Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
File: DYYRtReZGJkx4wrhvpWs2oHj4cw.mft (raw, json)
Hash identifier: lX0GmpQo38wE1WB79t+gH8VYsZ56xm0jq55euoHG1zQ=
Subject key identifier: 3E:BF:1B:33:E6:F2:7E:B3:C5:4F:C7:15:D9:8C:39:22:0F:56:7E:FD
Authority key identifier: 0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
Certificate issuer: /CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Certificate serial: 0194BB971703FFACE769D2F1EC0449B0D90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 09:00:28 +0000
Manifest this update: Fri 31 Jan 2025 09:00:28 +0000
Manifest next update: Sat 01 Feb 2025 09:00:28 +0000
Files and hashes: 1: DYYRtReZGJkx4wrhvpWs2oHj4cw.crl (hash: IcrKQSEsjI8uMmM/89pNZx6wgNU6SlnYZ951XZuc+/8=)
2: wD2g-VtZvqp7IY0550_PgDhJeD0.roa (hash: lT0qtpgd/Q3svueonVDRMVNhaFwZxKOMYzAHt0tWC5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:17:03:ff:ac:e7:69:d2:f1:ec:04:49:b0:d9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Validity
Not Before: Jan 31 09:00:28 2025 GMT
Not After : Feb 1 09:00:28 2025 GMT
Subject: CN=3ebf1b33e6f27eb3c54fc715d98c39220f567efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:52:4f:8a:d6:e1:51:8d:3c:37:22:4e:f0:
48:64:d0:50:28:81:4d:31:d1:c4:0e:93:89:9f:e6:
e7:52:bf:e1:91:7e:65:bd:a5:db:d5:03:d4:48:21:
4c:23:d2:75:1b:b7:7a:68:0c:68:27:41:a8:6b:97:
fa:a2:f0:85:9c:70:3c:7a:b5:7f:d4:93:44:d3:4d:
64:c4:6b:79:e1:53:b8:83:25:58:d4:02:c2:8b:c6:
14:4e:68:c5:fc:03:94:e7:31:6f:b1:0c:f9:39:84:
c5:4d:5b:a3:a2:b8:06:c0:50:6b:89:be:6d:c2:1c:
8a:37:11:3d:d0:15:f4:c0:5b:73:c6:5c:2b:8b:f6:
ec:19:88:c9:67:4d:20:18:50:54:55:3a:b7:5c:68:
c9:86:22:8a:f2:64:28:90:44:33:95:01:9d:44:59:
96:82:af:fe:5a:84:75:0d:35:d0:8c:b0:38:85:53:
6b:18:d3:02:5f:b8:48:89:6b:fd:e6:bf:8f:6d:cd:
e4:4f:ff:3b:d8:f4:6d:d9:81:97:a0:22:57:b7:20:
04:b4:b7:69:60:02:f5:10:e6:81:a5:bf:d9:86:9d:
08:b7:fc:d5:f8:18:fe:9c:7d:c8:97:b4:0c:da:a8:
b5:08:7c:5b:d5:bf:7b:aa:34:ec:46:b1:67:3b:4e:
f0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BF:1B:33:E6:F2:7E:B3:C5:4F:C7:15:D9:8C:39:22:0F:56:7E:FD
X509v3 Authority Key Identifier:
keyid:0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:67:64:42:54:56:22:1d:85:3a:2f:78:cf:a0:33:0d:b1:d8:
db:39:0c:be:0e:e7:ae:df:41:bf:c2:44:93:73:08:fe:1b:4e:
3f:ca:19:fc:c3:38:13:06:47:60:0f:2c:ee:7c:ba:d4:74:f7:
b8:43:ae:40:74:51:04:73:b1:1b:f1:91:56:09:df:86:5d:c4:
56:9d:42:52:31:06:70:44:35:8b:7c:a7:61:c1:25:4f:1d:38:
86:82:23:38:7f:b9:ef:75:b5:f2:f9:19:c4:29:24:0d:86:a7:
54:4d:32:5d:36:5b:e3:6a:8c:e0:66:e1:6c:8a:13:95:2b:df:
80:4c:3e:a7:8c:86:b0:8a:28:40:00:00:7b:eb:f1:f8:cc:c5:
2b:88:6e:fe:af:b6:ee:5a:b3:8e:b4:c8:8a:e5:a1:1c:02:27:
60:ad:b9:17:41:d4:89:de:93:01:3f:4f:88:fd:16:6d:51:1e:
a0:d6:fd:19:2e:7e:4c:1c:a3:9d:cd:d8:db:28:46:b9:f5:3a:
13:24:72:09:33:1b:93:ba:e2:ac:4f:17:00:f9:7d:d1:5e:4d:
50:1a:a5:17:be:c9:ad:b1:3b:6d:63:35:1b:15:82:cb:0a:ea:
91:91:47:be:be:bc:b4:1a:ef:1f:29:b9:ec:cf:3e:1d:fa:16:
86:48:05:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:11 2025 by rpki-client on console-fra.rpki-client.org