Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File: YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier: HWLzQ1mYXOU5eLgoQeSIVqzfChK0GSMlhA1wGtaxxsc=
Subject key identifier: 75:F9:0A:83:2E:D4:50:FD:B7:FE:41:75:0A:DC:38:76:16:66:A0:F0
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 0194BABB7CEA646738C90C934F63C2D98D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number: 04A8
Signing time: Fri 31 Jan 2025 05:00:36 +0000
Manifest this update: Fri 31 Jan 2025 05:00:36 +0000
Manifest next update: Sat 01 Feb 2025 05:00:36 +0000
Files and hashes: 1: QPglHGOSHFrs1mgAtq2zwd82Smc.roa (hash: y5xHnZXArsaVabnfSwbndMTBY0pIDvTGUm5JTD4ZakI=)
2: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: kwBW8GnS9Zj+aSdiGUC6CTfszY1mdpaHN2xSlw/PFrc=)
3: eTJhKe-LETepmtUCJc23KDC15Os.roa (hash: bWxC4iCttKGE5WGBMq9/txv6VyYSnQgWWwgULLvAoD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:7c:ea:64:67:38:c9:0c:93:4f:63:c2:d9:8d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Jan 31 05:00:36 2025 GMT
Not After : Feb 1 05:00:36 2025 GMT
Subject: CN=75f90a832ed450fdb7fe41750adc38761666a0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:47:68:4e:f6:07:4c:b9:e4:dd:2c:55:cf:
63:bf:a6:82:07:33:9d:8a:03:5c:03:20:81:90:e8:
1a:29:6f:18:9a:69:10:47:80:46:72:51:5c:5e:a4:
fb:f7:99:48:1d:1f:ab:72:fa:9c:ea:53:fa:04:c6:
d4:1c:14:87:9e:92:04:f2:af:33:81:70:78:79:45:
10:cc:74:df:9c:c3:50:2c:e2:98:5d:c4:b2:2f:60:
7e:c6:97:99:32:7c:fd:7f:00:24:4c:d6:b2:41:f3:
d7:e8:36:9e:91:28:fc:1c:13:b4:0c:c7:1a:84:68:
fd:9f:8a:40:c6:89:18:2f:f6:8b:c8:45:c5:ea:34:
3c:71:15:a9:ac:3f:14:a2:68:4d:50:89:fd:e5:55:
7f:ee:d4:7a:59:52:dc:61:ad:e7:57:f7:12:9b:6d:
50:a7:62:f6:88:d9:45:27:46:a7:4c:34:4e:45:0d:
0e:36:75:68:c6:bb:0c:6a:31:4a:ec:21:2d:c1:40:
23:08:5a:d3:de:09:d3:21:a9:23:17:6d:fc:fb:9a:
a9:ec:7b:b4:e6:ba:69:4b:57:51:2a:d3:25:e2:8d:
ca:3d:f2:4b:93:01:5d:02:7f:99:80:58:f3:06:85:
f3:6b:6b:71:5b:af:fe:08:6f:52:69:08:69:e6:be:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F9:0A:83:2E:D4:50:FD:B7:FE:41:75:0A:DC:38:76:16:66:A0:F0
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:49:9b:11:58:df:51:93:71:e4:b5:2a:09:0f:77:e8:5a:37:
53:43:cb:01:39:39:cf:74:30:54:6e:89:11:93:9f:92:48:1c:
48:c1:e1:26:17:6a:9f:a1:8b:20:bc:5c:ff:b0:a1:8c:68:dd:
b9:cb:09:db:3b:41:3f:80:b4:c9:c8:b7:f0:ff:9b:32:07:bb:
1d:e1:c6:f0:1a:68:86:e7:af:5b:da:73:c1:ea:2d:10:df:4c:
2e:30:5f:78:04:bd:90:84:a1:75:bb:e4:30:96:d8:c2:80:39:
cd:6c:0d:00:61:79:13:66:f1:81:5d:66:bf:d6:9e:ea:39:df:
15:8e:46:f3:4a:61:3b:ef:ac:bf:4f:55:f6:ff:ab:a0:bd:06:
ea:34:74:f2:07:1e:74:ff:65:f3:e2:6d:48:e2:2d:b6:c3:e3:
76:cb:5f:fc:1f:14:da:54:18:ae:cb:41:69:e5:f0:df:1f:b6:
44:9f:39:34:e9:9c:fc:58:34:d0:18:b7:98:10:ee:10:c8:fe:
9b:b4:2d:3a:de:39:8b:f6:b3:1c:f0:e9:f6:33:91:71:e1:5a:
b2:d3:2c:0f:1d:f6:c0:ca:a2:80:05:a8:63:a0:3f:8e:0f:68:
e2:f6:30:f1:91:87:1a:78:96:cb:87:c0:d1:67:e7:7f:4d:96:
3d:87:d1:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u3zqZGc4yQyTT2PC2Y1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjk1NTE4ZWQ0ZjU1ODJhMmY2YzExOTU1NzQwMjg0YmMw
ODgxMzQwHhcNMjUwMTMxMDUwMDM2WhcNMjUwMjAxMDUwMDM2WjAzMTEwLwYDVQQD
Eyg3NWY5MGE4MzJlZDQ1MGZkYjdmZTQxNzUwYWRjMzg3NjE2NjZhMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZFHaE72B0y55N0sVc9jv6aCBzOd
igNcAyCBkOgaKW8YmmkQR4BGclFcXqT795lIHR+rcvqc6lP6BMbUHBSHnpIE8q8z
gXB4eUUQzHTfnMNQLOKYXcSyL2B+xpeZMnz9fwAkTNayQfPX6DaekSj8HBO0DMca
hGj9n4pAxokYL/aLyEXF6jQ8cRWprD8UomhNUIn95VV/7tR6WVLcYa3nV/cSm21Q
p2L2iNlFJ0anTDRORQ0ONnVoxrsMajFK7CEtwUAjCFrT3gnTIakjF238+5qp7Hu0
5rppS1dRKtMl4o3KPfJLkwFdAn+ZgFjzBoXza2txW6/+CG9SaQhp5r7oLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHX5CoMu1FD9t/5BdQrcOHYWZqDwMB8GA1UdIwQY
MBaAFGG5VRjtT1WCovbBGVV0AoS8CIE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJsVkdPMVBWWUtpOXNFWlZYUUNoTHdJZ1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMjQwZTktMGVhYi00OGZiLTk2MGIt
M2I2NTFiYjA4ZWZiLzEvWWJsVkdPMVBWWUtpOXNFWlZYUUNoTHdJZ1RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8zMjQwZTktMGVhYi00OGZiLTk2MGItM2I2NTFiYjA4ZWZi
LzEvWWJsVkdPMVBWWUtpOXNFWlZYUUNoTHdJZ1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkmbEVjf
UZNx5LUqCQ936Fo3U0PLATk5z3QwVG6JEZOfkkgcSMHhJhdqn6GLILxc/7ChjGjd
ucsJ2ztBP4C0yci38P+bMge7HeHG8BpohuevW9pzweotEN9MLjBfeAS9kIShdbvk
MJbYwoA5zWwNAGF5E2bxgV1mv9ae6jnfFY5G80phO++sv09V9v+roL0G6jR08gce
dP9l8+JtSOIttsPjdstf/B8U2lQYrstBaeXw3x+2RJ85NOmc/Fg00Bi3mBDuEMj+
m7QtOt45i/azHPDp9jORceFastMsDx32wMqigAWoY6A/jg9o4vYw8ZGHGniWy4fA
0Wfnf02WPYfRug==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:50 2025 by rpki-client on console-fra.rpki-client.org