Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: PrLDKoCQuDnnUeQmkYeQkHGVzUKOvgwqMi53+Rmk7Bo=
Subject key identifier: 1E:B4:DD:72:D4:FA:71:66:00:B8:A4:20:51:5C:60:73:64:D5:B1:4D
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 0194BAF20682D155087114DC172687E4C47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 0DC9
Signing time: Fri 31 Jan 2025 06:00:10 +0000
Manifest this update: Fri 31 Jan 2025 06:00:10 +0000
Manifest next update: Sat 01 Feb 2025 06:00:10 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: /Ecu3QUvDlSSx/AjRcu9g/FkHOdVhWgzA/TaSZs66i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:06:82:d1:55:08:71:14:dc:17:26:87:e4:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Jan 31 06:00:10 2025 GMT
Not After : Feb 1 06:00:10 2025 GMT
Subject: CN=1eb4dd72d4fa716600b8a420515c607364d5b14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:9f:31:ac:96:66:0b:b2:c4:d9:41:84:f2:
70:40:cf:cb:72:1c:06:59:99:a6:b6:1c:ae:7a:53:
9a:8b:ba:5c:03:ad:6f:d4:e8:5f:48:42:59:08:bb:
58:53:09:b1:27:d3:09:c6:68:d0:d9:dd:cb:e6:b2:
d9:1b:83:05:08:6a:c3:07:fa:18:3e:e0:6e:1c:41:
b7:27:bf:cd:2a:d7:87:ba:df:96:fa:70:f5:a4:cb:
bf:b9:9b:a4:40:84:a8:2a:c6:6a:09:3f:ac:77:6d:
ca:68:0c:d3:e3:16:07:01:2f:c3:40:59:82:a7:51:
0c:ea:2a:31:da:5b:ed:fa:24:86:fb:0e:49:ac:69:
81:1d:cb:94:2e:b2:04:b7:ce:b5:85:35:df:c3:a2:
31:98:16:4f:2c:84:fc:90:6a:e1:49:f9:58:70:cf:
41:8f:17:ac:eb:e5:8b:f6:88:27:c4:7a:c9:19:03:
95:4a:b6:ca:52:52:af:90:07:49:b5:30:a1:ad:f8:
53:93:98:13:65:69:4a:04:c7:db:ee:99:8a:16:49:
70:3d:e9:21:72:f3:e1:6c:4a:6c:6c:37:11:11:ac:
5f:9f:e6:5c:0d:2b:53:ac:c3:89:c0:d4:c7:32:19:
ce:a6:90:b8:e4:9f:61:b7:90:b9:5b:83:e8:5e:4c:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:DD:72:D4:FA:71:66:00:B8:A4:20:51:5C:60:73:64:D5:B1:4D
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:34:56:76:97:c3:0d:27:fe:1f:a2:8a:94:a4:84:0a:39:aa:
87:26:a8:cc:9c:0b:e8:33:90:f2:b9:16:0d:46:c0:1f:81:8b:
18:bf:01:1e:c1:a1:dc:18:6e:55:0d:59:ad:ac:c3:99:e1:1d:
3f:80:da:51:11:aa:e4:a0:8f:08:83:29:13:b9:cc:a6:e4:a6:
d5:d4:65:a0:ca:47:fc:56:0d:24:35:dc:9b:79:d6:14:14:06:
5d:79:c1:9e:23:8d:98:7f:ca:d8:a0:87:4d:00:54:f7:8e:80:
8f:fb:8e:2b:75:8b:49:c1:2e:94:28:8f:16:2f:51:68:87:bd:
fd:2c:00:db:ba:2a:de:a9:9f:13:de:06:3d:08:db:5b:53:08:
83:f5:09:d3:e4:27:80:fb:34:0d:06:57:51:bd:1c:d6:45:fc:
d0:32:ce:ad:29:6a:e8:3d:81:5d:34:60:4b:78:83:84:67:75:
2b:27:d2:cc:1c:7a:bb:18:af:84:6b:d2:fc:38:eb:88:d8:0c:
49:05:f7:2d:55:8d:d8:2b:05:b2:dc:1a:39:d5:67:c6:2e:e6:
60:63:11:c8:23:fa:85:40:a8:a1:21:fc:12:2e:9b:85:27:30:
03:f8:02:2c:8c:ac:4f:d4:bd:14:ce:fd:73:bf:4b:e6:be:ee:
ff:36:85:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68gaC0VUIcRTcFyaH5MR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWJkNjJiZWVjYWIwZTkwM2IyOTgxMTI0MWRiMjQ0YmJm
NTJjMzkwHhcNMjUwMTMxMDYwMDEwWhcNMjUwMjAxMDYwMDEwWjAzMTEwLwYDVQQD
EygxZWI0ZGQ3MmQ0ZmE3MTY2MDBiOGE0MjA1MTVjNjA3MzY0ZDViMTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9ifMayWZguyxNlBhPJwQM/LchwG
WZmmthyuelOai7pcA61v1OhfSEJZCLtYUwmxJ9MJxmjQ2d3L5rLZG4MFCGrDB/oY
PuBuHEG3J7/NKteHut+W+nD1pMu/uZukQISoKsZqCT+sd23KaAzT4xYHAS/DQFmC
p1EM6iox2lvt+iSG+w5JrGmBHcuULrIEt861hTXfw6IxmBZPLIT8kGrhSflYcM9B
jxes6+WL9ognxHrJGQOVSrbKUlKvkAdJtTChrfhTk5gTZWlKBMfb7pmKFklwPekh
cvPhbEpsbDcREaxfn+ZcDStTrMOJwNTHMhnOppC45J9ht5C5W4PoXkxQIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB603XLU+nFmALikIFFcYHNk1bFNMB8GA1UdIwQY
MBaAFMsb1ivuyrDpA7KYESQdskS79Sw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lMDJiNDctZjJlMC00NDAyLTgxNGYt
ZTQwMTZhZDUzY2M5LzEveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lMDJiNDctZjJlMC00NDAyLTgxNGYtZTQwMTZhZDUzY2M5
LzEveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDRWdpfD
DSf+H6KKlKSECjmqhyaozJwL6DOQ8rkWDUbAH4GLGL8BHsGh3BhuVQ1ZrazDmeEd
P4DaURGq5KCPCIMpE7nMpuSm1dRloMpH/FYNJDXcm3nWFBQGXXnBniONmH/K2KCH
TQBU946Aj/uOK3WLScEulCiPFi9RaIe9/SwA27oq3qmfE94GPQjbW1MIg/UJ0+Qn
gPs0DQZXUb0c1kX80DLOrSlq6D2BXTRgS3iDhGd1KyfSzBx6uxivhGvS/DjriNgM
SQX3LVWN2CsFstwaOdVnxi7mYGMRyCP6hUCooSH8Ei6bhScwA/gCLIysT9S9FM79
c79L5r7u/zaFXg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:45 2025 by rpki-client on console-fra.rpki-client.org