Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json)
Hash identifier: v6pLf9OfEMwKBngKhlALLBNiO2Cx5z7ahesZa2vTWyw=
Subject key identifier: C2:4F:F0:22:93:21:B5:D0:60:B5:50:04:9A:96:7A:BE:5F:A8:3D:D2
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial: 0194BABB269CEA91783751DE432891A3A9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
Manifest number: 2E
Signing time: Fri 31 Jan 2025 05:00:14 +0000
Manifest this update: Fri 31 Jan 2025 05:00:14 +0000
Manifest next update: Sat 01 Feb 2025 05:00:14 +0000
Files and hashes: 1: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: oXnHFJ11VzUwi/+UDhVRackhXDU0QvmRcJNIH6mRu6o=)
2: MFslxU9jklG_nlHqOQzlLoO-78s.roa (hash: ufgeo3WhjRd2JmkZkV7qDxvZtz1IkleRju1hy5drCk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:26:9c:ea:91:78:37:51:de:43:28:91:a3:a9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Validity
Not Before: Jan 31 05:00:14 2025 GMT
Not After : Feb 1 05:00:14 2025 GMT
Subject: CN=c24ff0229321b5d060b550049a967abe5fa83dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:29:a2:cb:61:56:5d:27:56:82:86:5e:e4:
76:f1:46:a2:8e:d9:7d:21:b8:ec:ec:f5:57:98:ab:
26:53:dc:d8:db:23:bd:e4:6c:d9:3e:b9:77:ba:10:
14:54:8f:94:bf:31:19:c4:82:5d:8b:00:d0:45:93:
b1:a2:1e:e6:74:89:98:a7:af:dd:be:a0:52:11:b9:
4f:b7:87:81:40:89:f7:38:3d:bb:88:76:2d:ed:3f:
25:19:68:10:9b:38:0f:1d:5a:b7:06:c8:39:ae:77:
4b:d0:ab:d4:c2:df:88:8f:45:64:a5:b5:51:33:87:
76:f8:25:56:9e:50:84:f9:be:b6:0a:9c:10:77:56:
94:9c:ea:c1:d7:7b:41:ce:d1:9a:10:c1:92:cb:e1:
64:a5:f7:fc:77:97:ca:39:50:1d:ef:aa:d1:1f:0c:
49:c2:4e:59:c4:03:31:90:17:a0:77:6d:d5:0a:48:
cc:62:93:f4:9e:c3:8c:47:7e:64:f6:ef:cb:f9:4d:
37:68:29:6c:d9:0a:ee:01:71:fe:4a:f7:ee:21:15:
8b:4e:94:5d:d4:13:17:f9:2e:1a:f5:91:39:82:9a:
c1:a2:97:60:be:91:44:8b:bb:fa:15:e8:d0:f0:6e:
91:f0:49:2d:e9:4f:22:0e:5d:2f:1f:2a:e0:f8:22:
25:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:F0:22:93:21:B5:D0:60:B5:50:04:9A:96:7A:BE:5F:A8:3D:D2
X509v3 Authority Key Identifier:
keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c8:01:f0:d9:e9:b4:cc:ac:23:a3:fe:de:fb:1a:49:9c:ca:
20:de:80:89:df:06:b1:10:03:28:df:8b:51:56:af:82:9a:42:
f9:75:82:43:5a:6b:c7:fe:ed:11:f4:dc:f7:1f:3c:05:04:ad:
4d:c9:fb:5c:64:1f:95:64:c7:c0:09:c3:67:14:54:91:08:59:
17:e6:db:4d:84:04:69:cc:82:3a:65:3d:32:22:8d:42:f2:cf:
c0:15:45:7f:66:14:18:2a:da:e5:1f:ed:9b:21:01:f0:53:6f:
9a:8f:b6:20:8e:8e:fb:58:b2:2a:c9:e0:ff:eb:43:fd:69:11:
bf:43:ad:e1:24:3b:a9:ef:00:d8:72:13:af:9d:87:90:4b:3a:
c1:d3:37:7a:df:f1:2c:d4:f4:6a:67:96:8f:38:79:13:86:bd:
65:3e:c2:1a:50:8e:04:66:a2:15:0e:7a:bd:4a:b7:ce:18:58:
ee:e0:94:0f:bc:16:fd:7b:0a:02:52:92:76:30:b3:e8:96:46:
b7:28:56:28:ba:18:5b:ab:1d:6e:88:a2:a0:3f:54:15:f2:6f:
86:2c:d5:02:16:be:af:c0:e4:cd:88:27:c8:74:92:5c:f6:9f:
2b:83:b4:fb:95:36:f3:4e:b1:07:50:5f:5f:ee:e3:a4:b1:d7:
13:df:2a:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uyac6pF4N1HeQyiRo6mjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODgyMTJiZjVkYWNlMTA4MGRjNDVlMmM1NWI5MmZmODVj
NmMxOTIwHhcNMjUwMTMxMDUwMDE0WhcNMjUwMjAxMDUwMDE0WjAzMTEwLwYDVQQD
EyhjMjRmZjAyMjkzMjFiNWQwNjBiNTUwMDQ5YTk2N2FiZTVmYTgzZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklEposthVl0nVoKGXuR28Uaijtl9
Ibjs7PVXmKsmU9zY2yO95GzZPrl3uhAUVI+UvzEZxIJdiwDQRZOxoh7mdImYp6/d
vqBSEblPt4eBQIn3OD27iHYt7T8lGWgQmzgPHVq3Bsg5rndL0KvUwt+Ij0VkpbVR
M4d2+CVWnlCE+b62CpwQd1aUnOrB13tBztGaEMGSy+Fkpff8d5fKOVAd76rRHwxJ
wk5ZxAMxkBegd23VCkjMYpP0nsOMR35k9u/L+U03aCls2QruAXH+SvfuIRWLTpRd
1BMX+S4a9ZE5gprBopdgvpFEi7v6FejQ8G6R8Ekt6U8iDl0vHyrg+CIl4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJP8CKTIbXQYLVQBJqWer5fqD3SMB8GA1UdIwQY
MBaAFNWIISv12s4QgNxF4sVbkv+FxsGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMt
MWIyYWMzNWMwOWFhLzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMtMWIyYWMzNWMwOWFh
LzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcgB8Nnp
tMysI6P+3vsaSZzKIN6Aid8GsRADKN+LUVavgppC+XWCQ1prx/7tEfTc9x88BQSt
Tcn7XGQflWTHwAnDZxRUkQhZF+bbTYQEacyCOmU9MiKNQvLPwBVFf2YUGCra5R/t
myEB8FNvmo+2II6O+1iyKsng/+tD/WkRv0Ot4SQ7qe8A2HITr52HkEs6wdM3et/x
LNT0ameWjzh5E4a9ZT7CGlCOBGaiFQ56vUq3zhhY7uCUD7wW/XsKAlKSdjCz6JZG
tyhWKLoYW6sdboiioD9UFfJvhizVAha+r8DkzYgnyHSSXPafK4O0+5U2806xB1Bf
X+7jpLHXE98qBQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:19 2025 by rpki-client on console-fra.rpki-client.org