Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
File: ydpiiCTNWbFCcrQFiolkLktHvdw.mft (raw, json)
Hash identifier: RJgE4jj7AYlxEIkYE0cjdr+QtrtcovUt4aolbH5d/yA=
Subject key identifier: 21:B6:49:1A:77:37:B2:89:4C:CF:35:88:7A:9B:71:9C:B2:3D:89:B7
Authority key identifier: C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC
Certificate issuer: /CN=c9da628824cd59b14272b4058a89642e4b47bddc
Certificate serial: 0194BABB66B0DD6DFA0A62500507D5C154F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:31 +0000
Manifest this update: Fri 31 Jan 2025 05:00:31 +0000
Manifest next update: Sat 01 Feb 2025 05:00:31 +0000
Files and hashes: 1: OHyz0yCihOyYZELcx_eXaVTeTj8.roa (hash: hh10KBiSSdE2vx4cx18arLN2/pV/Y4yXBQ4rOBuQMKc=)
2: O_iQtcfGegqJT45Rax7efqPp2Jk.roa (hash: BUrfaVohuc/Gdz/TrWFm+d3l6jKAoDirWJgzHBScGZY=)
3: ydpiiCTNWbFCcrQFiolkLktHvdw.crl (hash: V0VhLJnGpzMLtQ/8WPz0dQkpBRJ4BR00ubHRIE3/XA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:66:b0:dd:6d:fa:0a:62:50:05:07:d5:c1:54:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da628824cd59b14272b4058a89642e4b47bddc
Validity
Not Before: Jan 31 05:00:31 2025 GMT
Not After : Feb 1 05:00:31 2025 GMT
Subject: CN=21b6491a7737b2894ccf35887a9b719cb23d89b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c3:ca:c8:a4:6f:4a:d1:84:24:91:f9:6a:65:
0c:af:86:b4:64:bf:86:14:82:dd:ae:eb:e5:0b:4e:
b0:a5:d8:60:fd:6e:47:df:5a:cf:3d:30:4e:39:fc:
7b:64:38:e5:06:3a:d2:cd:cb:5c:57:e3:64:92:1a:
4a:24:b4:7b:1a:b6:83:77:7b:01:e8:4a:13:49:66:
fa:1e:eb:78:a8:79:3a:6d:ad:3a:81:b8:5f:86:a2:
59:66:b1:d1:2e:7e:80:64:8b:bd:65:5f:43:aa:ad:
98:f2:e0:43:f9:e2:16:3a:7c:44:f6:a2:5f:b8:45:
b8:5b:47:17:28:2d:4a:e9:60:b7:45:a6:ed:ff:41:
2e:41:22:61:39:51:7f:a2:04:50:60:51:08:99:c9:
ca:59:4e:54:4f:35:18:5c:27:c5:00:33:e8:3c:df:
f8:09:ae:30:d8:18:41:75:3f:a9:26:ea:1a:3e:41:
af:68:61:9a:c3:18:a8:eb:86:b5:c4:0e:d8:70:a5:
e5:af:55:76:9c:28:21:bf:e7:b8:6c:92:7d:c9:1f:
9a:f2:5b:78:46:5f:79:1e:15:ce:7c:5d:0d:80:af:
70:64:d5:9c:e6:eb:c3:c6:ac:f4:3c:5c:0e:a7:b6:
e1:a5:11:49:c4:fe:99:55:fd:f4:24:c0:39:6b:df:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B6:49:1A:77:37:B2:89:4C:CF:35:88:7A:9B:71:9C:B2:3D:89:B7
X509v3 Authority Key Identifier:
keyid:C9:DA:62:88:24:CD:59:B1:42:72:B4:05:8A:89:64:2E:4B:47:BD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydpiiCTNWbFCcrQFiolkLktHvdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d73fc6-c498-4b20-a91c-656fc7f7023c/1/ydpiiCTNWbFCcrQFiolkLktHvdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:02:81:89:b5:cd:f6:cc:d3:82:88:4d:50:50:20:7b:00:af:
6b:26:8f:25:4b:95:7e:5b:23:68:f0:40:ff:6c:c8:49:85:15:
21:99:96:af:f8:25:3e:76:cd:08:dd:f1:62:44:d0:d7:44:62:
6e:68:8b:1c:95:6c:c7:b6:2e:68:0a:0a:de:85:09:06:ea:7e:
98:08:73:37:17:bc:70:4c:6b:cb:61:3a:c4:54:97:e6:ae:c0:
e7:24:54:e6:8a:e6:91:0c:b4:f6:5f:e3:55:c3:39:ce:f8:47:
57:4d:5d:80:88:d8:20:7b:43:21:5e:2d:59:bf:8a:2b:40:6c:
8b:03:3e:43:44:37:65:8e:ea:30:40:91:97:93:67:3a:2e:60:
70:6e:d6:be:75:69:b6:05:00:f5:b6:d2:6b:2c:f3:26:a7:98:
40:78:30:0a:49:ec:d2:45:a0:0d:26:fd:05:14:54:57:9b:de:
af:87:a8:f6:c7:a8:ae:b1:10:47:49:97:e7:88:24:5b:2b:d6:
96:27:6c:52:a6:de:92:76:a3:6a:ff:45:9d:15:2b:b6:71:64:
42:a0:44:10:ce:8e:dd:05:af:cc:b3:7c:19:1e:ce:d5:ae:2a:
01:fd:18:de:ef:a1:71:bb:b2:8b:d6:ca:c7:6d:cf:24:cb:9b:
7c:df:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:44 2025 by rpki-client on console-fra.rpki-client.org