Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: HhdLJAnbfrO/l90JLql/znMz4IfKxOcu2QdH/SH5rnQ=
Subject key identifier: F9:65:3E:AE:CB:CC:E7:1B:D1:66:A1:7E:47:B0:74:11:FB:C8:73:FF
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 0194BB6051D84D9C1A7B3C6C2F5D031A9190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 1178
Signing time: Fri 31 Jan 2025 08:00:39 +0000
Manifest this update: Fri 31 Jan 2025 08:00:39 +0000
Manifest next update: Sat 01 Feb 2025 08:00:39 +0000
Files and hashes: 1: 1-G1EzE1WSewj5LvnP7WS6jNd8Ug.roa (hash: jwy+yhw+XcZ5VX6F4NLidpXSZAqbXddtjz7nb2RmNdw=)
2: S7ra6Ov-UpB_vWrQKASj1i2bpWU.roa (hash: kepYC+QCOG1xoHVARWHcfGe1QSDNXlo9WvXDhx0i4AA=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: JB+7/rBUiGXOvKA/ifqKR/2FxpIGks9x2GKMp2Aj26M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:51:d8:4d:9c:1a:7b:3c:6c:2f:5d:03:1a:91:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Jan 31 08:00:39 2025 GMT
Not After : Feb 1 08:00:39 2025 GMT
Subject: CN=f9653eaecbcce71bd166a17e47b07411fbc873ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:80:e1:cb:77:53:23:e7:9e:67:66:32:74:
bb:e6:39:7c:e2:05:51:0f:4a:ba:bc:a5:a6:b9:ac:
c8:62:35:96:8d:ca:fe:38:aa:6b:89:f9:81:b3:6d:
24:7b:82:4e:6c:91:a4:2c:8b:a8:3d:bf:d1:ff:16:
22:4a:58:9b:d5:3f:7f:02:50:fb:c5:67:dd:42:7e:
d7:d9:12:75:4d:a4:5d:46:13:59:19:18:c7:e3:ff:
bb:82:39:66:6c:34:60:f4:31:39:64:49:bb:63:20:
71:3a:59:11:44:40:c1:a9:c0:63:6b:c5:ad:6d:c5:
cb:94:d7:5f:b1:9c:aa:25:a5:16:31:c1:ce:d6:05:
c4:d9:a0:59:fd:f4:a9:58:e5:41:72:ad:fb:5a:4a:
42:11:8e:a2:f4:60:b7:a6:2b:20:5e:9a:f9:90:3d:
37:29:c3:99:77:f0:90:5f:29:ed:5f:fd:d7:6d:d7:
6c:6b:62:af:9e:cc:ed:bc:b3:d1:0d:e6:54:7d:e9:
b3:81:ae:60:35:83:e3:06:af:c3:4c:8f:71:d9:bb:
4f:ee:c2:ff:62:c3:07:2a:d9:43:77:f7:57:fd:32:
df:52:72:92:d4:0b:da:7e:7e:c5:e9:83:d6:9d:94:
3c:8f:7b:0c:01:e9:ab:07:42:15:5a:3f:4e:29:f0:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:65:3E:AE:CB:CC:E7:1B:D1:66:A1:7E:47:B0:74:11:FB:C8:73:FF
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d4:38:03:f9:98:5b:b1:5c:0d:fa:6f:3b:53:14:07:7e:e4:
3d:fd:cb:03:81:23:84:99:ea:f0:dc:34:f8:b8:f0:fa:17:30:
e8:96:d9:28:57:ca:0f:02:cc:4b:ae:a0:89:df:f0:14:a3:0f:
d7:b0:52:a0:d3:c5:44:27:b6:d0:b7:bd:18:60:a9:86:0d:f9:
6e:fa:30:db:60:54:52:ce:d1:ca:ef:b7:14:4a:68:5b:bf:99:
10:a8:f8:be:9e:04:d7:55:17:1d:8b:dc:ae:9c:49:77:51:14:
fd:54:d1:7a:c2:2f:8d:12:7f:b6:80:52:68:60:af:41:e0:67:
6a:79:6d:41:5f:cd:40:e9:56:1f:23:e9:7a:af:79:ab:42:4c:
fa:33:b2:1d:f7:3b:22:6d:1b:4e:d2:57:f9:9c:00:47:9a:32:
f2:27:86:60:d9:1c:5b:a6:22:f8:ad:ac:c7:7f:53:d4:f6:1f:
f7:d4:87:04:37:bb:9d:54:7b:0b:f1:81:b9:42:a9:8c:ab:f4:
7f:0a:8d:15:02:ee:da:25:c6:ee:81:e6:32:be:12:ca:99:89:
7e:88:04:3b:ed:8c:1d:7a:e8:86:8b:9a:41:1b:6a:80:eb:a3:
a2:62:4c:bb:2f:cd:2b:d5:11:5f:af:90:3d:6d:6a:3d:9c:41:
55:b1:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:33 2025 by rpki-client on console-fra.rpki-client.org