Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json)
Hash identifier: a1VAdfU0Z85822PW8mIUhrNwweZbMwi2HSXTkzc3EJs=
Subject key identifier: B5:5D:6D:1D:0F:66:B3:72:2C:AA:5B:A9:4D:FB:A9:3A:AF:62:6B:9E
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 0194C4631B1002529F9CEB01C6603686D0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
Manifest number: ED
Signing time: Sun 02 Feb 2025 02:00:16 +0000
Manifest this update: Sun 02 Feb 2025 02:00:16 +0000
Manifest next update: Mon 03 Feb 2025 02:00:16 +0000
Files and hashes: 1: qHsglpTjaUy6D2wkWmdz8udPRn4.roa (hash: 4Um1Beu8aZnlezP4Me/VufAkyUkp19/FydjNRHcjoJE=)
2: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: 1pD7gZVa1Xg2WVpf6wVSyHxYLnZrqFXDGwNPbIcuCe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:1b:10:02:52:9f:9c:eb:01:c6:60:36:86:d0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Feb 2 02:00:16 2025 GMT
Not After : Feb 3 02:00:16 2025 GMT
Subject: CN=b55d6d1d0f66b3722caa5ba94dfba93aaf626b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:0e:ac:c7:fb:ec:9e:59:34:2a:f5:83:2d:
c2:2d:f1:a2:22:c1:ba:98:7c:80:71:c4:81:b4:32:
06:0b:66:09:6d:41:a0:5d:89:89:63:a5:8b:6f:3b:
1d:5f:9f:05:36:d9:0e:31:99:e8:a9:95:53:55:1e:
c4:c3:27:93:1e:d1:3b:a4:f6:d0:88:3e:75:e3:86:
6f:bf:38:91:d6:31:7d:16:20:07:73:77:8b:cf:6e:
5c:3f:07:61:d6:4e:84:39:92:c6:a9:af:46:fd:27:
c4:63:e4:5d:f4:64:71:8d:42:8e:59:8b:91:f1:86:
64:73:17:07:20:64:7e:ab:df:c3:a0:91:ae:97:8b:
79:d0:5f:f5:61:2e:c8:80:bb:74:fb:4c:0a:74:27:
d4:65:2b:ff:84:ec:7a:38:0c:ab:12:0b:5b:bf:d4:
cd:91:c3:34:1d:44:5b:a3:95:7d:b7:48:66:59:19:
6d:a5:aa:73:63:3a:a8:ed:88:7d:5c:63:17:18:40:
a5:c4:1c:c6:67:3e:b4:14:c7:35:bf:a7:5f:e1:52:
26:cb:cb:4b:bf:7c:a4:33:37:f6:30:43:a5:04:8e:
cf:73:91:d7:3d:55:d4:57:94:ca:d2:32:77:1c:d7:
6b:cb:02:30:1e:1a:e3:bc:22:2c:82:71:0e:58:d5:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5D:6D:1D:0F:66:B3:72:2C:AA:5B:A9:4D:FB:A9:3A:AF:62:6B:9E
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c5:08:ae:62:80:d6:c4:28:91:42:d3:45:f3:2d:53:b0:58:
a5:77:b8:32:09:a0:ff:f4:a9:96:56:69:73:ed:72:e0:33:53:
03:48:6b:91:5e:6c:98:e6:20:ef:f8:ee:6c:4c:e8:36:c9:bf:
d1:67:ea:50:a2:78:bb:40:e4:d1:1c:02:8b:1a:3b:b5:40:d5:
a7:4a:03:14:48:6e:d5:1c:85:f1:d7:05:b2:10:8c:a9:9b:4b:
50:bc:1c:9d:22:75:14:46:3a:0b:2c:8d:5d:e5:68:ab:87:03:
fd:45:a2:ef:b5:42:10:08:9c:ba:31:34:af:f9:70:04:51:51:
f6:fe:c9:92:98:c5:97:e8:30:09:dd:6b:90:1a:d3:59:31:84:
25:45:98:c6:99:47:e4:ab:9e:0a:35:7b:25:85:80:5b:b3:7f:
36:79:f5:48:30:0a:26:78:4e:34:02:08:13:7b:37:de:93:ad:
f3:89:f6:16:79:8f:a7:83:0b:21:af:b9:9a:ab:f0:05:94:6a:
2b:9e:23:3a:8a:80:a9:ba:ed:98:c2:00:bf:25:3b:1a:ca:0c:
26:5c:b1:14:4c:23:4d:c9:9a:a0:2f:64:58:03:34:3a:f2:b2:
39:fe:62:c9:ff:75:25:3f:a8:9b:88:51:17:61:4f:b8:40:be:
e9:0b:18:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEYxsQAlKfnOsBxmA2htDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YWVmODcxNjc1ODVkMjg5ODMxNWFhMzc1M2YzZmE2OGRh
ZDJjNmQwHhcNMjUwMjAyMDIwMDE2WhcNMjUwMjAzMDIwMDE2WjAzMTEwLwYDVQQD
EyhiNTVkNmQxZDBmNjZiMzcyMmNhYTViYTk0ZGZiYTkzYWFmNjI2YjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypYOrMf77J5ZNCr1gy3CLfGiIsG6
mHyAccSBtDIGC2YJbUGgXYmJY6WLbzsdX58FNtkOMZnoqZVTVR7EwyeTHtE7pPbQ
iD5144ZvvziR1jF9FiAHc3eLz25cPwdh1k6EOZLGqa9G/SfEY+Rd9GRxjUKOWYuR
8YZkcxcHIGR+q9/DoJGul4t50F/1YS7IgLt0+0wKdCfUZSv/hOx6OAyrEgtbv9TN
kcM0HURbo5V9t0hmWRltpapzYzqo7Yh9XGMXGEClxBzGZz60FMc1v6df4VImy8tL
v3ykMzf2MEOlBI7Pc5HXPVXUV5TK0jJ3HNdrywIwHhrjvCIsgnEOWNWVBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVdbR0PZrNyLKpbqU37qTqvYmueMB8GA1UdIwQY
MBaAFMmu+HFnWF0omDFao3U/P6aNrSxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NWNlODItZGQwNi00OTU4LTllODIt
ZGIxMGRjZmVjNGJmLzEveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84NWNlODItZGQwNi00OTU4LTllODItZGIxMGRjZmVjNGJm
LzEveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsUIrmKA
1sQokULTRfMtU7BYpXe4Mgmg//SpllZpc+1y4DNTA0hrkV5smOYg7/jubEzoNsm/
0WfqUKJ4u0Dk0RwCixo7tUDVp0oDFEhu1RyF8dcFshCMqZtLULwcnSJ1FEY6CyyN
XeVoq4cD/UWi77VCEAicujE0r/lwBFFR9v7JkpjFl+gwCd1rkBrTWTGEJUWYxplH
5KueCjV7JYWAW7N/Nnn1SDAKJnhONAIIE3s33pOt84n2FnmPp4MLIa+5mqvwBZRq
K54jOoqAqbrtmMIAvyU7GsoMJlyxFEwjTcmaoC9kWAM0OvKyOf5iyf91JT+om4hR
F2FPuEC+6QsYsQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:41 2025 by rpki-client