Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
File: yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json)
Hash identifier: VUpZN5p9bSTI8eOv5fzsba9VUpze4cUkfvAbpV6dI+0=
Subject key identifier: 18:BB:37:7E:3A:40:6D:41:6F:E3:72:41:F0:D7:99:48:1F:D8:F6:AF
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Certificate issuer: /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial: 0194BA84299879AB89756D473CE7E271E703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
Manifest number: 136E
Signing time: Fri 31 Jan 2025 04:00:10 +0000
Manifest this update: Fri 31 Jan 2025 04:00:10 +0000
Manifest next update: Sat 01 Feb 2025 04:00:10 +0000
Files and hashes: 1: iv4w_q_Q0lB1UAUD7TgMR_xxyYA.roa (hash: fMZ0QGK6B5sX/J++IQoulADhQ3kbWhx95qL8TpCZZ84=)
2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: hD3xDFDlokmM4gQStSPBPSpQD1bmv07Z7AQiViSg7s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:29:98:79:ab:89:75:6d:47:3c:e7:e2:71:e7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Validity
Not Before: Jan 31 04:00:10 2025 GMT
Not After : Feb 1 04:00:10 2025 GMT
Subject: CN=18bb377e3a406d416fe37241f0d799481fd8f6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:5a:42:ee:98:70:ea:c8:86:c0:41:aa:7c:
2f:c1:62:07:d1:ce:ab:c8:41:50:ae:27:1c:b2:98:
bb:16:1d:d8:fe:cf:73:d6:76:e7:29:4b:16:56:97:
11:3b:88:57:8f:a5:ab:86:9f:48:dd:43:5b:d5:91:
89:24:9e:41:27:84:22:6c:e5:dc:eb:de:1a:7c:53:
47:45:47:d0:10:2a:5b:58:ce:04:bf:86:59:5a:9f:
41:ad:9e:0f:1b:f2:3d:38:60:ef:94:2f:76:1b:ff:
75:ac:4e:9f:54:fa:8d:ba:86:ab:61:4b:b9:85:1f:
c4:90:cf:3d:6f:6d:90:8c:65:eb:64:e4:9e:ac:99:
47:62:82:01:3a:f6:1b:9e:d4:af:99:db:0c:30:c8:
81:68:65:6a:b0:2a:6c:07:7c:67:b6:0f:a1:cb:16:
3a:e4:86:f4:96:3f:58:73:b5:7e:91:9b:5d:82:5d:
0c:bd:f9:9d:c4:ed:3b:1e:d8:09:8d:2b:4e:ab:9f:
98:55:0e:d7:54:bd:45:05:d7:85:2b:d2:fa:c1:f1:
94:e6:40:3e:7c:e1:1a:ce:f7:d9:37:f7:48:5f:17:
14:a0:b0:c8:e2:c1:4c:6b:c4:a5:2d:1e:d9:a8:78:
90:bc:1e:ed:a5:33:de:49:16:06:cb:d7:5b:6c:20:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BB:37:7E:3A:40:6D:41:6F:E3:72:41:F0:D7:99:48:1F:D8:F6:AF
X509v3 Authority Key Identifier:
keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:be:f1:09:21:cb:e7:b8:4e:40:31:69:21:ac:77:b0:ac:2b:
1e:cc:6c:2d:cc:0b:70:2b:4b:62:65:3f:f2:5b:0b:2c:35:f6:
6a:6e:2e:6c:dc:d5:2c:07:a7:de:5e:88:5b:22:08:3c:77:a4:
51:3e:95:de:95:2d:22:9a:36:5e:7b:a0:35:7b:88:e2:1e:d4:
47:62:1e:d1:8a:f2:c6:d2:85:de:f0:db:9a:ec:ed:5c:0f:0f:
43:f0:a8:da:bd:5f:5c:42:1d:13:68:ed:0d:13:91:7a:20:a6:
89:f6:39:3f:dc:5e:0b:42:46:23:08:31:2a:38:74:76:34:fd:
3a:a5:5e:4e:2e:86:59:e1:a6:b7:b0:78:11:6f:79:3b:39:d7:
37:05:f6:19:f6:81:43:b6:91:af:50:9c:b2:9b:7d:0c:e8:84:
45:d0:d4:40:03:3b:fa:6c:d4:79:5f:66:e0:57:8d:15:a4:66:
f5:36:13:25:31:f0:c1:37:1a:8c:9e:52:ac:aa:a1:a2:5a:20:
71:f7:08:37:ac:ac:e7:d3:00:8f:5c:be:c8:8d:7a:8c:6d:1a:
a3:00:9b:0d:c3:bc:ab:29:96:d2:62:e4:a0:a1:b9:c8:aa:f2:
7a:4e:02:8c:48:75:55:a7:56:d5:3c:ed:b7:d1:f5:1d:49:3d:
e0:cc:ca:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:36 2025 by rpki-client on console-fra.rpki-client.org