Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: GmShedzoN3D0ooelDUyOxEsado3JEU8sQBtO042PEfY=
Subject key identifier: 1F:EA:1F:CC:41:18:88:34:54:D6:52:2C:8F:4B:45:69:D0:4B:EA:F5
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 0194BB601E9203D802596B5D4E15E6A7972C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 091C
Signing time: Fri 31 Jan 2025 08:00:26 +0000
Manifest this update: Fri 31 Jan 2025 08:00:26 +0000
Manifest next update: Sat 01 Feb 2025 08:00:26 +0000
Files and hashes: 1: 8adR64UTKfQJyv8Hn8Uu3Mto6Ss.roa (hash: QwMK3mT98zuHytYWjDXlVT7MVpssQnTqv+nHseA43Vg=)
2: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: ljaT3oHfaZKMutqj7oGaJje2TvpalDOyQjhRM8UP0xI=)
3: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (hash: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:1e:92:03:d8:02:59:6b:5d:4e:15:e6:a7:97:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Jan 31 08:00:26 2025 GMT
Not After : Feb 1 08:00:26 2025 GMT
Subject: CN=1fea1fcc4118883454d6522c8f4b4569d04beaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:08:09:13:0a:fb:04:2b:c3:be:7f:f7:d7:
f2:41:7f:a3:8a:6f:ab:5c:f2:c9:ba:11:9b:74:fd:
0d:2b:b1:c6:e9:7c:a2:ad:43:72:35:ef:b8:44:96:
a1:1d:a3:2c:04:52:7c:bc:f6:e5:45:c0:ac:ec:ed:
36:1d:5e:21:22:64:03:5e:5f:ac:b2:fa:5c:3b:d4:
bb:38:b3:df:58:23:87:eb:a5:cc:da:9e:5f:0b:9f:
f4:44:79:e4:f6:0e:ae:02:29:9f:c1:d7:24:d1:61:
62:d5:e8:0f:66:33:4c:fb:3b:5c:a8:bb:57:bc:02:
6a:3f:d9:ab:96:26:fc:7f:3a:0c:fd:59:80:d3:f8:
94:9f:dc:44:e1:22:32:94:ce:a2:3f:ad:f9:64:c9:
f3:6a:72:8a:33:3b:87:b5:00:77:5a:34:00:cf:0b:
f4:3f:7f:83:55:0f:9e:9b:b1:19:f6:1d:b2:0f:2b:
b3:1d:ea:87:83:56:8c:12:4f:0c:0f:42:27:58:71:
81:50:55:3f:63:dc:b6:10:0c:88:5c:05:f2:ba:11:
5a:26:9b:8e:5f:e7:ac:d8:46:86:97:68:59:72:3a:
6a:e2:7d:df:00:25:32:07:07:d7:cb:48:d3:19:db:
2c:e7:35:e5:fb:a8:bd:dd:0f:7d:0a:d6:5f:06:60:
2b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EA:1F:CC:41:18:88:34:54:D6:52:2C:8F:4B:45:69:D0:4B:EA:F5
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:35:19:69:34:7b:51:df:93:48:a8:95:ea:02:10:31:34:93:
63:31:49:75:d6:43:cc:fc:2f:58:6e:4c:9f:d6:60:b5:f9:25:
c1:17:8a:ad:e9:b3:bc:e0:ae:d1:b2:69:04:2a:8d:86:eb:f5:
5d:84:3f:6c:b8:63:c8:25:ab:79:47:69:fb:54:9d:b6:04:1e:
0e:d6:0a:22:01:ed:39:4d:98:9c:94:23:a9:d3:98:e1:6d:e9:
c9:c0:dc:de:0c:f2:bc:00:13:eb:fd:b3:ed:5c:d4:37:ab:14:
3d:1c:79:91:e8:b6:86:40:2a:26:62:d2:ee:7b:32:bf:7e:33:
fb:ee:59:11:f9:b2:0b:26:86:d5:0f:ef:1f:42:b9:d3:28:d5:
b8:6d:33:a4:c1:ff:0a:00:8b:5c:a4:82:29:77:53:c8:aa:cc:
6b:29:46:51:84:c6:90:f8:7b:4f:f4:94:29:0b:f1:f4:dd:96:
49:07:6e:c0:0c:1e:89:fa:dc:ff:98:71:1c:8d:ea:6a:3d:85:
a5:bd:7d:f3:ee:bc:1c:34:39:bd:57:9e:60:9b:5b:06:d2:8f:
3a:ea:d4:4d:84:d4:7b:1b:4d:8e:57:9f:09:7c:9c:46:4d:56:
c8:60:dc:57:d8:8a:f9:92:aa:e1:ee:8f:ee:99:46:a4:cd:2b:
69:a3:c5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:28 2025 by rpki-client on console-fra.rpki-client.org