Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
File: yhmr64q55jiQoiPC_WulaEmL27o.mft (raw, json)
Hash identifier: iNBe7jBLp3G31e4vAi0zxa1zJZZ/gJdToITQmnMcf2A=
Subject key identifier: 8D:B7:3B:5E:7E:D7:C1:7C:85:41:36:9A:E2:BF:08:9C:72:8C:ED:87
Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
Certificate issuer: /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Certificate serial: 0194BABB32B3844092CCFB1243B0480A9617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:00:17 +0000
Manifest this update: Fri 31 Jan 2025 05:00:17 +0000
Manifest next update: Sat 01 Feb 2025 05:00:17 +0000
Files and hashes: 1: 4aW2wKCZJHKdaC2dMSiuzWhCfmM.roa (hash: tmaMv+cdlIL60LuV9hVyriQ5fK7vMtVKvDnmNSyFkzU=)
2: yhmr64q55jiQoiPC_WulaEmL27o.crl (hash: H6TAPjLo8b3nH18HWC6DDeo5pZHs5nPMRP+FxZFNlcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:32:b3:84:40:92:cc:fb:12:43:b0:48:0a:96:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Validity
Not Before: Jan 31 05:00:17 2025 GMT
Not After : Feb 1 05:00:17 2025 GMT
Subject: CN=8db73b5e7ed7c17c8541369ae2bf089c728ced87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:18:44:28:21:da:b7:f3:d4:ed:c8:17:80:
ff:da:4a:44:e5:4c:9f:f7:35:84:18:5e:60:73:2b:
44:d2:17:ee:00:5c:06:f3:ed:c0:53:b4:3c:71:35:
09:21:30:b0:cf:9e:94:39:16:a3:f2:3f:26:27:cb:
86:62:50:3f:03:57:23:c9:d5:2a:39:86:04:84:a0:
3d:be:0f:19:2c:37:ab:f4:ac:3a:00:32:73:e7:e8:
be:cb:cf:31:e5:eb:e8:51:e4:32:ed:04:ea:0e:4b:
96:b5:51:86:a6:78:14:4b:39:2e:63:1c:90:31:f3:
78:95:0f:07:3b:fc:69:d0:23:c0:4f:67:f4:24:f9:
d5:0c:c4:d1:59:bb:9b:e5:f2:13:f2:b4:73:31:0d:
bc:cc:35:f6:dc:99:03:70:18:e3:30:93:47:c8:ba:
d1:66:a3:d7:e4:c6:53:e5:c4:ec:c4:ed:3d:30:65:
21:a9:8d:cb:3a:3a:11:19:9c:41:d1:5e:a2:68:d4:
2a:9a:c3:2b:1a:0a:fe:1e:f1:a9:52:08:1c:f3:17:
6a:63:3d:f0:93:59:fd:d2:1d:69:17:2a:d6:16:49:
2e:2b:41:2f:9b:ba:29:23:fd:41:ff:33:0a:5d:64:
2b:8d:34:1d:e2:c9:f8:dc:58:ca:29:54:bc:85:23:
37:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B7:3B:5E:7E:D7:C1:7C:85:41:36:9A:E2:BF:08:9C:72:8C:ED:87
X509v3 Authority Key Identifier:
keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0d:de:3f:f4:4d:02:d6:ac:26:c2:00:dc:3d:76:b4:7e:26:
d3:9f:44:a8:8a:c8:88:b5:f4:c8:23:c0:9e:6f:d7:91:37:27:
ea:0c:0a:3d:be:c4:68:13:96:bb:70:dc:ae:9f:d1:eb:26:29:
5e:da:7a:16:7d:8a:b4:e8:b3:b3:d5:e6:9e:3d:49:75:18:bd:
75:0e:e1:d7:18:23:cf:41:88:1d:24:2d:ef:4f:c6:39:e5:0b:
0c:8b:bf:44:95:4f:b4:0d:69:7e:ba:3d:4b:c2:0e:b5:66:cb:
d0:39:d4:98:a3:b6:f7:bb:ba:98:e3:fd:41:e2:b2:72:98:c5:
d0:87:f7:73:02:44:70:a7:3b:11:c5:86:7f:99:47:9e:b6:d8:
92:a9:a2:cd:07:d9:8b:31:cf:66:52:86:ae:f2:21:c0:ed:72:
74:2d:d2:d8:9c:fb:b3:b2:1e:63:cb:e2:08:01:9f:03:2f:ce:
f2:4f:d3:ba:45:4f:d1:5f:5b:bb:0d:2f:19:74:13:0d:73:62:
4a:e3:07:1c:cd:91:3c:62:d5:68:2c:63:9d:85:a8:07:0f:1b:
c2:72:82:94:c8:67:e9:83:cd:96:96:56:fe:9a:d1:63:c2:52:
5f:d7:d3:98:2f:70:43:cd:19:76:c5:41:84:e6:67:43:18:4c:
58:a8:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:51 2025 by rpki-client on console-fra.rpki-client.org