Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
File: yyVzFrhB13Pct5reio8-clnxEqs.mft (raw, json)
Hash identifier: EEiUIlIu6kv+H69NJ+1q60lIoFpYtt6l0Sacy9F3qTY=
Subject key identifier: 3E:EC:E8:18:2C:EF:01:4E:49:42:9E:C2:47:97:64:AD:58:63:51:23
Authority key identifier: CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
Certificate issuer: /CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Certificate serial: 0194BA843350C5F7808C9C243142BB25A792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
Manifest number: 03D2
Signing time: Fri 31 Jan 2025 04:00:13 +0000
Manifest this update: Fri 31 Jan 2025 04:00:13 +0000
Manifest next update: Sat 01 Feb 2025 04:00:13 +0000
Files and hashes: 1: OD_06SfZ3_hheASbKyQTBpKLvXQ.roa (hash: ybCs4Tm+I7vGFeJISbNMcOaCuI5hMEk5Vs5Dolkyuw4=)
2: yyVzFrhB13Pct5reio8-clnxEqs.crl (hash: AckLVttQnY4Ki4YoENKw4P+oUZvnqWFG9Bb65Kl2ejQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:33:50:c5:f7:80:8c:9c:24:31:42:bb:25:a7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Validity
Not Before: Jan 31 04:00:13 2025 GMT
Not After : Feb 1 04:00:13 2025 GMT
Subject: CN=3eece8182cef014e49429ec2479764ad58635123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:df:98:6c:fd:2f:b4:ac:07:e7:c4:06:d5:
f3:03:a2:a7:55:3d:0c:09:ab:4b:e8:d0:bc:f9:fd:
ca:71:6f:9c:eb:40:12:e3:82:04:b9:ab:8c:e8:70:
d4:b4:c0:ef:db:66:b5:3a:fa:5a:f2:0b:a5:db:12:
bd:d6:4d:e1:53:14:96:88:7e:b7:7d:92:43:d8:9b:
50:31:82:52:18:f0:57:45:2c:25:82:e3:ed:7b:64:
11:cf:ff:31:e9:eb:c1:b4:18:e9:ba:f4:4e:b2:59:
30:49:70:71:02:61:95:df:c9:d9:a1:1e:f4:85:5a:
e4:46:3a:1e:ef:36:8b:50:f3:2f:f0:2a:13:95:5e:
94:3c:1b:71:2e:7a:4a:52:78:4b:b2:5e:2b:09:6a:
9d:8c:92:ac:d1:2a:ec:e8:90:29:a3:12:08:35:15:
06:b9:17:f9:c3:5b:ff:32:1a:0f:02:f4:94:a9:55:
38:c5:be:f0:62:a0:55:f4:cd:4e:35:05:81:79:ba:
f6:cb:90:46:ed:bb:e7:af:de:73:57:a3:8d:97:3f:
81:37:b5:5b:dd:bd:b0:fc:e8:cc:bd:62:52:36:b9:
bf:bd:46:65:51:df:5c:80:ce:5d:11:05:7a:95:ac:
d4:ac:58:d8:98:f5:9d:86:38:e6:ce:9a:99:e1:6f:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:E8:18:2C:EF:01:4E:49:42:9E:C2:47:97:64:AD:58:63:51:23
X509v3 Authority Key Identifier:
keyid:CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:68:1f:b6:49:34:af:5b:ea:db:61:62:d0:ef:44:20:63:a1:
3f:14:af:91:7f:22:aa:7e:54:1c:a8:28:09:ad:92:58:87:24:
08:7a:e3:97:44:ba:c1:57:fb:60:c6:19:12:63:66:74:ff:35:
a1:65:38:32:27:86:a7:a9:dc:ea:1d:3d:83:ba:a1:fa:77:bb:
a0:a9:cf:de:ce:72:e5:b1:3a:56:4c:e5:39:4e:2f:77:44:cf:
da:cb:7e:cf:9c:f1:f4:8c:c3:80:b9:12:7c:e0:92:28:3e:25:
e5:d5:e9:49:91:34:ef:fd:41:26:fe:3c:d7:42:0f:39:96:4f:
2b:a4:ff:48:e5:af:e2:97:b8:1a:2f:a5:80:77:d3:41:00:8d:
fc:5d:4d:ea:ce:9e:8e:59:dc:41:33:89:6e:73:ed:21:24:0c:
21:48:7f:60:b6:4e:ce:1d:c4:3c:42:e8:f8:4a:0f:8c:3e:06:
5f:fa:c2:5d:e9:fb:4a:be:ba:8b:ab:54:44:5c:4b:6d:7b:d4:
35:72:14:6e:4e:8d:1f:cf:0d:1a:aa:d8:3b:b7:e4:77:df:ce:
a5:6d:c7:5f:c1:54:63:d6:ae:0f:e0:58:9f:c6:8d:90:39:6a:
04:b6:8c:34:7c:04:5e:48:6e:06:ff:69:87:77:7d:7b:57:a8:
63:95:40:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:37 2025 by rpki-client on console-fra.rpki-client.org