Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json)
Hash identifier: Pb1cINuYQsGg2/ZPgJw2WwfbvwYXDUDoDbzK7sWEnTM=
Subject key identifier: 05:4D:EC:4E:AB:4C:94:70:F4:C5:9A:1D:7E:5A:F0:A2:D0:EF:A6:12
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial: 0194BA8470D8FE7EF505BBFFEEB4D27CECEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
Manifest number: 0D66
Signing time: Fri 31 Jan 2025 04:00:29 +0000
Manifest this update: Fri 31 Jan 2025 04:00:29 +0000
Manifest next update: Sat 01 Feb 2025 04:00:29 +0000
Files and hashes: 1: QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa (hash: iDeA+sQiPag5Td4fIdhnGBEsGTbasSmj20N0QdB9b24=)
2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: 5TYyJiPOSQY9oQ/GrD0iEiS5DHy2QinmkieY9lYOqwI=)
3: WEolIktBESdvgc8hNiaPN7u1uwc.roa (hash: epUS51OLDZ6qazQuvjy3IHtOX7T0vUZAhescISw2oWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:70:d8:fe:7e:f5:05:bb:ff:ee:b4:d2:7c:ec:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Validity
Not Before: Jan 31 04:00:29 2025 GMT
Not After : Feb 1 04:00:29 2025 GMT
Subject: CN=054dec4eab4c9470f4c59a1d7e5af0a2d0efa612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:a1:a8:9b:b8:fb:66:7a:f0:4c:0c:66:a2:
da:ce:ec:89:4a:dc:6c:c1:51:b1:03:f1:22:b7:4e:
ed:22:3a:b7:bb:d2:fc:6a:69:f6:97:7a:a9:9d:20:
dc:39:68:5d:fc:18:98:ae:f1:57:d5:8e:6b:3f:fc:
21:db:7a:e2:48:3a:6c:d8:ea:14:69:33:39:9b:45:
3d:34:38:9e:7e:7f:38:68:cc:c0:a8:4d:6e:3a:43:
e8:04:a8:e6:8f:d9:81:1e:f7:6b:c4:06:1c:a6:ed:
6f:ab:25:92:60:c2:0a:ce:aa:ba:03:9f:97:43:88:
0b:0b:bb:eb:b0:ec:5a:e3:a2:4a:49:c9:ef:a1:04:
9b:a0:bd:31:fb:7f:92:fd:2a:2f:c8:13:e5:02:6f:
01:40:ed:65:b2:22:94:65:24:b3:e1:19:bc:71:c3:
d9:35:cc:61:72:50:f0:7a:01:84:16:81:fb:c5:4f:
d3:a3:be:5c:12:dd:86:98:8c:0e:9e:c2:57:ec:51:
77:dc:ab:95:f6:15:77:1f:3f:e3:f7:73:2a:80:6d:
8e:b2:7f:b6:72:27:a6:43:c2:9d:a4:8a:a5:30:a3:
4e:df:ea:cf:6c:20:59:19:ee:d3:8c:5a:84:d5:c6:
fb:cc:97:16:83:02:37:3a:e6:0e:8a:9e:ce:15:c6:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4D:EC:4E:AB:4C:94:70:F4:C5:9A:1D:7E:5A:F0:A2:D0:EF:A6:12
X509v3 Authority Key Identifier:
keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:42:66:52:e5:92:c6:47:97:ab:c4:30:68:a2:44:ff:14:69:
e4:f9:d3:02:2b:3c:24:78:9b:69:d9:58:ec:73:0d:6b:1e:e1:
4c:a9:65:8b:2d:82:ae:8a:ea:51:d8:6b:9a:67:dc:80:b2:a1:
02:b1:9b:0c:ef:e7:c9:03:17:eb:f5:a0:98:19:99:63:4e:2d:
e3:fa:aa:38:f6:8f:e5:6f:1f:90:a6:06:a3:ef:69:ab:86:e0:
1b:5e:65:75:90:c0:c8:6e:95:39:74:54:b8:fd:0f:13:d8:4f:
78:8b:42:f0:c2:f4:2d:bd:b6:d6:09:ad:46:91:47:a9:9e:58:
5f:d1:d9:48:c3:ac:92:01:bb:c7:b9:12:b1:09:af:39:f4:ec:
28:a2:11:d5:ca:95:4d:9d:5f:02:02:74:da:cf:95:a0:8f:80:
9b:6a:5e:d1:f8:3e:06:87:16:9f:04:ee:07:e1:81:4a:16:72:
f0:3e:c6:a2:e2:9f:f4:59:ae:a4:48:f9:14:5f:c1:9a:e5:52:
ce:96:2e:88:7c:e1:d9:c1:f4:36:92:60:ad:bd:04:4b:0f:61:
24:78:d1:b5:b1:21:bd:20:b1:61:b2:da:d8:2e:35:d3:9f:49:
02:77:c4:e1:04:c5:9c:0f:32:7a:f3:91:eb:7f:dd:35:47:0d:
12:f6:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:22 2025 by rpki-client on console-fra.rpki-client.org