Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
File: YXJS67szSErc7HQFrepN4IoK-wQ.mft (raw, json)
Hash identifier: t4nHEwL+Dq1YzT3Uk6qGgU0aanp1td57IHs0Hq5ySwo=
Subject key identifier: 66:19:58:30:7D:5D:36:AA:B4:C4:6C:89:8C:A2:B1:29:E5:DB:4B:7D
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 0194BB96EDD6D62CA86B8FCA9210078FF202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:18 +0000
Manifest this update: Fri 31 Jan 2025 09:00:18 +0000
Manifest next update: Sat 01 Feb 2025 09:00:18 +0000
Files and hashes: 1: YXJS67szSErc7HQFrepN4IoK-wQ.crl (hash: xcDUQ6/eMt7P+eUZNfG8h4EmleUgipyzo2jQtGP0/Ws=)
2: doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa (hash: +MKv/V0IfbD2z8rIVhSAM4id+TCFCy9eVNZqs6dovHs=)
3: t9q3JQRIfHPbUTHA-7F2iigGH4c.roa (hash: s2L1muHfCT4EhX7O1DIS6+l6imOYfyQC+qFGEKmez7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:ed:d6:d6:2c:a8:6b:8f:ca:92:10:07:8f:f2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Jan 31 09:00:18 2025 GMT
Not After : Feb 1 09:00:18 2025 GMT
Subject: CN=661958307d5d36aab4c46c898ca2b129e5db4b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:9c:bf:0b:e0:01:2f:f3:1f:3a:bb:72:82:
05:c5:4e:ed:8d:6e:91:d6:27:c3:06:ae:d8:3d:55:
95:88:6c:4c:f9:e7:2f:c7:5b:7e:50:6e:d9:7f:0d:
59:d5:8d:22:c3:e8:48:03:63:a3:37:1f:fc:e4:12:
54:b8:3e:b4:60:9f:b1:ad:8c:15:5e:64:0e:8d:e8:
20:05:39:5b:cb:8d:83:ff:9f:d1:bd:f8:95:d8:f0:
dc:1a:93:49:4f:ef:cb:42:3b:c6:08:d5:59:6e:04:
54:16:dc:30:87:fc:bb:cb:d5:0b:66:30:ce:5a:21:
9e:2f:d6:0b:c5:0c:f2:f8:ba:3f:44:95:bd:b5:75:
3d:9e:29:6f:7c:f9:af:66:22:40:e8:ba:76:53:00:
fd:f5:17:d4:6f:35:ec:14:91:16:9d:3d:13:22:1c:
40:9b:a0:6b:a6:ba:93:d9:70:14:0c:d8:41:f8:13:
ad:7d:48:8f:5d:28:c3:32:27:9d:60:31:14:6c:f6:
04:75:d5:57:ea:07:0b:ed:05:a9:19:c9:01:8c:32:
0a:67:04:8b:c2:59:2b:9a:44:fa:8e:02:06:74:8d:
05:4a:0b:60:33:6a:7b:6b:ba:45:47:0e:34:e7:66:
f3:ee:5f:08:3d:66:0a:a2:b3:8c:c5:a5:cc:d1:a8:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:19:58:30:7D:5D:36:AA:B4:C4:6C:89:8C:A2:B1:29:E5:DB:4B:7D
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:53:75:02:e6:4c:46:82:22:b5:eb:5b:6c:65:57:61:cc:e8:
27:02:12:cc:41:20:f1:07:2e:20:3f:95:a2:a2:0d:68:7e:90:
4a:36:4b:8d:8c:33:b3:bb:02:7e:c1:46:4e:f0:4b:ff:c9:24:
ce:b8:f3:37:59:8a:b7:f5:56:dc:09:1a:a7:ba:2c:4c:20:65:
3f:a6:fd:f0:d4:76:d3:1b:fe:a9:02:7e:4c:f8:75:92:56:8f:
78:0c:8c:b7:e5:de:88:a5:b2:62:ef:af:40:13:34:46:65:eb:
3b:64:29:0c:9a:91:14:08:d7:6d:2e:b3:1e:48:f0:26:df:9d:
b8:82:b9:0d:73:e9:32:cc:5d:ac:1f:e7:0c:1c:04:3b:0c:5f:
9c:3c:73:37:36:52:7e:94:37:9e:62:3d:2b:7b:ed:07:d9:c0:
18:bd:7e:12:47:ee:44:ec:b2:79:0e:04:9b:74:bf:be:b1:bb:
5f:81:ba:be:1e:6b:52:81:4c:bb:9a:c4:fa:f2:19:39:41:51:
2c:1f:28:32:1e:a6:c2:5d:57:46:a1:cc:59:b0:12:f3:08:1f:
9a:f3:88:70:a4:d4:86:88:10:b4:19:6a:08:e7:fe:cc:71:a3:
b4:a2:90:fd:ea:45:b9:71:17:c5:55:d7:22:42:ea:a9:4c:97:
7b:70:f3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:23 2025 by rpki-client on console-fra.rpki-client.org