Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File: Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier: dUn+Ko7aIiDowywGq4H0dBu21Y4qftnFz4oxYJqg/dc=
Subject key identifier: 3B:E8:5D:BF:28:18:1A:5F:F1:02:4D:00:73:E2:A6:03:FA:F3:D2:A2
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer: /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial: 0194BB5FE3DECD4DA6EB0C82BDB3220AB522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:11 +0000
Manifest this update: Fri 31 Jan 2025 08:00:11 +0000
Manifest next update: Sat 01 Feb 2025 08:00:11 +0000
Files and hashes: 1: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: YL1I7/FfXHXgMg/l1KgolaDkVpCE5qRec+l/5FyNTvI=)
2: dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa (hash: PG+NsqO34TjeMURDoubqwQXu9F/XY0vJGA8jsdkgloo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e3:de:cd:4d:a6:eb:0c:82:bd:b3:22:0a:b5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
Validity
Not Before: Jan 31 08:00:11 2025 GMT
Not After : Feb 1 08:00:11 2025 GMT
Subject: CN=3be85dbf28181a5ff1024d0073e2a603faf3d2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:bb:86:cc:67:0e:59:7f:2f:f9:36:75:c9:
37:e5:96:c5:10:e1:de:5e:fc:d9:1e:6c:ea:02:df:
49:a0:0e:26:9f:4f:d2:dd:97:70:f2:be:4b:08:4d:
de:40:1a:94:1d:d3:ec:48:7e:48:13:39:78:45:e7:
65:46:b9:8f:51:c5:9a:ed:6f:68:56:c8:de:0e:d1:
11:c8:cb:3b:93:c1:24:bd:74:6d:2c:96:aa:66:4b:
9f:31:1e:d3:e5:ad:59:10:83:f1:5a:42:f4:14:24:
f8:13:58:0f:b5:0d:b0:53:0c:a0:70:2c:7f:44:60:
7c:92:87:49:be:8e:3a:2d:2c:f6:39:11:65:75:74:
d6:c3:01:79:28:61:b9:f7:41:0b:8f:d6:04:1f:46:
38:27:c1:a6:7c:36:8a:82:b1:be:34:9d:76:48:53:
08:19:72:ba:0a:7d:fd:6e:77:dc:e7:8a:88:76:1c:
24:96:4e:38:4c:af:c1:30:4f:72:27:73:66:41:1f:
5f:30:18:10:f0:98:32:23:27:43:c0:49:2c:af:7f:
cf:74:99:47:02:24:86:c6:82:21:11:c5:31:0b:9b:
4e:0d:8d:da:0e:88:93:ff:c4:90:92:1a:a3:2c:1d:
14:46:3f:03:42:5d:67:16:b2:0d:b8:54:00:67:29:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E8:5D:BF:28:18:1A:5F:F1:02:4D:00:73:E2:A6:03:FA:F3:D2:A2
X509v3 Authority Key Identifier:
keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:56:18:92:28:2e:fc:25:57:35:95:4b:9b:73:b7:bb:89:5a:
c6:2d:90:7f:50:ef:01:b9:de:b7:7d:df:71:19:74:15:17:42:
ae:e9:e7:12:c4:11:71:21:f3:57:c7:25:f9:5f:0e:dc:fb:4d:
93:24:a0:b7:b4:15:3a:e3:58:c2:31:af:05:45:a3:e0:62:3d:
a5:e1:e1:96:1a:96:f1:66:d5:fd:41:74:80:c0:66:da:ba:dc:
47:bc:43:0b:ae:99:f5:b5:e2:fd:1b:68:05:e1:b9:84:45:18:
27:92:20:90:cc:91:a6:2a:1a:31:33:b5:c3:67:9e:6b:20:41:
d9:ce:17:77:23:17:ec:74:59:92:d5:34:65:f1:e2:13:a8:63:
58:f9:f5:be:f8:08:00:07:f3:f1:d0:4c:da:5b:f2:f0:16:21:
af:f9:27:61:95:70:28:f4:cc:78:24:9a:f6:b4:ad:b2:e3:45:
12:f0:7b:d2:9b:cd:55:f9:b6:1f:e0:0f:dd:69:c5:b3:b7:67:
e5:39:ef:34:0f:6a:ad:42:16:c5:27:8d:2a:80:a8:be:b7:77:
c7:1a:29:79:ea:bf:b9:71:e3:d6:2c:c2:06:cc:64:f5:bf:37:
f5:10:a9:b2:e9:f3:cb:1b:72:df:c4:f4:6c:b4:b5:3b:a6:9f:
90:56:5b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:18 2025 by rpki-client on console-fra.rpki-client.org