Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
File: rYY6WJMusYMjlBahz2ao_8POchU.mft (raw, json)
Hash identifier: oBAI5wXTAEO6rVw5ckhletW5Dzy2XwHodMB//ugmcGE=
Subject key identifier: E1:6E:2C:7A:5F:22:E8:80:76:A6:0F:89:F0:A0:24:33:20:76:6D:05
Authority key identifier: AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
Certificate issuer: /CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Certificate serial: 0194BABB96413A4E1118AB4627F229C64C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
Manifest number: 0B1B
Signing time: Fri 31 Jan 2025 05:00:43 +0000
Manifest this update: Fri 31 Jan 2025 05:00:43 +0000
Manifest next update: Sat 01 Feb 2025 05:00:43 +0000
Files and hashes: 1: NsCamS0MlFkmbAx5_LAOWrtBals.roa (hash: LDrv3G809jHIGwEDwg2A1Kbn0Oo37yQBk0cRSClCqYU=)
2: rYY6WJMusYMjlBahz2ao_8POchU.crl (hash: V8CCF+5cBoJjxjtDmV/OPfVH3SiQIQBX+lGvVuHGytM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:96:41:3a:4e:11:18:ab:46:27:f2:29:c6:4c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad863a58932eb183239416a1cf66a8ffc3ce7215
Validity
Not Before: Jan 31 05:00:43 2025 GMT
Not After : Feb 1 05:00:43 2025 GMT
Subject: CN=e16e2c7a5f22e88076a60f89f0a0243320766d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:85:b5:5b:e5:10:5f:87:35:b2:79:b2:c8:
e8:ef:0f:15:de:c9:37:42:6d:b7:08:da:70:4d:7e:
2f:de:01:75:8b:4c:63:35:bb:0a:49:e5:00:0b:a8:
e2:f8:78:ce:f3:61:a8:61:96:71:c2:35:f0:02:db:
16:1e:a8:a4:20:04:e8:84:e6:c4:5f:64:f2:ee:10:
b2:df:c2:32:b0:84:78:c0:2c:1f:23:ea:7e:55:83:
a6:41:c8:39:70:86:03:4c:7e:e2:71:5a:62:bf:ff:
74:ec:7d:20:79:0a:f5:55:6b:7e:73:5b:f1:c2:b8:
da:29:d9:42:fd:5d:c1:6f:93:69:84:3a:73:ce:dc:
2c:7e:0d:73:9f:a2:a7:4b:18:12:16:7f:f7:39:81:
57:10:32:2e:c6:bf:c7:f9:32:76:32:80:8d:6e:99:
c5:e6:9e:bf:e2:6c:e3:a7:05:a6:3b:a5:2b:78:05:
00:55:c3:6a:6d:db:44:65:6c:07:46:7c:01:12:58:
89:c8:4d:ce:34:2d:06:ef:c9:63:da:f3:f8:2d:5e:
97:87:0c:cc:73:bf:1b:79:ba:39:57:c0:ca:8c:41:
1d:61:92:25:08:37:12:e8:05:07:1d:4b:97:db:1c:
64:74:ac:22:a2:a0:63:c4:50:62:79:fa:0d:9a:2f:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:2C:7A:5F:22:E8:80:76:A6:0F:89:F0:A0:24:33:20:76:6D:05
X509v3 Authority Key Identifier:
keyid:AD:86:3A:58:93:2E:B1:83:23:94:16:A1:CF:66:A8:FF:C3:CE:72:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYY6WJMusYMjlBahz2ao_8POchU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6ad675-c49b-478a-ba60-3b8e561dc276/1/rYY6WJMusYMjlBahz2ao_8POchU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:22:9d:4d:f3:90:a5:00:23:cd:f9:22:83:a2:34:28:88:97:
95:45:c8:dc:74:1b:33:7d:75:cf:17:2a:5d:4b:fa:f9:00:7c:
8e:9a:26:61:d5:0c:6b:a1:5a:b4:61:81:2e:e5:e4:9a:e7:db:
73:1c:ae:df:6f:9f:43:53:8a:22:5f:f3:7c:f8:48:f2:20:0f:
a7:d0:6d:ec:6d:1f:46:0f:03:15:d7:4c:df:1a:e5:99:62:67:
ba:ed:7b:cd:d9:9a:f7:7b:cc:25:1e:3d:be:c8:63:e3:84:2b:
09:58:02:fb:7c:db:01:94:c0:04:d7:74:f5:1e:05:c6:8b:ae:
f8:29:2b:d1:0b:ba:91:5d:65:70:7e:cc:c0:fe:df:39:38:db:
cf:c4:e4:e5:54:5b:f5:6f:f2:ad:40:54:aa:d5:51:ce:6d:27:
1f:c2:5c:f9:cb:93:7e:2a:b8:4d:95:aa:ee:0f:fd:0a:c6:71:
4a:09:92:f7:52:13:f0:1b:d5:3e:44:21:84:2d:07:44:ff:48:
de:a6:f3:f0:71:dd:bb:dd:a0:3a:1b:87:c3:ca:c2:e6:da:ff:
a1:65:1b:11:47:56:eb:e7:de:d0:11:f4:96:1d:3f:8b:ce:ad:
b1:5a:1a:69:6c:61:67:7e:16:25:d1:80:0c:13:a5:40:60:69:
83:e9:e3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:53 2025 by rpki-client on console-fra.rpki-client.org