Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
File: YboL58zjgOa7dOPF_OoIHpeZrlQ.mft (raw, json)
Hash identifier: TeAH2qOws7nKhruuusFjdhpERadBqAhI1zpT2A/PG3s=
Subject key identifier: 59:18:61:57:FB:CF:CB:0C:B4:F7:B8:61:BF:42:3B:93:56:47:72:5A
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 0194BB6000C0D6F2229DEE7C6B92BD47B772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
Manifest number: 116F
Signing time: Fri 31 Jan 2025 08:00:18 +0000
Manifest this update: Fri 31 Jan 2025 08:00:18 +0000
Manifest next update: Sat 01 Feb 2025 08:00:18 +0000
Files and hashes: 1: Ki-l0-NqB3-W8rebOsp5Nz1tUCQ.roa (hash: mOSRLmnG86S35tEBG8q88cLaUeF47X7BqzDM8g9ROLA=)
2: YboL58zjgOa7dOPF_OoIHpeZrlQ.crl (hash: XrHXcfWpvPABP6QC5xtVnr1QY7d6nNWjBze2Gf7JAQU=)
3: eQBFv7lAPEwDFMIhf4M6orVjXWY.roa (hash: C5S9wVh8SkZ4xVzErIy7UKem7Vv0JZ4fOHj6nlUXYkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:00:c0:d6:f2:22:9d:ee:7c:6b:92:bd:47:b7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Jan 31 08:00:18 2025 GMT
Not After : Feb 1 08:00:18 2025 GMT
Subject: CN=59186157fbcfcb0cb4f7b861bf423b935647725a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:0e:fb:6d:cf:c9:85:f3:18:1c:29:ef:7a:
ea:27:78:3e:f6:d7:72:7e:8a:5b:73:5d:aa:8a:da:
5d:c6:65:fa:a8:63:19:65:fa:90:79:bf:fe:8d:90:
55:d0:f3:15:08:43:25:c5:ca:8e:9e:bd:3a:53:b8:
c5:e9:b6:e5:d9:87:77:93:46:af:d3:69:52:db:37:
c6:78:72:b2:aa:55:6b:ef:dd:89:70:49:d0:d9:f4:
e2:a8:fa:22:e2:da:0d:00:6d:8c:43:e3:5d:92:be:
96:f3:01:3c:ac:82:c8:67:b3:a0:47:ff:ff:68:de:
93:c5:28:e2:e8:ad:b3:18:32:57:00:93:6e:95:77:
b8:61:14:9a:92:09:e2:f4:87:70:ff:c3:92:d1:80:
2f:40:82:d6:50:0c:34:2f:bc:e7:c4:60:f3:d1:11:
ce:b4:b2:99:c1:9b:2c:a3:9c:8d:0e:5e:ab:bc:08:
e9:9a:95:4a:3b:4a:e0:8a:2b:a2:ff:7c:00:24:e1:
e1:6d:b5:c0:72:99:e7:0d:39:da:44:33:a2:33:76:
27:b2:7f:ee:8a:ff:c0:cc:bd:89:40:4c:e6:f1:7c:
9a:0d:5c:e8:f2:06:9e:56:f3:c3:6b:91:84:96:8a:
ad:0f:95:1b:4a:1d:e8:12:45:c4:92:3e:43:be:76:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:18:61:57:FB:CF:CB:0C:B4:F7:B8:61:BF:42:3B:93:56:47:72:5A
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7c:2b:62:cb:8a:d7:b1:6e:32:2d:3e:25:69:7e:9c:0d:fa:
d8:28:33:9d:02:d3:dd:2c:6c:31:70:53:4b:31:bf:21:7f:7e:
5f:17:27:ec:47:a1:42:d5:5e:6b:27:0c:43:5f:07:51:3b:c1:
b2:50:51:23:ef:db:c1:b0:c5:6f:a4:78:e4:dd:b5:31:8c:75:
88:21:8d:76:6d:21:13:d3:de:fb:12:fc:e5:25:cf:94:d7:02:
bc:be:58:03:ae:6b:63:e4:fe:42:be:37:04:0c:e6:15:ea:d9:
4d:e8:b2:15:80:0a:81:fb:9c:1a:fe:3e:66:fc:65:31:6e:4b:
90:5c:9c:66:89:8e:f5:19:06:b4:50:9a:7a:24:f3:bd:e2:83:
17:a7:5d:24:a3:d2:37:39:f9:18:c8:c6:f9:9d:bf:dc:df:10:
89:24:5d:8a:9c:e8:a8:34:87:da:dc:c0:4a:77:df:f7:e5:eb:
8f:36:a8:74:13:70:81:6b:a5:a9:f9:f8:a2:1c:29:d4:a3:da:
a7:55:33:f7:9b:9d:94:60:8b:f8:6b:eb:38:a8:b7:f6:4a:92:
c3:b4:1c:95:9b:25:54:bb:7a:3e:9e:3a:1e:22:da:42:ac:e6:
52:26:c8:6f:f2:9b:bf:d5:e3:ff:62:ec:18:b7:93:0a:60:07:
ef:8c:68:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:22 2025 by rpki-client on console-fra.rpki-client.org