Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier: 0F2csEbxBc3SSpJc6m0VU4u5KA/GUaEoGkvhEuwtVvQ=
Subject key identifier: D2:32:27:88:1C:1E:BF:56:B3:FF:17:39:C1:12:79:AB:FE:4B:A8:95
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 0194BB970E1A1DDBDD640C9F3C9FA2DA0090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number: 06F7
Signing time: Fri 31 Jan 2025 09:00:26 +0000
Manifest this update: Fri 31 Jan 2025 09:00:26 +0000
Manifest next update: Sat 01 Feb 2025 09:00:26 +0000
Files and hashes: 1: jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa (hash: 9cEsiuQyqTFkaGMrbbHrCUpW4clJajhU8ds2+OGo5cc=)
2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: FM5vu/KeckQzkrlYBxWm0wp/vVgMBbZupRrfJ0c975g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:0e:1a:1d:db:dd:64:0c:9f:3c:9f:a2:da:00:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: Jan 31 09:00:26 2025 GMT
Not After : Feb 1 09:00:26 2025 GMT
Subject: CN=d23227881c1ebf56b3ff1739c11279abfe4ba895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:98:1b:ac:dc:f7:e8:ce:59:93:88:28:da:77:
21:62:26:1f:74:e3:a3:08:5c:49:c4:95:a8:a4:be:
16:8c:af:ea:c1:86:f1:10:c7:c7:b5:5e:b4:f0:55:
2e:0a:ae:60:fb:e6:af:d5:a3:10:9c:93:95:c6:7c:
22:98:49:63:5d:46:05:75:2d:96:9e:33:80:70:fd:
0a:bb:cc:c8:05:1c:13:a7:c7:a2:d2:cb:c4:bb:27:
f3:cb:1d:85:a4:01:1c:ea:89:40:63:cc:0c:73:cb:
f9:6f:e6:98:9c:3c:a6:96:dd:d7:1d:77:5a:be:0d:
ba:e1:19:83:c3:55:06:cf:a5:aa:a0:bb:e2:58:cd:
c5:6b:58:9e:7b:2b:42:14:ca:ab:7f:89:55:d6:09:
8f:54:1b:a9:a9:32:f6:a8:67:e1:31:11:78:64:b7:
7e:42:15:ee:6a:6b:1c:1a:db:ce:3d:a2:b8:eb:91:
d5:89:31:97:63:75:8e:3a:25:16:2e:30:55:d5:bd:
af:73:00:08:b1:cf:a5:9a:34:55:24:55:ac:40:28:
56:ae:67:a9:76:55:18:d7:1d:f0:c6:a3:63:c3:ea:
69:7a:76:a7:21:f8:aa:a0:ef:11:46:0a:35:58:67:
0b:9e:41:f6:a4:43:b8:64:56:59:75:34:91:3c:4e:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:32:27:88:1C:1E:BF:56:B3:FF:17:39:C1:12:79:AB:FE:4B:A8:95
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:53:16:5e:95:d4:b4:fb:ab:d2:88:20:cb:a4:57:b7:34:c5:
e6:2a:47:97:5a:10:5e:1e:2b:1c:dc:0c:55:3f:0f:3a:32:2d:
3a:21:86:8f:6f:d5:5d:59:de:d4:d8:42:9b:3f:8f:5d:2d:83:
85:94:a6:3c:0b:40:fd:88:0c:c6:01:a6:c0:7c:49:fc:2a:36:
9b:9e:ce:c2:01:60:8f:03:ab:8e:5a:bd:85:7d:59:f1:b6:78:
2c:29:09:ef:3f:19:d0:1e:08:78:0a:1d:aa:cf:4d:e8:1f:47:
ad:51:62:6c:01:75:ac:21:95:c6:2b:4f:a7:01:10:01:ae:8b:
2b:3f:57:4b:c6:99:3f:a8:00:64:d2:11:34:c5:80:da:fe:63:
c5:8b:2b:f8:2f:06:a5:37:97:9d:c3:dc:d4:8a:79:c9:0f:36:
01:21:b2:5a:7b:4c:25:2d:82:41:eb:71:02:56:46:23:42:08:
48:3e:78:8b:87:fe:aa:73:57:13:29:5b:b0:a1:fb:20:2c:5f:
8d:12:d8:cb:2e:e9:75:e8:54:d7:0c:b6:b0:87:78:98:fb:f4:
06:77:23:78:f5:31:47:e5:9d:14:49:29:7e:15:ab:26:9b:e4:
20:c6:04:58:9a:4b:97:6d:2b:7b:6b:78:42:71:e2:c3:92:69:
56:f7:e9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:52 2025 by rpki-client on console-fra.rpki-client.org