Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier: Mo/uoKbT7O3c8SpDhmQv8z++aCieOQ/5hnJj/7ugILk=
Subject key identifier: 7A:66:41:22:D9:7C:21:7F:EF:F2:7E:65:D1:DF:BF:B2:24:3F:6F:89
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial: 0194BAF242CDAE090E2C2892217B0F568CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number: 0C48
Signing time: Fri 31 Jan 2025 06:00:26 +0000
Manifest this update: Fri 31 Jan 2025 06:00:26 +0000
Manifest next update: Sat 01 Feb 2025 06:00:26 +0000
Files and hashes: 1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: EmJMNzZJDX7YbT9ADKjqcVOwpllSHVtqYF2w0pKiwGU=)
2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:42:cd:ae:09:0e:2c:28:92:21:7b:0f:56:8c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Validity
Not Before: Jan 31 06:00:26 2025 GMT
Not After : Feb 1 06:00:26 2025 GMT
Subject: CN=7a664122d97c217feff27e65d1dfbfb2243f6f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:ae:b0:9b:53:8c:fc:80:80:da:35:a8:be:
2e:43:b7:d6:10:c9:c9:3f:50:71:7b:df:ee:4e:e1:
64:cb:d7:11:97:ab:f6:7a:e6:5b:68:ea:75:0f:51:
de:41:bc:b2:56:2c:9a:72:14:7f:f6:03:7b:81:4b:
6f:4b:f8:8f:42:14:09:f6:2d:8b:7b:7c:8f:ff:72:
e7:d9:ef:9a:cd:2e:b0:dc:5d:bb:c5:b4:7d:2d:35:
86:b5:15:6e:66:92:98:80:34:54:3f:69:d1:87:7d:
8a:a4:be:4f:4f:7a:e6:3f:7a:55:73:9a:c6:10:82:
ff:42:ca:58:aa:32:51:9b:16:39:88:25:69:05:7f:
ef:2a:5b:ae:bb:44:64:8a:fd:d8:fc:81:e3:99:38:
a8:4a:b3:7a:e2:81:5b:a5:e5:1f:8b:5a:06:b1:b2:
f6:8d:12:77:ef:e1:e6:fd:d8:2d:2e:e1:12:87:33:
ec:78:d5:37:2c:4f:57:88:52:33:5a:99:09:b1:cc:
8d:60:d2:a6:7e:ce:a9:74:77:a4:5d:5d:57:2b:1f:
0c:cd:1d:ca:38:08:e6:91:30:a8:20:69:57:20:16:
9e:67:71:34:e9:8c:ac:b0:9b:ac:7a:95:9f:6f:39:
c8:e1:e4:49:ef:67:4d:70:75:54:66:6f:a5:2e:ad:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:66:41:22:D9:7C:21:7F:EF:F2:7E:65:D1:DF:BF:B2:24:3F:6F:89
X509v3 Authority Key Identifier:
keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3e:fc:bf:73:ea:f2:ec:be:5e:ba:d1:51:4f:35:22:a0:7f:
2a:0a:b0:01:a0:ef:66:e8:bd:6e:7b:b9:5e:b2:7a:60:53:b2:
72:ea:63:69:0c:13:91:6b:d3:83:c7:18:16:29:02:eb:eb:b0:
5c:a8:b3:a6:30:f9:8a:00:99:98:49:5c:d3:a5:5a:79:65:69:
0c:f9:12:d6:c2:6e:d5:3b:5c:c4:ba:4d:47:b8:8a:01:cf:5f:
fd:99:e5:c7:75:23:3e:50:d7:75:cd:5b:f9:4d:29:5f:e0:9e:
f2:a8:ce:79:92:15:4a:95:1d:29:a0:51:82:ec:69:dc:1b:01:
d1:f7:fd:80:f9:fd:53:9a:ae:28:9c:d0:9d:3c:b5:b5:db:b4:
30:13:7a:b8:15:ee:57:fa:20:09:03:a2:b8:34:d6:b1:9e:6c:
7c:af:14:ce:51:58:ab:cd:d4:da:8c:af:06:ad:f6:b1:ec:a1:
e6:7c:16:87:d2:17:26:4a:11:26:66:2f:0c:d9:c4:af:da:c6:
fc:9a:c4:9c:14:59:cf:36:ca:0e:f0:92:75:cd:3f:9a:fc:95:
a6:dc:1e:80:f2:05:71:f7:de:86:b3:26:1a:d7:ee:36:7c:b3:
45:f6:63:39:d6:e2:5c:17:69:13:5f:b5:32:42:f1:45:07:be:
52:8c:26:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68kLNrgkOLCiSIXsPVozGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOGEwOGUyOGIzMWJiZTVjMTgxMmZkYTkwZTdlOGM4YTQ4
MzM1ZTgwHhcNMjUwMTMxMDYwMDI2WhcNMjUwMjAxMDYwMDI2WjAzMTEwLwYDVQQD
Eyg3YTY2NDEyMmQ5N2MyMTdmZWZmMjdlNjVkMWRmYmZiMjI0M2Y2Zjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAeusJtTjPyAgNo1qL4uQ7fWEMnJ
P1Bxe9/uTuFky9cRl6v2euZbaOp1D1HeQbyyViyachR/9gN7gUtvS/iPQhQJ9i2L
e3yP/3Ln2e+azS6w3F27xbR9LTWGtRVuZpKYgDRUP2nRh32KpL5PT3rmP3pVc5rG
EIL/QspYqjJRmxY5iCVpBX/vKluuu0Rkiv3Y/IHjmTioSrN64oFbpeUfi1oGsbL2
jRJ37+Hm/dgtLuEShzPseNU3LE9XiFIzWpkJscyNYNKmfs6pdHekXV1XKx8MzR3K
OAjmkTCoIGlXIBaeZ3E06YyssJusepWfbznI4eRJ72dNcHVUZm+lLq1sVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpmQSLZfCF/7/J+ZdHfv7IkP2+JMB8GA1UdIwQY
MBaAFGKKCOKLMbvlwYEv2pDn6MikgzXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWIt
MGExZDRjMDIyZTUxLzEvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWItMGExZDRjMDIyZTUx
LzEvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiz78v3Pq
8uy+XrrRUU81IqB/KgqwAaDvZui9bnu5XrJ6YFOycupjaQwTkWvTg8cYFikC6+uw
XKizpjD5igCZmElc06VaeWVpDPkS1sJu1TtcxLpNR7iKAc9f/Znlx3UjPlDXdc1b
+U0pX+Ce8qjOeZIVSpUdKaBRguxp3BsB0ff9gPn9U5quKJzQnTy1tdu0MBN6uBXu
V/ogCQOiuDTWsZ5sfK8UzlFYq83U2oyvBq32seyh5nwWh9IXJkoRJmYvDNnEr9rG
/JrEnBRZzzbKDvCSdc0/mvyVptwegPIFcffehrMmGtfuNnyzRfZjOdbiXBdpE1+1
MkLxRQe+Uowmhw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:26 2025 by rpki-client on console-fra.rpki-client.org