Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: mmqNWgvGwXtASNf9e8XNModcEm4WDbS6BEKUPOd13To=
Subject key identifier: D9:51:0D:68:8B:C2:F6:2A:0A:CF:7A:7E:E9:80:AC:2A:79:EE:BA:7C
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 0194BAF202E19B8D1211B313E9F8EA48A731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 06:00:09 +0000
Manifest this update: Fri 31 Jan 2025 06:00:09 +0000
Manifest next update: Sat 01 Feb 2025 06:00:09 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: TP3CfV4EQI4rqDpxCISjvwbGmREeherzE+BaUTkq1Lk=)
2: eNa9shPNfJuzCCd26UNFwFr7enQ.roa (hash: Pk/A2JGNB1YeZQ3WAmhEqcfQTtjVI6QLZ8AAQbj5fY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:02:e1:9b:8d:12:11:b3:13:e9:f8:ea:48:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Jan 31 06:00:09 2025 GMT
Not After : Feb 1 06:00:09 2025 GMT
Subject: CN=d9510d688bc2f62a0acf7a7ee980ac2a79eeba7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:3a:47:fd:98:cf:56:52:20:45:4a:21:1d:
8e:09:4c:27:eb:4e:f1:62:7a:97:e0:a1:f5:c4:73:
b7:73:85:28:97:67:da:a0:33:77:b1:d5:ac:35:4e:
ed:1b:a3:32:34:2b:92:f6:34:e5:74:af:94:69:37:
73:a0:07:68:62:eb:d9:b5:d2:74:6d:24:f8:10:c7:
d5:48:a3:5d:d0:5c:dd:fe:a4:f5:a1:ea:2f:42:7b:
fa:25:af:6c:4f:59:68:fd:73:15:cd:27:54:c3:4e:
f8:6b:4a:02:90:c3:2f:90:f9:14:0b:bd:d2:ec:cd:
aa:a7:1e:36:f2:bb:21:53:70:6c:59:aa:44:b8:43:
aa:c1:e9:17:02:d3:7a:9e:45:2f:db:88:14:50:75:
5a:11:f1:22:9f:85:28:cd:e2:4d:ee:6c:2d:08:c8:
8d:79:e7:4e:ec:b9:cc:1e:92:0d:9c:fc:98:84:63:
bb:93:4b:c6:7a:a7:d0:39:80:eb:55:54:be:d1:c1:
72:63:21:a3:40:18:c6:76:56:37:e8:71:38:da:c6:
3d:48:1f:c9:f5:9e:7f:c4:e3:86:54:17:3d:84:86:
c7:37:50:30:7d:a9:8d:e6:2e:a5:c6:bd:86:07:58:
65:9a:8e:a8:08:8d:7e:8d:3b:d1:84:da:17:1d:63:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:51:0D:68:8B:C2:F6:2A:0A:CF:7A:7E:E9:80:AC:2A:79:EE:BA:7C
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:02:f4:00:4b:77:de:32:2e:b4:f6:b7:99:d8:9a:a4:7b:49:
ed:ce:f8:75:c1:99:61:09:38:54:21:a4:7c:da:f9:a1:2f:29:
1d:26:b3:a9:e2:94:f8:e2:b4:9b:8d:27:0f:1d:68:11:a5:9e:
10:58:23:79:5a:7f:4f:9e:dc:81:1d:0a:8c:a1:6b:85:4c:b0:
c8:d0:53:13:f2:98:e5:1d:7a:4a:87:8b:79:a5:94:96:1a:9f:
92:2a:1c:85:6d:37:47:ac:da:d0:ed:27:c0:41:20:0c:6c:5f:
0a:11:4a:4d:9e:46:1e:1c:62:6a:de:bb:d9:8b:c8:a7:e1:72:
ba:18:47:10:5f:2a:b4:ca:8e:77:14:2a:b9:cf:af:11:92:c5:
56:46:53:67:c5:b7:67:ce:2d:16:8b:51:46:00:9e:2f:aa:85:
e1:17:bb:3a:58:20:e6:4b:8a:76:3a:08:2b:51:1b:2d:8f:44:
34:61:08:ea:dd:f7:df:21:42:1e:ce:b8:c8:0d:60:1d:69:4e:
35:75:c5:00:39:e2:06:66:8c:1f:e6:3a:db:e5:3b:a4:98:69:
07:55:c1:47:68:81:e2:53:9a:52:fe:d2:c1:f1:2f:95:38:6b:
d5:c7:e2:bd:df:bc:8d:a5:e4:9e:0a:88:f4:be:8a:01:80:1f:
f0:ee:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:57 2025 by rpki-client on console-fra.rpki-client.org