Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json)
Hash identifier: Ge3L0utJE9BmsgZ6E3crlDGQXpxIITzcAnRF+lzJkqI=
Subject key identifier: 19:DD:D5:8E:C2:7C:8A:FB:CD:A1:7E:31:F1:FF:94:B1:8A:D2:32:E5
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Certificate issuer: /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial: 0194C49A2439134A0E79A5B7DE572F01DF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
Manifest number: 1398
Signing time: Sun 02 Feb 2025 03:00:23 +0000
Manifest this update: Sun 02 Feb 2025 03:00:23 +0000
Manifest next update: Mon 03 Feb 2025 03:00:23 +0000
Files and hashes: 1: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: axpughOmL2tE5V8xoL704LY722y0JuiIUMqaJBzZbsU=)
2: gFgwOulWz8EdjBx0WPIuskEa2Xo.roa (hash: kmccz6rQP+OANRlJVswlZw+GA51smpUT7A9JAOVNjXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:24:39:13:4a:0e:79:a5:b7:de:57:2f:01:df:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Validity
Not Before: Feb 2 03:00:23 2025 GMT
Not After : Feb 3 03:00:23 2025 GMT
Subject: CN=19ddd58ec27c8afbcda17e31f1ff94b18ad232e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1a:a1:ec:98:bd:37:5a:c7:cb:21:e9:66:9c:
46:d1:6d:00:e1:a2:d7:6e:a2:59:59:83:c1:06:2e:
01:5f:78:6e:ab:ca:b8:9b:7a:a3:fd:a2:2a:4e:6f:
49:52:49:05:ff:55:3b:df:b0:87:19:83:ab:98:c7:
71:46:88:7c:8e:29:58:7d:4f:17:98:f3:b4:a1:d8:
c8:2f:fc:0a:6e:86:a8:b9:db:1e:cf:b8:e0:58:0e:
31:95:82:3f:9c:9b:05:dd:eb:42:1b:79:a9:7d:38:
0d:c7:55:67:f2:90:0b:f9:4a:45:c3:40:ef:12:cc:
4d:57:1d:d8:2c:3c:24:1d:51:ce:2d:de:1d:de:4f:
0f:fa:e1:83:8a:0c:dd:27:92:1f:0c:ad:e0:2a:ea:
30:3e:13:f3:4b:09:4d:46:b4:f4:d5:70:4a:b7:8f:
79:32:e4:cc:79:ad:5c:b1:69:d5:24:36:30:91:11:
a4:6f:bd:f1:19:9a:de:09:c0:0e:a4:dd:6e:54:69:
d8:60:c6:37:54:84:88:cf:20:62:a2:a3:0d:c2:40:
a3:1d:fa:b7:61:7e:87:d4:78:3a:19:c6:fc:25:ce:
73:be:96:e7:1b:2c:69:20:37:78:4e:87:5d:37:8c:
c4:92:ef:1f:50:22:2f:c1:85:5d:bd:b6:c4:f5:78:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DD:D5:8E:C2:7C:8A:FB:CD:A1:7E:31:F1:FF:94:B1:8A:D2:32:E5
X509v3 Authority Key Identifier:
keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:15:a6:04:e0:c0:ac:e5:05:a0:1f:c0:20:e0:7a:6c:85:b2:
e2:30:76:dc:43:74:11:d9:93:23:1c:20:0e:3c:a5:51:25:6d:
8f:1c:34:1c:31:b6:13:24:40:6e:9b:28:bc:c2:6d:62:a1:66:
81:af:d6:28:80:03:6b:b4:46:f5:78:4a:a3:8d:17:24:b3:64:
da:6f:ae:a5:ce:bf:0d:9c:13:59:90:73:d1:99:87:a6:1c:51:
de:03:e3:2b:3d:cc:75:aa:8f:e5:aa:aa:16:fa:7c:16:db:18:
5f:99:20:68:30:a7:31:c3:f6:4f:7f:ec:cf:c7:29:97:7b:74:
3f:9b:26:07:42:66:4c:e6:bc:ec:a1:90:58:27:44:f4:a2:80:
da:b5:ee:c0:50:77:5b:b4:0a:d8:26:29:e6:57:2c:0c:da:af:
ab:4a:67:b9:01:ac:00:69:33:34:a1:9b:8a:c9:6e:e3:29:fe:
5c:b5:ad:e5:43:3a:fa:0c:85:c8:8a:07:2a:5d:21:33:ad:d0:
cb:de:9b:57:a8:55:70:6c:44:2c:d7:00:5c:38:c0:8d:b9:6c:
d4:90:5e:91:b7:d8:c3:ce:77:3c:a2:43:54:32:46:ca:be:83:
5e:5d:9a:ab:dc:d2:3b:c4:65:6b:b3:5e:3a:1f:98:8e:05:16:
dd:20:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:40 2025 by rpki-client