Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File: YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier: NFxYZNaARJsCxpVhJCmi0Wxc0i1lAHp5u+e5QY3kKp8=
Subject key identifier: A2:C1:27:4C:86:F1:03:87:EF:0C:54:BB:1B:33:3B:31:C2:92:78:30
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 0194BA8476594CDF221985511394B91F4BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number: 13D4
Signing time: Fri 31 Jan 2025 04:00:30 +0000
Manifest this update: Fri 31 Jan 2025 04:00:30 +0000
Manifest next update: Sat 01 Feb 2025 04:00:30 +0000
Files and hashes: 1: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: /axDRGBxztWy7OkXfvkqmX9cUaCMw9DenEPnQKhtMdU=)
2: bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa (hash: ud4OsdTxDDqxynACtaERs5qzUlmK1nyDHD7M5p1jW+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:76:59:4c:df:22:19:85:51:13:94:b9:1f:4b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: Jan 31 04:00:30 2025 GMT
Not After : Feb 1 04:00:30 2025 GMT
Subject: CN=a2c1274c86f10387ef0c54bb1b333b31c2927830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:fa:43:45:3b:58:3a:21:b1:10:33:3d:a8:
16:a1:87:54:23:45:34:00:bf:6c:ef:29:7c:dd:8f:
2c:3c:46:c3:30:a3:8c:fd:a3:20:8e:cf:10:9e:32:
a7:5d:e8:3e:db:e3:c4:6f:78:19:53:5b:d0:7c:70:
80:cf:92:1b:6c:44:6a:f1:12:de:41:2f:b7:15:4a:
c6:3d:ec:71:ba:36:32:c8:9f:0a:a9:fb:e5:1d:04:
81:01:d8:33:3c:92:4f:84:cc:4d:73:85:ab:52:1e:
c6:b7:15:2f:08:10:94:ba:81:af:d8:c6:33:47:94:
01:b2:95:3e:c7:71:4c:5d:62:09:e2:04:9d:d0:78:
82:5c:60:1f:97:39:94:86:5e:ae:2f:21:4b:17:9c:
62:60:52:e3:4c:89:c8:f1:7d:1a:2f:5c:43:90:21:
c8:b0:ee:e6:7a:25:5f:d6:dd:11:6a:86:8c:66:97:
c0:70:32:01:73:44:0c:60:3c:23:31:49:09:2d:c4:
8f:de:df:b6:bd:c5:13:d4:6b:9f:29:b8:f6:be:ce:
c9:cc:51:6f:89:6d:0e:01:16:c7:68:58:e8:40:81:
78:56:65:5b:b9:f7:82:d3:1e:82:cf:95:56:74:88:
bb:6f:38:e3:f3:19:ba:34:bd:4e:b2:d9:a1:65:30:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C1:27:4C:86:F1:03:87:EF:0C:54:BB:1B:33:3B:31:C2:92:78:30
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ce:23:a3:42:bc:70:ce:06:a7:c7:85:91:e8:7f:0e:d6:12:
1d:43:05:68:49:58:5b:21:eb:b2:e6:1b:1a:6f:fb:5e:47:e0:
74:30:76:eb:8c:09:44:dd:19:76:e5:21:e5:8d:d5:81:6e:ec:
70:70:2c:cf:1f:04:56:3d:bd:b4:63:29:64:4d:2e:8b:14:f8:
cc:78:3a:aa:ad:18:1a:e2:ea:e5:74:88:24:7f:47:15:d4:27:
4b:bf:a1:71:da:ad:97:8f:e1:bb:a7:32:1c:16:44:06:fd:f8:
dc:11:5b:95:50:54:10:f1:c6:e2:d3:0e:2c:50:d0:b4:f7:64:
39:24:57:4c:2e:0c:f0:96:37:ea:5a:32:55:b5:b3:b5:1c:ff:
46:13:49:e5:6a:6d:07:35:9b:a4:97:a6:82:1e:59:28:76:b9:
59:44:60:bf:70:d5:84:67:1e:f7:4d:26:7b:bb:fa:5b:ed:55:
95:b5:e4:4e:49:ab:dd:84:c6:90:9a:3c:ac:fa:30:a5:ab:bf:
8a:8e:7a:71:e1:8a:f0:a5:6f:b2:a5:2d:a4:a5:7e:3c:1c:a3:
62:1e:b8:b3:88:1f:03:70:39:9f:08:99:5f:45:0b:0f:8d:3e:
cd:96:76:55:22:63:54:cb:33:40:6a:af:d4:da:37:8b:a4:39:
3d:70:7d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:12 2025 by rpki-client on console-fra.rpki-client.org