Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
File: Y3A8pQxDKs1_HLunwH2iICKZymM.mft (raw, json)
Hash identifier: IG89OtZEsF+nDxwOADD3zdneizRS74fxmj8eV5O5mBo=
Subject key identifier: 75:9C:6D:52:3D:9B:9F:55:7F:16:67:70:E4:50:D6:B7:F7:C6:F5:5F
Authority key identifier: 63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
Certificate issuer: /CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Certificate serial: 0194BB604AA71621A616300F610295AD4130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
Manifest number: 112E
Signing time: Fri 31 Jan 2025 08:00:37 +0000
Manifest this update: Fri 31 Jan 2025 08:00:37 +0000
Manifest next update: Sat 01 Feb 2025 08:00:37 +0000
Files and hashes: 1: Y3A8pQxDKs1_HLunwH2iICKZymM.crl (hash: Oy0OOC7m9Ubk6JExie7qBsdDq8NAySK+fIZ/mabLlNc=)
2: uKlqiwtoXkp9xjLftlQ9vTMqqrs.roa (hash: EwwfvCJkfqVqVmU0gYHOqumHmaTFzwTDUQGR86XAOZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:4a:a7:16:21:a6:16:30:0f:61:02:95:ad:41:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Validity
Not Before: Jan 31 08:00:37 2025 GMT
Not After : Feb 1 08:00:37 2025 GMT
Subject: CN=759c6d523d9b9f557f166770e450d6b7f7c6f55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:0b:bd:31:5d:6a:4b:d5:71:6a:c5:15:7e:
ee:81:ff:e5:3e:b7:8b:6f:e5:c7:77:28:24:ce:fa:
76:b0:89:8a:7f:e9:1c:cd:a6:09:03:28:90:52:3c:
e2:68:d6:69:dd:9a:9c:ab:fa:26:39:f1:d7:b7:13:
59:7c:57:31:b9:aa:ed:8a:8e:a3:0a:89:ce:00:38:
65:f5:de:85:e6:e5:54:c5:04:3d:f2:c0:c4:41:18:
bd:92:d2:14:43:ea:83:96:db:26:18:04:78:00:68:
4e:cf:af:27:48:3c:ed:7f:ad:39:85:63:90:3e:9c:
5d:4d:5e:22:67:fa:54:50:16:1c:f9:28:73:d4:13:
8c:e7:a6:f9:db:2d:92:ad:e6:d5:83:43:9e:f3:75:
d6:35:8f:f8:1a:8e:eb:27:12:e2:f9:46:1d:a5:73:
d6:b3:93:2b:16:d9:ab:e2:76:4c:8e:4f:63:4b:7b:
03:90:62:50:e0:c9:18:f2:e4:e9:cd:f2:de:45:be:
7a:06:fe:c2:ae:81:76:a3:92:96:cb:10:30:f9:72:
80:5b:72:78:94:2d:98:6a:14:82:c9:1f:1a:ff:e4:
3d:17:1b:24:80:50:3e:90:e5:62:00:8e:4e:31:8c:
5b:d5:01:b6:61:55:b7:0a:84:fb:4d:7b:41:b1:33:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9C:6D:52:3D:9B:9F:55:7F:16:67:70:E4:50:D6:B7:F7:C6:F5:5F
X509v3 Authority Key Identifier:
keyid:63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:62:67:7b:ea:ad:20:db:9d:80:95:07:f0:24:dd:a4:84:3d:
76:b0:4f:a3:9c:cf:27:7e:2c:25:03:d9:34:6b:e6:82:9c:47:
df:df:ee:1b:bd:9d:00:58:b7:8a:01:b6:9a:89:24:bc:ea:e3:
a6:e3:11:02:5d:d5:2d:e7:bb:89:90:9f:e4:6d:95:2e:78:be:
bf:c3:c7:a4:c7:09:2c:f0:c1:ba:63:07:d5:17:e6:38:29:ff:
2d:5b:fb:61:e9:f8:81:1b:af:11:26:8f:c8:0b:d6:ab:13:4c:
b1:37:9e:f4:46:65:02:c4:ab:86:bd:c3:12:75:17:b0:61:92:
40:2b:7c:6b:3c:05:82:17:fb:32:6e:02:97:19:8e:b5:61:7f:
49:00:94:27:7b:e3:5f:f4:ed:f2:b6:78:62:ff:e1:8c:7b:b4:
df:da:bd:d6:70:02:c9:87:d4:3b:df:73:d1:8d:31:14:7a:e4:
cd:db:56:7a:11:dc:56:ea:89:8b:8d:b8:b0:ff:b4:06:51:7d:
50:af:46:ec:6c:d5:e3:eb:67:e2:b5:0d:95:ec:61:41:d8:3c:
95:8b:40:14:69:88:af:64:f8:72:92:7c:c8:6b:83:bf:da:0e:
6c:11:5e:5e:c9:20:d3:3e:6c:a6:a1:b2:fa:39:01:1f:5d:9a:
46:ef:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:32 2025 by rpki-client on console-fra.rpki-client.org