Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
File: yh3vhAA2XhysFuj3iHCS2smDtz4.mft (raw, json)
Hash identifier: H+uQtwKa4JGpQ4FvBv3mD2zQTbgcAfDYBRWL5a+lrbg=
Subject key identifier: E3:70:4C:A1:25:B8:3D:52:57:38:80:46:3B:A1:F4:81:92:38:2D:A4
Authority key identifier: CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
Certificate issuer: /CN=ca1def8400365e1cac16e8f7887092dac983b73e
Certificate serial: 0194BABBBA20D9E844E8A07C37952DAF7F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
Manifest number: 0FC6
Signing time: Fri 31 Jan 2025 05:00:52 +0000
Manifest this update: Fri 31 Jan 2025 05:00:52 +0000
Manifest next update: Sat 01 Feb 2025 05:00:52 +0000
Files and hashes: 1: JOHfVLRjbgChQjLZ30d-DxmHuLA.roa (hash: OvGleZlyc/SzFlxVrESN9Tsi/ml5v3uiXnmlsUGLhlw=)
2: KYuIjlD_ziUu3DKQBc29NCLEHMs.roa (hash: ovaCWeRdT+nBdpVH9f8Oy/HVlcip6zrEl0tqWXxNw4s=)
3: yh3vhAA2XhysFuj3iHCS2smDtz4.crl (hash: 9vjeJjjQ3bQpu/tBvQQUfmJjp6uQmduGk8/zRnCLY7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ba:20:d9:e8:44:e8:a0:7c:37:95:2d:af:7f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1def8400365e1cac16e8f7887092dac983b73e
Validity
Not Before: Jan 31 05:00:52 2025 GMT
Not After : Feb 1 05:00:52 2025 GMT
Subject: CN=e3704ca125b83d52573880463ba1f48192382da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:2d:7e:da:4d:d9:64:ad:63:4a:a8:4c:24:
73:68:89:8c:57:ea:e9:a0:97:4c:be:89:45:55:0e:
be:ee:a3:23:2f:43:b4:8d:f0:d4:8a:35:bc:1c:3b:
56:76:b0:b7:19:43:3f:24:64:68:d3:f1:18:3d:10:
8d:c8:6e:df:e9:47:92:33:e6:86:36:a0:1b:18:fd:
71:cf:b6:b4:56:12:c4:cf:4d:42:da:e0:71:b0:7b:
0c:91:2a:2f:1b:9f:7f:c3:ea:7f:5b:11:d7:c5:85:
8e:d7:96:ae:66:a6:11:8c:d3:d8:31:6f:bd:81:83:
60:b1:4e:5b:06:20:0b:82:23:29:d8:35:a5:65:69:
35:f0:66:8c:7f:e5:41:5e:b1:3d:92:5e:be:f8:6b:
1c:85:ba:d2:bc:1a:fa:9f:0f:c2:1e:20:56:28:e4:
c6:2d:7f:3c:c3:a6:5e:04:71:81:21:db:73:25:5c:
18:aa:fc:d6:cd:a9:f0:44:08:bb:73:7a:fe:48:9a:
1d:62:8c:ba:a9:5c:4a:ab:07:e3:46:9e:65:49:fb:
f3:9c:f9:e6:f8:a0:cd:61:59:39:e5:90:08:6a:7f:
6f:cc:16:b0:fe:01:ec:93:e3:e0:e9:94:66:c2:65:
24:18:93:64:5b:b4:18:93:ed:cb:77:9c:8b:a0:3f:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:70:4C:A1:25:B8:3D:52:57:38:80:46:3B:A1:F4:81:92:38:2D:A4
X509v3 Authority Key Identifier:
keyid:CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:59:73:d9:20:dc:ee:d3:74:e5:a6:ea:51:56:ce:84:de:82:
07:35:37:c0:21:c9:73:e6:d9:9b:66:88:00:df:4d:7b:70:0d:
c1:cd:8f:81:7d:81:ed:e8:c7:f7:49:23:ff:c6:ef:80:5e:7d:
23:fb:74:39:43:33:e1:9c:9c:8a:d4:7a:c7:e4:0b:4b:3e:e2:
03:05:e4:09:d8:39:6e:b6:43:21:14:07:2d:9a:41:90:b8:48:
9a:83:90:13:66:85:cb:5f:42:d0:15:bd:5f:5f:1e:1e:7e:08:
7d:13:67:d0:75:93:49:e7:2f:05:86:5f:96:5f:bc:a4:ea:9c:
9c:bf:17:f5:d0:d7:ed:18:66:31:00:7a:d6:52:07:08:c8:05:
2c:6f:59:54:97:4a:5f:07:eb:dd:0f:a5:4d:f3:1c:9b:25:87:
1f:15:9e:17:1e:21:b7:4b:bb:64:54:c3:e0:68:31:4e:c8:25:
82:f4:f2:38:55:db:4d:d9:57:a5:4f:30:aa:b3:5d:02:8b:6d:
fb:3d:bd:7e:7b:5a:9d:7c:79:26:95:08:1c:0b:79:7f:0d:48:
49:fc:b0:14:0b:f9:45:83:95:42:d1:4e:c2:80:b3:0b:31:a5:
5e:26:2d:e3:eb:00:ef:36:0c:62:3f:0a:4f:fb:93:ed:49:fe:
5e:7c:ba:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:25 2025 by rpki-client on console-fra.rpki-client.org