Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File: YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier: etjRKPcmMZ00fwk0w+4PwAjvkSEvf6VFZt3Tuwbb5yw=
Subject key identifier: 88:E4:6D:84:BC:A2:CA:B6:E2:D3:C6:E7:DE:1D:13:B6:41:47:72:D1
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 0194BB6030FC3A8966D923E5B07054D62325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 08:00:30 +0000
Manifest this update: Fri 31 Jan 2025 08:00:30 +0000
Manifest next update: Sat 01 Feb 2025 08:00:30 +0000
Files and hashes: 1: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: X24yGfA1ysMxcpcef4gav4eAFDn+g5zsAwrn1FA6lNk=)
2: bdP3lbH5ZQAyroCoiOKXaEW3gls.roa (hash: cDp8fKJxsr66s5SbMWdrl57QdYSD9f5YI04JxjPak0U=)
3: qiJ5Co2COWp43yOD01u1VY4pCJY.roa (hash: Anp0UBOibdiSB6xGLwvRtwG1gQPGc4uydYTJppvlKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:30:fc:3a:89:66:d9:23:e5:b0:70:54:d6:23:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Jan 31 08:00:30 2025 GMT
Not After : Feb 1 08:00:30 2025 GMT
Subject: CN=88e46d84bca2cab6e2d3c6e7de1d13b6414772d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:26:7a:65:eb:98:3e:00:ce:60:73:56:d2:
70:4f:23:52:a4:5f:e6:d8:e5:31:97:66:2e:f0:df:
e7:74:70:8b:45:16:d0:71:8f:8f:0f:c1:54:07:da:
d4:e0:c3:c9:98:ff:5c:5b:18:f5:36:5d:37:66:ae:
57:9b:e7:2f:6a:16:06:c5:87:a1:48:15:90:8a:a4:
21:2a:93:e1:7b:36:4e:c2:4f:1e:ac:e8:38:87:d4:
e9:68:ba:8e:41:89:1a:a4:97:50:a1:28:9d:59:22:
36:8f:ca:16:6a:1f:df:c4:85:57:3a:5b:48:31:38:
f9:bd:48:c1:39:67:30:71:a3:13:dd:57:82:1f:a3:
a7:18:0c:6f:35:6f:62:20:16:83:d2:4b:0f:78:cb:
4f:ae:7b:4b:81:e8:e4:9c:63:a5:02:dc:9d:b4:89:
67:72:b3:d8:e4:95:67:5f:cd:e3:0b:18:f5:65:d1:
18:ea:f8:2a:93:4b:e7:b3:f2:87:d0:d4:4b:3b:2b:
ac:a7:37:30:7f:5c:6e:56:fa:1b:ae:e8:21:25:02:
55:9d:9a:e3:32:94:f3:25:eb:3f:f7:04:e9:e2:b3:
8f:c4:74:d4:34:b4:70:49:9b:d5:9f:df:e2:55:3c:
94:ec:8e:4c:19:b4:05:06:8b:e2:96:49:e2:30:bc:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E4:6D:84:BC:A2:CA:B6:E2:D3:C6:E7:DE:1D:13:B6:41:47:72:D1
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0f:01:e6:29:46:c4:7a:ea:70:ca:94:88:df:92:a8:eb:7d:
47:63:8d:44:bd:be:17:fe:e2:74:f6:78:f4:7b:29:c4:2e:b0:
94:d2:9d:f8:6d:62:bd:31:7b:b4:15:55:ca:73:e6:14:78:6a:
34:12:69:8d:18:87:14:ac:6d:00:67:13:26:ab:15:6c:78:5b:
0b:4c:ce:13:2a:97:96:ff:cf:f2:34:ae:d3:d2:b4:fe:f2:b0:
fa:d0:21:2d:ce:ab:e5:58:4d:f8:7d:66:fd:99:d7:bf:44:a4:
f6:50:27:96:23:8f:32:e2:13:9a:ca:14:36:b8:d9:bd:f0:d1:
f9:7f:46:a7:8d:b3:c9:b3:80:97:a9:fb:cc:69:19:4e:f0:5f:
71:28:12:fe:dd:11:a6:5f:ec:3e:b4:97:8b:2e:15:7e:81:64:
83:74:c5:a1:09:10:79:e2:d6:93:21:23:88:d9:cb:ea:5f:20:
5c:32:ad:e4:34:9a:6e:1a:7b:cd:c6:d1:35:78:00:8c:d9:17:
63:d1:04:81:79:58:2a:33:b7:d5:dd:0a:2d:88:77:5d:03:e0:
a4:0c:2b:0d:42:9e:b1:a7:37:5a:86:07:25:5c:7e:de:42:d8:
fd:0a:8f:19:b5:c7:9f:99:13:2c:91:44:bf:4b:5a:f0:76:98:
21:08:02:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YDD8Oolm2SPlsHBU1iMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMWFjYTVmOWExZGNmYTE5NzA0ZDFmMDM3N2YxYjlmZTkx
NDVlMDgwHhcNMjUwMTMxMDgwMDMwWhcNMjUwMjAxMDgwMDMwWjAzMTEwLwYDVQQD
Eyg4OGU0NmQ4NGJjYTJjYWI2ZTJkM2M2ZTdkZTFkMTNiNjQxNDc3MmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphYmemXrmD4AzmBzVtJwTyNSpF/m
2OUxl2Yu8N/ndHCLRRbQcY+PD8FUB9rU4MPJmP9cWxj1Nl03Zq5Xm+cvahYGxYeh
SBWQiqQhKpPhezZOwk8erOg4h9TpaLqOQYkapJdQoSidWSI2j8oWah/fxIVXOltI
MTj5vUjBOWcwcaMT3VeCH6OnGAxvNW9iIBaD0ksPeMtPrntLgejknGOlAtydtIln
crPY5JVnX83jCxj1ZdEY6vgqk0vns/KH0NRLOyuspzcwf1xuVvobrughJQJVnZrj
MpTzJes/9wTp4rOPxHTUNLRwSZvVn9/iVTyU7I5MGbQFBovilkniMLymZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjkbYS8osq24tPG594dE7ZBR3LRMB8GA1UdIwQY
MBaAFGMayl+aHc+hlwTR8Dd/G5/pFF4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTkt
ZDJiMDJhNDAzYzdiLzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTktZDJiMDJhNDAzYzdi
LzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXw8B5ilG
xHrqcMqUiN+SqOt9R2ONRL2+F/7idPZ49HspxC6wlNKd+G1ivTF7tBVVynPmFHhq
NBJpjRiHFKxtAGcTJqsVbHhbC0zOEyqXlv/P8jSu09K0/vKw+tAhLc6r5VhN+H1m
/ZnXv0Sk9lAnliOPMuITmsoUNrjZvfDR+X9Gp42zybOAl6n7zGkZTvBfcSgS/t0R
pl/sPrSXiy4VfoFkg3TFoQkQeeLWkyEjiNnL6l8gXDKt5DSabhp7zcbRNXgAjNkX
Y9EEgXlYKjO31d0KLYh3XQPgpAwrDUKesac3WoYHJVx+3kLY/QqPGbXHn5kTLJFE
v0ta8HaYIQgCNg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:51 2025 by rpki-client on console-fra.rpki-client.org