Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json)
Hash identifier: 8aZvRoeFwodWQlmrXYMB+jR7YqzrV2rjFaPzbkZUzQ4=
Subject key identifier: D9:79:A7:8A:78:66:61:54:66:B4:EA:A8:E2:C6:81:CC:1E:BE:FF:8F
Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722
Certificate serial: 0194BAF25F932FA5A2FEA277F869DD448329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
Manifest number: 03E7
Signing time: Fri 31 Jan 2025 06:00:33 +0000
Manifest this update: Fri 31 Jan 2025 06:00:33 +0000
Manifest next update: Sat 01 Feb 2025 06:00:33 +0000
Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: pzO5jMKmKlzokYc73NJQCo3LKtS4s7XD7kZCdOsehpI=)
2: gQ1Mk4Ko4bazOy7pZDxAv9B_6qk.roa (hash: FoB5dUGf24mZ9gRXtihHS6AK0Gj+K7gCvGHMZywvDao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:5f:93:2f:a5:a2:fe:a2:77:f8:69:dd:44:83:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722
Validity
Not Before: Jan 31 06:00:33 2025 GMT
Not After : Feb 1 06:00:33 2025 GMT
Subject: CN=d979a78a7866615466b4eaa8e2c681cc1ebeff8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:4a:d6:70:68:2e:31:ef:10:41:1c:45:c2:
53:95:0f:34:05:12:3c:ab:fe:a1:3f:59:45:e0:a1:
18:8b:b2:4b:7c:35:be:e9:f7:d2:43:63:ce:04:45:
99:28:b1:b4:98:6e:63:7a:7e:b1:49:07:1a:e1:aa:
22:60:65:f8:c2:ab:f1:14:05:8a:4f:76:96:67:75:
e1:92:21:fc:8f:ad:17:94:7e:39:6a:36:04:df:d4:
fc:66:cf:e9:e8:59:82:aa:c0:22:4d:67:b0:0e:18:
88:7b:1b:ee:b4:d8:ed:98:af:4a:79:a7:8b:bd:d3:
11:02:de:19:3d:9c:71:9a:b6:a2:c7:d2:49:d6:82:
66:6a:15:37:e9:ff:ed:af:db:04:cb:f2:39:5d:06:
43:f1:5c:5e:cf:3a:08:d6:4f:40:d6:96:22:7c:f3:
97:ac:55:28:95:7f:fd:53:18:fc:a1:16:fe:b3:10:
b7:c2:e7:81:80:b3:95:69:d4:0e:8c:ba:03:f2:aa:
e9:95:d5:c4:e8:dc:63:e4:0d:62:ba:43:b6:f7:20:
9f:4d:5b:2b:7b:58:70:d3:aa:fd:6a:e1:3c:17:ee:
45:8c:2b:ce:4f:c8:0d:69:fe:fa:26:6b:56:02:3e:
f1:45:ed:9f:93:04:c3:c5:1a:07:70:86:2d:ba:c4:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:79:A7:8A:78:66:61:54:66:B4:EA:A8:E2:C6:81:CC:1E:BE:FF:8F
X509v3 Authority Key Identifier:
keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:01:50:c4:f4:e1:3e:24:84:cd:2a:c4:98:33:a1:2b:ea:88:
10:82:9c:22:06:0f:06:ee:05:bf:39:07:36:20:1b:dc:ee:69:
48:8d:86:49:4f:1f:24:36:c8:62:9b:2d:5b:14:c5:25:88:5b:
fa:8b:10:0f:0a:b4:99:37:9c:da:c4:90:e5:4c:27:39:b5:30:
68:14:d6:3a:2c:8e:05:07:03:25:47:18:62:10:ac:ff:97:c2:
2a:45:d7:57:e1:1b:99:a3:0a:6d:fe:b5:25:3e:c1:09:b2:c4:
15:94:59:9b:9f:ea:98:f2:a6:f1:c4:6d:c9:40:67:35:ca:96:
a6:ac:91:fd:af:4b:ad:83:e4:5c:eb:9b:c2:f8:98:4a:f7:a0:
f9:ea:ab:4f:21:f9:7b:c7:ab:c0:4f:5f:21:2c:c7:be:12:2f:
5c:84:f7:8d:af:33:04:2f:11:6c:57:06:90:5d:c8:ed:88:49:
28:ff:de:c7:8c:a6:df:18:14:4b:3f:8b:5e:33:71:c4:91:a9:
e2:38:66:60:b5:70:46:2a:9d:05:95:04:ca:d3:ad:56:50:a1:
91:dc:bc:63:1e:2d:0f:ed:02:dd:73:51:05:c9:8d:6f:24:9a:
a1:ad:3a:31:5a:07:a8:b0:c2:29:53:f3:f7:1d:6f:7e:2b:bd:
e1:f3:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:58 2025 by rpki-client on console-fra.rpki-client.org