Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: ym2kGTDOYpbfxbrO65FncSinulyyABYP0NX5epaNpX8=
Subject key identifier: BC:7A:1E:8D:64:73:42:9B:A8:1C:D7:F2:03:4F:A8:58:D3:8B:D1:CC
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 019510FE0D728EDE994724B00E0949AF14C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 145D
Signing time: Sun 16 Feb 2025 23:00:39 +0000
Manifest this update: Sun 16 Feb 2025 23:00:39 +0000
Manifest next update: Mon 17 Feb 2025 23:00:39 +0000
Files and hashes: 1: PPdmXUd6h6Gu02gE3yHsYWcFAtE.roa (hash: EHG3aVLscM/89/8uYl8i9vTpEj6hPmRskxw2S3UAzw0=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: z9D3jt2Bvq6YFn9A7c/fKdZou8r97iHrOchdsdzYYc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:0d:72:8e:de:99:47:24:b0:0e:09:49:af:14:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Feb 16 23:00:39 2025 GMT
Not After : Feb 17 23:00:39 2025 GMT
Subject: CN=bc7a1e8d6473429ba81cd7f2034fa858d38bd1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:4f:f9:32:e7:71:92:b9:da:38:17:9f:23:
39:c9:65:45:6b:f4:48:b3:fe:71:1c:6d:08:81:31:
61:65:19:f2:04:67:aa:bb:2c:9b:4f:ac:8e:b6:36:
86:e5:a1:1e:ad:c4:65:d5:05:e7:0a:f0:89:73:54:
80:70:70:75:7a:60:6d:ba:a7:a3:09:de:b6:61:32:
1f:39:0b:3a:e4:ff:cc:2e:20:2b:f3:fb:e2:2f:32:
35:96:3c:1c:6c:c5:af:b8:6a:8d:00:82:3f:bf:02:
38:bb:da:54:ca:0f:64:dc:48:1c:e5:27:06:7f:82:
99:be:2e:64:e8:0a:3c:fc:18:03:e0:21:90:37:25:
4b:7c:63:5c:4d:53:2d:5b:15:ac:79:5f:91:9e:76:
ad:97:e8:b7:2e:1e:77:e5:40:01:0f:0e:1d:7f:2d:
bd:05:26:70:cf:bc:8d:d2:d9:82:89:4b:a7:5e:97:
aa:07:09:d4:bd:91:b7:7a:cc:aa:21:6b:91:6c:db:
33:91:3f:4e:b8:e7:b4:f9:6d:bc:42:3e:73:14:42:
49:d9:bc:60:2f:0b:9e:53:5e:d8:08:63:41:e4:fd:
1c:5b:b4:4b:0e:d4:cc:66:6f:ef:4d:31:8a:2c:d9:
b4:f8:f4:77:38:22:f2:a5:bc:af:5a:31:14:e1:b5:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:1E:8D:64:73:42:9B:A8:1C:D7:F2:03:4F:A8:58:D3:8B:D1:CC
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f5:ee:f5:a8:d6:8e:a8:9d:30:7f:97:6c:9f:ea:40:e8:58:
2c:40:15:99:44:88:9d:87:a6:ff:a5:86:59:e9:d9:90:b8:3a:
e6:b6:67:14:ab:89:ee:27:f5:c0:2b:a4:5b:70:d9:f2:f0:b2:
89:95:6a:4b:59:5f:bd:c1:bb:a5:39:77:18:24:d9:8b:fe:0f:
36:ff:bd:3a:c4:3c:bb:7d:3f:4c:a0:4b:57:ae:6a:fa:e1:1f:
0a:58:1e:92:c4:f7:14:14:57:33:f4:1f:5b:39:a6:2e:1e:16:
36:c4:09:6d:81:1f:b0:3d:ea:8d:c3:09:0e:53:f5:b1:50:79:
72:32:68:e7:c8:ac:43:5b:92:b9:dd:af:17:f5:f0:b4:4b:55:
02:05:05:66:94:f2:40:c6:61:b5:ef:c3:4d:49:be:51:bb:4f:
6e:aa:2b:dc:c2:b5:73:38:5e:dd:fd:70:a7:ff:9b:d1:aa:31:
30:66:31:a8:e6:49:92:93:72:c6:b8:51:fc:5a:49:db:d6:76:
58:55:7a:12:60:1a:64:14:a6:21:8b:27:86:17:cb:25:15:c4:
0f:3a:71:e8:cd:56:fe:09:bf:c2:1b:4e:ce:b9:9a:b1:3c:25:
5e:47:f1:e2:8a:46:64:fa:92:1b:bb:08:10:b4:7b:37:ad:eb:
ff:14:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:07 2025 by rpki-client