Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
File: yoFg7-OfGjB3_dL68ipkgEtUE4I.mft (raw, json)
Hash identifier: tTWZOnmVIcYdKExb754/rO4NayfiqjAMRfzDkADlk+4=
Subject key identifier: 44:0B:05:8A:05:59:AC:D6:B7:AB:22:7C:2F:F1:2F:98:20:89:87:CF
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Certificate issuer: /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial: 0194BA84965427A60791AC31651D7AE460BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
Manifest number: 10C9
Signing time: Fri 31 Jan 2025 04:00:38 +0000
Manifest this update: Fri 31 Jan 2025 04:00:38 +0000
Manifest next update: Sat 01 Feb 2025 04:00:38 +0000
Files and hashes: 1: h-rZd3ShfaYedaYA6tLbzrX_MkU.roa (hash: 6iJffUIazxHr4GTAEcidCyRV9SNB9d9va8nX06PMskE=)
2: yoFg7-OfGjB3_dL68ipkgEtUE4I.crl (hash: Ko2zlYCX0ypbi+AeaEW4evMkKE9I8ZaDsH2QxJ1PQkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:96:54:27:a6:07:91:ac:31:65:1d:7a:e4:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Validity
Not Before: Jan 31 04:00:38 2025 GMT
Not After : Feb 1 04:00:38 2025 GMT
Subject: CN=440b058a0559acd6b7ab227c2ff12f98208987cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:b8:93:22:b1:a1:b9:aa:89:82:0d:d3:a1:
4a:54:fc:bc:70:91:05:cd:f5:e6:3a:19:35:9c:6d:
48:c4:1c:84:68:0d:75:15:80:b7:8c:a8:f4:07:6c:
7a:c6:db:9a:8c:f2:2d:6b:39:18:aa:c9:4d:d1:a2:
88:a6:2a:44:ab:cc:8e:27:a2:d2:cc:10:70:d3:ea:
0f:e4:a2:5b:84:5a:b4:a8:f5:aa:98:0d:c6:cf:a8:
bc:3a:a0:df:4f:8f:60:f1:10:55:96:cb:67:bf:80:
01:7f:87:0d:be:66:e0:fc:50:69:5c:e9:86:0b:e7:
ac:fe:fd:f0:2f:b5:22:09:3a:56:79:94:31:61:0a:
7c:87:34:8f:b7:84:16:1d:5a:6c:ca:30:8e:48:ba:
34:42:19:b2:20:34:78:b1:d0:d8:a5:c3:f6:18:b3:
d4:54:bc:27:f9:9f:dc:96:88:11:b3:d1:48:a4:de:
94:51:3e:0d:c7:df:48:2a:6c:f9:a0:f8:34:67:fb:
99:7f:92:be:bd:14:e1:d2:a2:2c:e6:05:ec:21:eb:
ed:5a:11:b0:4f:76:8b:07:4b:fe:c7:f7:3e:07:26:
6e:8d:04:4b:bf:e6:e0:e1:9c:d5:68:5c:fb:55:d0:
ea:58:78:c3:ed:ca:ac:46:4f:ca:38:2f:2c:27:88:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0B:05:8A:05:59:AC:D6:B7:AB:22:7C:2F:F1:2F:98:20:89:87:CF
X509v3 Authority Key Identifier:
keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f8:fa:d3:ac:fa:b9:88:c5:5d:4f:79:9b:d6:07:49:f5:d0:
bf:4a:46:06:ea:cb:82:fd:7c:f6:e2:d7:62:49:dc:0e:4c:e9:
5a:69:4b:49:49:3d:9a:02:f0:80:40:e0:c2:a3:10:f9:3a:57:
24:78:15:ec:8a:82:70:ff:bc:98:c1:30:2f:74:1d:33:b3:8e:
dc:88:a3:1f:3e:8f:ff:6a:c3:d8:9d:b8:03:e0:08:bc:2b:e8:
e4:e9:aa:3a:46:42:19:b9:bd:cc:65:21:c1:f7:7d:22:15:5a:
f7:16:3a:15:fe:ee:95:2b:8a:25:22:33:0a:14:f9:c9:e4:2b:
48:10:90:53:ea:bf:2d:26:e7:ff:f2:a6:85:d2:d7:23:9c:32:
1d:53:0a:14:35:e4:d8:79:91:a2:b3:d2:e5:82:aa:ac:1a:b9:
f8:60:24:e1:3c:04:8d:5b:88:d0:6f:2b:2c:00:e2:ae:fe:07:
a6:6a:23:e5:a8:95:53:b1:33:ed:6b:b6:6f:88:78:01:21:b7:
e0:88:b5:b0:bd:ed:f9:31:82:6b:a7:b8:7a:b8:ef:fb:1e:d0:
c6:5e:85:47:da:80:7c:0c:56:6c:dc:d2:30:b2:36:9a:48:7c:
1b:61:46:74:db:07:fc:5e:bc:55:ee:d7:e0:85:eb:37:a4:a3:
80:96:d5:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hJZUJ6YHkawxZR165GC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhODE2MGVmZTM5ZjFhMzA3N2ZkZDJmYWYyMmE2NDgwNGI1
NDEzODIwHhcNMjUwMTMxMDQwMDM4WhcNMjUwMjAxMDQwMDM4WjAzMTEwLwYDVQQD
Eyg0NDBiMDU4YTA1NTlhY2Q2YjdhYjIyN2MyZmYxMmY5ODIwODk4N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bm4kyKxobmqiYIN06FKVPy8cJEF
zfXmOhk1nG1IxByEaA11FYC3jKj0B2x6xtuajPItazkYqslN0aKIpipEq8yOJ6LS
zBBw0+oP5KJbhFq0qPWqmA3Gz6i8OqDfT49g8RBVlstnv4ABf4cNvmbg/FBpXOmG
C+es/v3wL7UiCTpWeZQxYQp8hzSPt4QWHVpsyjCOSLo0QhmyIDR4sdDYpcP2GLPU
VLwn+Z/clogRs9FIpN6UUT4Nx99IKmz5oPg0Z/uZf5K+vRTh0qIs5gXsIevtWhGw
T3aLB0v+x/c+ByZujQRLv+bg4ZzVaFz7VdDqWHjD7cqsRk/KOC8sJ4gexwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQLBYoFWazWt6sifC/xL5ggiYfPMB8GA1UdIwQY
MBaAFMqBYO/jnxowd/3S+vIqZIBLVBOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW9GZzctT2ZHakIzX2RMNjhpcGtnRXRVRTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kMjUwMTUtN2QyNC00YWQ1LWEyYzEt
YWM0ZTI4YzJjNWI2LzEveW9GZzctT2ZHakIzX2RMNjhpcGtnRXRVRTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kMjUwMTUtN2QyNC00YWQ1LWEyYzEtYWM0ZTI4YzJjNWI2
LzEveW9GZzctT2ZHakIzX2RMNjhpcGtnRXRVRTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfj606z6
uYjFXU95m9YHSfXQv0pGBurLgv189uLXYkncDkzpWmlLSUk9mgLwgEDgwqMQ+TpX
JHgV7IqCcP+8mMEwL3QdM7OO3IijHz6P/2rD2J24A+AIvCvo5OmqOkZCGbm9zGUh
wfd9IhVa9xY6Ff7ulSuKJSIzChT5yeQrSBCQU+q/LSbn//KmhdLXI5wyHVMKFDXk
2HmRorPS5YKqrBq5+GAk4TwEjVuI0G8rLADirv4Hpmoj5aiVU7Ez7Wu2b4h4ASG3
4Ii1sL3t+TGCa6e4erjv+x7Qxl6FR9qAfAxWbNzSMLI2mkh8G2FGdNsH/F68Ve7X
4IXrN6SjgJbVhw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:48 2025 by rpki-client on console-fra.rpki-client.org