Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
File: cyYKr-_i7gcuQGLnvxq42cQghWE.mft (raw, json)
Hash identifier: huKh7dP30uals0Iox78HN6lIW27O3upN7z5EeTDCENM=
Subject key identifier: 51:A8:D1:8F:E5:F0:EE:01:83:C4:01:4B:35:1E:B1:A9:76:D1:50:F9
Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
Certificate issuer: /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Certificate serial: 0194BB6053F8DF1EB214EF0B33A7D29839F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 08:00:39 +0000
Manifest this update: Fri 31 Jan 2025 08:00:39 +0000
Manifest next update: Sat 01 Feb 2025 08:00:39 +0000
Files and hashes: 1: Xr6lOU6Tyn_u4v5GW5vdi-zMXGM.roa (hash: 80FIdGSyhpgpiEyJdmuxntmRKHZK2fr3v8thq23exzs=)
2: cyYKr-_i7gcuQGLnvxq42cQghWE.crl (hash: ZRPLcxiZeOqJY0BBN6Ru0oK/qgK39XffurMhRmtSDIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:53:f8:df:1e:b2:14:ef:0b:33:a7:d2:98:39:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Validity
Not Before: Jan 31 08:00:39 2025 GMT
Not After : Feb 1 08:00:39 2025 GMT
Subject: CN=51a8d18fe5f0ee0183c4014b351eb1a976d150f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:ee:b3:83:b7:42:43:51:cf:5e:da:64:21:
f9:d1:73:8f:14:4e:44:73:d3:ec:3a:a9:e1:e4:62:
15:2b:a3:be:ac:5c:69:49:85:c6:a8:71:dd:cd:16:
f3:ed:4e:c8:8e:07:6e:61:82:da:2c:13:19:fa:29:
6b:8e:4e:2c:8a:a1:61:0f:9c:42:5c:3f:ff:ac:a4:
87:a5:9e:43:ee:f8:ae:c7:c6:99:95:93:66:37:07:
a9:ae:64:c2:6e:8e:cb:45:41:2d:5c:0a:25:b7:d2:
e5:1e:d1:3a:96:29:ac:a8:af:03:7f:09:9e:f0:fe:
83:d1:58:f6:37:76:1b:2b:52:61:c0:b2:1d:bc:c5:
5c:02:ad:fe:49:08:c6:20:b0:df:3e:64:4d:e1:3d:
fc:ab:52:e1:b8:56:ce:64:ca:07:be:cc:94:52:e9:
23:aa:b0:00:41:9e:09:49:06:b0:ff:6d:3a:22:b5:
cd:86:43:ef:f4:6b:22:eb:8f:02:af:a9:b8:c7:4c:
34:f6:cb:5a:c9:ce:b4:3b:f2:89:6a:64:35:b2:f7:
53:53:68:f1:e9:55:65:b9:43:dd:62:c7:a2:02:4e:
06:e2:6b:99:35:dc:e6:75:75:1a:ed:72:e8:95:81:
9a:f9:fb:ce:95:e9:d6:be:2f:ba:6a:94:8c:c3:ed:
96:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A8:D1:8F:E5:F0:EE:01:83:C4:01:4B:35:1E:B1:A9:76:D1:50:F9
X509v3 Authority Key Identifier:
keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f8:98:41:52:e9:d4:78:f6:f4:cc:a1:3b:8d:fb:51:c6:52:
4a:7e:e1:6b:ff:77:37:90:80:e6:49:d6:8c:be:d1:98:c5:bb:
e1:2d:a1:3b:a1:5e:b7:e6:60:91:c6:fb:c3:f0:82:a6:b7:b4:
2b:49:6a:3d:09:4a:27:d9:34:d6:d0:6b:62:6c:f6:7f:a8:bd:
40:d9:39:cb:f0:14:73:ce:60:c0:d8:ae:df:89:55:af:f0:83:
88:58:db:71:af:28:a4:ad:42:d0:d8:6e:da:bb:97:08:dc:7e:
c0:04:a1:70:d1:20:fa:73:f9:43:af:c6:21:a1:f9:7e:1f:15:
93:1e:06:17:42:59:03:1c:0a:54:e2:65:f4:4a:7e:ca:26:02:
25:8a:8f:6d:e7:47:2a:3f:eb:30:7b:7c:d1:ff:7d:8e:ed:b0:
37:17:e2:cc:ac:e6:26:4d:01:27:02:3a:80:d4:e0:98:e3:5c:
50:60:92:51:bb:f9:53:b3:02:f0:5f:f9:e8:b2:28:f0:3f:7c:
3b:92:fb:87:56:dd:e8:97:f4:bc:6a:e9:03:a0:7a:42:bf:65:
de:71:73:1f:ab:2e:69:de:8c:6d:35:89:c3:7d:fa:e1:ee:2e:
ad:2d:18:67:ef:c6:e3:55:ff:ef:9c:a9:a8:1d:a6:d8:75:64:
05:d7:fe:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:42 2025 by rpki-client on console-fra.rpki-client.org