:4e:5a:2b:d8:5c:0f:3c:07:70:81:
07:e9:ee:1a:27:d4:34:e9:72:e3:20:06:84:88:18:29:b6:96:
23:77:b6:d5:bb:ba:6e:af:e0:12:4f:6a:50:40:bd:8c:49:71:
dc:ca:c4:31:1c:ec:b0:91:eb:e9:9b:ed:57:a6:da:9f:74:3f:
cf:42:c9:30:0b:5b:bc:05:84:76:21:96:35:ec:a4:a7:de:01:
78:1f:ed:d8:ab:7d:dd:b3:4c:79:06:1e:6a:04:62:c2:ab:c7:
de:d5:c4:d3:2e:be:ca:c0:e8:c8:20:24:d1:c4:dc:11:b1:b0:
37:08:de:a3:d9:1b:2b:a1:6d:e3:1f:07:e2:84:b9:37:4a:19:
bb:71:c2:36:9f:95:fa:c8:f7:b2:45:c4:f7:f5:cc:a7:5a:c0:
6b:e7:d7:82:87:d8:8c:f6:71:28:f0:22:61:94:47:56:94:49:
98:d3:4e:87:9c:e7:8f:a3:b2:4f:fe:13:17:a9:ee:28:d1:8e:
48:95:6d:6f:a6:65:96:5b:32:f4:c4:43:8d:53:19:b6:e0:51:
b7:c7:d6:a7:11:1a:ae:1e:8f:bc:34:f7:00:24:b2:eb:52:b6:
62:cf:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:51 2025 by rpki-client on console-fra.rpki-client.org