Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
File: YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json)
Hash identifier: 2ixxFk+5TJ5zCayb+vWYWLbdArDjXvCKHoj4JqERvgM=
Subject key identifier: 81:73:03:7E:26:CA:69:3E:11:49:23:D7:2F:78:81:B8:C8:D7:1D:A5
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Certificate issuer: /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial: 019510C697BAF0F2F87FB649A7F79650EE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
Manifest number: 0191
Signing time: Sun 16 Feb 2025 22:00:05 +0000
Manifest this update: Sun 16 Feb 2025 22:00:05 +0000
Manifest next update: Mon 17 Feb 2025 22:00:05 +0000
Files and hashes: 1: Q0gUuxATATDf6JEQ9fzt1u3IZsc.roa (hash: 3y/S39XmNPx0DoVA3l0EHWQrU4S+Z88s+G6ph2XRAwc=)
2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: 2pCZwu1sRp3yGRhgo20gLsXaEpfTdYICAt70yZCIsTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:97:ba:f0:f2:f8:7f:b6:49:a7:f7:96:50:ee:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Validity
Not Before: Feb 16 22:00:05 2025 GMT
Not After : Feb 17 22:00:05 2025 GMT
Subject: CN=8173037e26ca693e114923d72f7881b8c8d71da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:a0:9e:e4:10:7f:d4:c2:f3:7e:f2:3a:a2:
1d:17:eb:e4:4c:46:3d:77:3d:d6:cd:b6:7e:1a:a5:
e3:1f:ab:ef:4a:b5:f4:3a:92:19:57:b1:77:67:92:
4b:60:5b:03:89:ea:48:d5:26:f6:5f:4c:0a:47:6d:
4c:f6:14:26:8e:ad:a0:73:07:45:8e:a9:26:5e:f3:
d5:3f:d6:8b:0e:6e:b9:67:61:90:fb:87:46:5e:aa:
f8:da:41:22:bf:9e:7e:9b:2f:10:ae:34:69:0f:e2:
c3:85:ff:d7:bd:97:e1:0e:5c:1d:26:6a:e4:cf:68:
aa:d3:a1:35:ae:0e:77:31:cd:ca:6f:a3:7b:bc:55:
45:f0:3a:69:6d:99:a6:d1:84:16:cb:f1:79:e2:4a:
ba:e4:0d:db:b6:93:a1:53:42:87:a8:87:70:43:67:
2d:d7:19:d6:72:ac:bb:33:47:ab:51:4c:53:8e:e7:
b4:d4:3f:1b:ea:63:f6:a8:47:8b:26:8e:65:9d:8b:
9d:aa:06:2a:3d:f6:ac:49:aa:ac:d8:11:06:f7:e7:
28:fa:99:83:94:ad:e5:28:5e:fb:07:de:39:ad:5c:
28:3a:16:8b:f6:af:aa:3d:aa:10:20:29:13:cd:46:
b0:ef:5b:28:ad:7a:2e:b7:c4:20:f3:67:bb:0d:64:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:73:03:7E:26:CA:69:3E:11:49:23:D7:2F:78:81:B8:C8:D7:1D:A5
X509v3 Authority Key Identifier:
keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e0:bc:5e:a9:0b:c8:45:16:ac:70:52:df:dc:51:50:2a:07:
87:c0:51:a9:b7:e4:ac:c9:67:c5:2b:74:d7:78:bd:07:80:e8:
3a:50:ec:8c:30:8e:d8:de:e5:fe:98:05:7c:8a:ce:a8:76:ae:
67:fd:f0:14:94:bd:2c:c1:c4:ae:db:90:bb:3e:6c:2c:c9:7e:
1d:b0:3b:68:d2:7b:5a:f0:56:b7:16:79:e5:61:7b:1b:a2:18:
36:ea:bd:b7:64:48:55:3d:b9:a7:6c:41:83:84:7e:6e:c6:91:
78:84:06:dc:ff:f2:c3:71:8f:ae:83:96:c3:1c:7c:61:ea:78:
06:34:13:41:14:8a:cf:6d:39:7f:ba:cb:61:4c:0d:8e:ba:f5:
d2:36:57:89:11:2e:84:e5:c8:2b:b2:bf:5a:eb:ed:b4:78:2f:
9a:42:d3:65:46:06:c0:84:96:85:fd:56:b5:73:f5:96:bd:b3:
cf:d2:3d:86:ed:d2:01:94:19:25:01:59:e2:5b:34:e0:8b:10:
22:33:c3:87:86:31:ea:18:1f:99:6f:e6:96:67:8c:4e:fc:78:
71:9e:3b:70:ee:c6:8d:42:2e:41:e5:88:0e:1b:4c:2c:fb:a8:
e8:c8:14:3c:6c:aa:09:ed:33:37:dd:6d:7e:00:47:e5:a9:73:
45:9a:cf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:44 2025 by rpki-client