Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
File: YjqxggzkjFedpAxm2FJl8cLPy04.mft (raw, json)
Hash identifier: B5d+J0QMhAAs70D/cB8gb9oz327+IwYC3rHDwz2VDoU=
Subject key identifier: B2:19:86:7B:83:DA:B5:F9:9A:11:2D:D7:61:DA:10:88:6F:91:C5:71
Authority key identifier: 62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
Certificate issuer: /CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
Certificate serial: 0194BABBBE934267C8A05D239FB6B5C1F222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
Manifest number: 04AE
Signing time: Fri 31 Jan 2025 05:00:53 +0000
Manifest this update: Fri 31 Jan 2025 05:00:53 +0000
Manifest next update: Sat 01 Feb 2025 05:00:53 +0000
Files and hashes: 1: YjqxggzkjFedpAxm2FJl8cLPy04.crl (hash: 5eil1oLXIcZTnuCSPVoAvRsxByRA/OkXJtEqQoVnei4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:be:93:42:67:c8:a0:5d:23:9f:b6:b5:c1:f2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
Validity
Not Before: Jan 31 05:00:53 2025 GMT
Not After : Feb 1 05:00:53 2025 GMT
Subject: CN=b219867b83dab5f99a112dd761da10886f91c571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:83:28:59:a3:54:ac:b7:fa:fa:1d:f3:b6:
f9:32:3d:63:07:f9:f3:20:31:6e:d1:a5:f8:4a:ec:
c6:99:65:a3:d1:6e:1b:09:9d:ea:29:d3:ba:40:77:
cf:46:35:51:fc:c4:f1:eb:e3:ae:7b:48:00:57:6d:
0c:47:63:30:fb:89:d2:bb:9e:81:15:a8:58:63:76:
da:9b:6a:30:25:f8:0f:ee:02:13:05:5e:74:3d:e8:
72:35:74:6d:00:c8:51:0a:57:c4:d0:65:92:57:26:
67:6d:c6:44:68:55:5f:d2:b7:28:47:82:1b:c2:07:
b4:a5:1b:a1:4f:e7:b6:f0:aa:ab:0e:44:c9:b2:cd:
05:e8:84:81:34:84:09:a6:c4:43:46:1c:ef:e1:6f:
0d:4e:fe:b1:d0:83:c7:8b:fa:be:70:44:8d:bd:63:
ee:a9:3b:c0:09:0f:da:f1:36:42:da:07:5b:ad:8b:
ee:64:54:f3:36:25:df:6e:e8:88:cb:a8:52:58:be:
2b:97:4b:bc:89:63:6c:07:b8:47:25:f8:58:09:8c:
69:11:e3:93:ec:14:df:9d:a4:3b:08:86:7d:08:ec:
e8:b9:3b:d0:88:be:39:6c:fc:f2:4e:73:06:15:ad:
4c:34:83:9c:e8:05:85:a1:ef:f7:66:ce:39:20:ae:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:19:86:7B:83:DA:B5:F9:9A:11:2D:D7:61:DA:10:88:6F:91:C5:71
X509v3 Authority Key Identifier:
keyid:62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e6:26:92:1b:c0:ae:48:eb:22:4b:29:db:e4:05:57:3a:61:
f2:22:42:0f:a4:80:8e:cc:88:e7:0f:3d:5e:1a:a0:b7:48:92:
06:23:93:e3:23:14:41:8e:d8:3b:01:81:ae:c2:1b:7f:5c:2f:
d2:36:30:cd:72:fa:d0:dc:b9:47:11:66:a9:42:74:c2:ec:8d:
1a:c7:bb:ff:e0:74:a2:b2:ad:36:04:2c:ec:78:8b:e1:90:bd:
7d:d4:e1:ca:8a:6d:b9:69:f9:1b:ba:da:2a:76:52:20:ae:5e:
ee:4e:cf:f4:92:e3:e2:d1:59:23:5e:3d:ca:86:6a:2b:47:87:
4a:ad:cc:56:02:5e:a7:e6:e9:c8:a8:40:da:83:6c:33:d5:22:
a5:b7:f7:62:0d:93:03:63:0b:4b:67:1e:40:ea:04:af:be:77:
71:f6:11:48:af:d9:6b:9b:43:01:3c:b7:88:c2:80:93:32:43:
4a:94:97:68:0e:78:c3:70:6b:3f:af:b2:a2:71:79:71:1a:c3:
98:e6:be:ab:b2:e1:f3:a2:6b:f6:40:fc:90:c0:a2:3a:a8:a5:
a2:fb:50:a6:da:f7:f2:08:4d:82:1a:7b:7f:c0:e1:3d:a0:7c:
2c:47:01:c6:12:27:80:a8:b4:80:b3:c6:f0:58:30:ba:f8:6c:
c6:72:a5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:45 2025 by rpki-client on console-fra.rpki-client.org