Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
File: PsY-XbBDXC0-dKayitPZww1qjO4.mft (raw, json)
Hash identifier: nhV3Pq52jK0Ff60B8gZeXxwAuaTfUNgsIBTm1hxLyK0=
Subject key identifier: 88:1B:B4:E5:B6:2B:22:1F:BB:D9:CE:C8:9C:59:30:8D:F0:46:BB:81
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 0194BB975170EAE71DACB9229A845C8EE886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
Manifest number: 0C39
Signing time: Fri 31 Jan 2025 09:00:43 +0000
Manifest this update: Fri 31 Jan 2025 09:00:43 +0000
Manifest next update: Sat 01 Feb 2025 09:00:43 +0000
Files and hashes: 1: GSEh8gIZdCBsRKOnb9fKkFOFuZk.roa (hash: u2uTEL6Ts0fKYl8Es1LELd2Ambr6iVn6vwhJ7qDD50c=)
2: PsY-XbBDXC0-dKayitPZww1qjO4.crl (hash: Abf5Mcaoc5bj+ExdhqjbMgliMY36sH7RC3qVN55Oa70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:51:70:ea:e7:1d:ac:b9:22:9a:84:5c:8e:e8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Jan 31 09:00:43 2025 GMT
Not After : Feb 1 09:00:43 2025 GMT
Subject: CN=881bb4e5b62b221fbbd9cec89c59308df046bb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:14:90:1c:2e:98:b4:62:1e:42:18:80:39:67:
da:2e:22:d4:d8:d0:50:43:a1:e6:09:d3:36:93:56:
b8:da:30:a7:e9:f6:6e:48:18:19:cf:b1:2a:dd:1d:
1f:4c:b2:df:a6:a7:a8:b9:54:34:b0:f1:60:f3:03:
ad:0b:27:9c:03:f7:51:22:55:6e:43:80:03:f6:61:
df:a2:1a:2f:2a:1f:54:ef:5d:b8:4d:84:f4:27:47:
7c:b9:3a:c5:10:10:0d:8b:5d:9a:38:fc:d5:f2:5c:
2a:f5:f1:8f:50:38:2a:04:97:94:92:e5:0a:33:17:
6b:93:33:a5:46:00:b6:8e:08:49:b1:26:df:80:5f:
a6:73:ee:79:fd:6e:cc:b1:b3:17:9c:e4:01:de:12:
28:d9:78:00:1c:23:83:c0:55:9b:cb:da:f3:19:35:
30:9a:37:c7:bb:72:bb:ce:29:c0:bc:13:c6:f4:c0:
71:20:d8:40:1b:ce:06:42:3f:50:72:b2:57:53:ec:
f8:41:85:5c:52:57:df:44:fa:d7:93:77:53:07:0b:
73:b4:9b:c3:c4:fa:ff:f3:59:56:e9:de:57:91:7c:
44:e6:7d:33:8f:3a:b0:2b:b4:13:bb:61:7a:39:fa:
eb:15:0e:f0:07:23:c5:50:70:1d:a6:84:be:18:51:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1B:B4:E5:B6:2B:22:1F:BB:D9:CE:C8:9C:59:30:8D:F0:46:BB:81
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cb:06:2e:0c:a2:de:fd:f5:e6:58:d2:0f:46:4a:28:e9:6e:
a8:fa:02:5c:39:c3:42:7f:34:d3:b0:73:d0:d4:e7:ab:9e:e7:
33:9a:65:8a:57:91:c0:20:b3:fb:4b:6d:f3:36:4d:c3:f4:9d:
79:46:f2:98:13:51:55:6c:5a:4a:71:95:e1:64:0c:1d:85:1a:
6d:dd:8c:f7:59:a7:2a:b2:f1:c9:2d:19:e1:b4:31:90:f4:40:
82:9a:e1:6f:cc:d0:03:d9:3e:3b:2d:d1:0e:2f:6b:08:cd:19:
be:ed:35:19:b4:71:59:5f:af:e8:64:c8:89:80:28:ae:fe:f7:
10:fb:f2:0f:9f:8f:a8:f5:40:0e:87:c0:bb:08:1d:96:4e:9a:
08:04:31:95:f0:ad:a3:76:58:a7:95:00:00:41:67:e4:d7:9f:
df:b9:bb:a2:0c:05:9b:ae:49:8e:4f:4b:ad:96:86:37:f4:19:
d4:95:ea:35:cc:a9:f6:06:db:ed:49:1c:a4:6a:9a:16:44:0f:
20:78:e2:09:9d:d8:66:4f:3d:a7:d5:90:f8:3c:e8:8e:60:38:
9a:b8:84:03:1c:07:cf:70:3c:ce:4d:cd:96:da:7e:da:62:b2:
2e:1e:c8:01:5b:bf:de:08:ab:56:ac:8b:96:73:07:4c:41:8d:
45:e2:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:51 2025 by rpki-client on console-fra.rpki-client.org