Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
File: cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft (raw, json)
Hash identifier: gdHBv/OPcjQUtlWkRPQDvHXjz+Z8abgyIY8gQIup3JY=
Subject key identifier: 43:19:96:DF:BA:BC:E8:F5:53:42:77:21:A2:DB:9C:3B:B9:F0:5B:06
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial: 0194BABB96CE600172D6EFEC4A1BF91EA921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 05:00:43 +0000
Manifest this update: Fri 31 Jan 2025 05:00:43 +0000
Manifest next update: Sat 01 Feb 2025 05:00:43 +0000
Files and hashes: 1: b88Rl7W3m-ZgN433QwmekbZFP6o.roa (hash: NoA21W8ly2WxwAuP2zZWwmclSVAV10KXOOvNxpP+/rg=)
2: cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl (hash: QK63nd+Q8O8n7gdReGpRqPs5EbYGwyUmAKET1C7tBa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:96:ce:60:01:72:d6:ef:ec:4a:1b:f9:1e:a9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
Validity
Not Before: Jan 31 05:00:43 2025 GMT
Not After : Feb 1 05:00:43 2025 GMT
Subject: CN=431996dfbabce8f553427721a2db9c3bb9f05b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:d9:98:de:c1:18:c6:bf:f6:08:46:ef:f6:
1e:22:5f:43:31:d1:bb:27:39:b9:0b:b4:b5:a1:e4:
58:54:73:53:c4:81:af:87:ba:86:33:ee:bb:eb:07:
cc:99:74:2a:65:a7:b1:1c:6d:35:5a:29:6c:bb:36:
23:77:ed:e5:31:22:7f:ad:21:d3:03:2b:93:55:d4:
5d:d7:89:cf:e6:f0:b6:7e:57:d1:80:12:46:64:0d:
5a:cc:34:48:94:a0:b2:9d:42:f1:20:13:db:2c:f4:
b3:eb:7e:57:08:42:02:c9:be:28:90:f5:55:6a:bd:
e1:36:13:1a:38:9c:e1:81:f3:6c:35:5c:2e:65:84:
bc:cf:21:2d:e8:7d:63:83:1d:d4:ca:9a:46:ff:45:
4a:22:42:34:a5:16:e8:58:a2:1c:d7:f1:c5:26:50:
5f:05:75:41:79:81:77:38:34:6c:7c:c5:57:8b:94:
32:c6:bf:3e:93:d6:bd:73:3c:60:82:97:5e:d4:22:
b1:a8:e0:b4:1c:6b:ee:d5:fd:90:ba:93:1e:4a:ac:
fe:fb:20:34:89:84:f3:72:51:72:4a:44:e2:d9:c3:
7f:63:d0:75:e7:04:c3:b2:45:b6:1e:31:eb:8a:e0:
e4:bd:ec:92:56:62:59:e7:66:9a:12:d2:30:24:50:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:19:96:DF:BA:BC:E8:F5:53:42:77:21:A2:DB:9C:3B:B9:F0:5B:06
X509v3 Authority Key Identifier:
keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7b:4d:6d:1a:3c:e9:f8:da:be:97:40:3b:74:71:55:9a:0a:
51:47:87:43:fe:db:d5:b7:96:36:05:e2:76:73:fc:f9:0f:bc:
a2:da:bd:af:74:8e:9f:c4:74:5b:01:25:28:f7:6c:d2:07:53:
19:36:66:87:f1:73:dc:23:03:5a:bc:78:83:db:d0:23:db:96:
72:c9:bd:49:a3:8e:bc:9d:24:db:53:61:12:35:e7:6d:00:12:
2e:d9:3f:5b:32:54:ac:af:d7:9a:c2:e9:8e:f9:a1:74:e3:92:
34:44:70:39:d7:95:6a:6c:ca:38:b6:2a:7e:e2:f3:12:11:b9:
be:c9:33:66:a9:c7:3f:74:29:61:f5:f0:29:98:f7:b5:3a:94:
58:2e:0c:89:bf:fc:8a:5b:f4:5e:06:b6:4c:e0:52:c5:83:22:
b8:53:60:c2:84:c8:fa:3f:5f:8e:95:9e:24:e4:ca:57:93:4d:
3a:08:bf:b7:ed:42:09:9c:b3:ee:6a:d5:61:12:8a:b6:fb:a2:
e9:77:0f:d9:e4:a6:8d:0c:4b:4e:c1:94:6f:98:69:b4:8e:fe:
bc:eb:d5:4b:a4:4d:6b:d4:09:a2:89:82:06:9c:7e:df:1d:c2:
18:d1:cc:a0:01:7f:5c:ac:80:e8:91:21:43:d9:42:76:6a:35:
6b:63:2d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:55 2025 by rpki-client on console-fra.rpki-client.org