Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
File: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft (raw, json)
Hash identifier: wVR0c9JbsBimABWr6A5aRmEn3BLTSi98jDPKXL+VFCU=
Subject key identifier: BB:2E:36:DE:0F:30:F9:29:39:A1:C0:6B:18:2B:35:29:DE:4C:F0:3B
Authority key identifier: CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
Certificate issuer: /CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Certificate serial: 0194C463BAE14FFDF11CAB0AFA9D7F61B51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
Manifest number: 0256
Signing time: Sun 02 Feb 2025 02:00:57 +0000
Manifest this update: Sun 02 Feb 2025 02:00:57 +0000
Manifest next update: Mon 03 Feb 2025 02:00:57 +0000
Files and hashes: 1: fOUkBLPvgdmMw3qOCphjRq4t0eY.roa (hash: r4VQRSy7Gza9d4nweiTC6bFhiBWBCqInaEx5ZdTsmu8=)
2: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl (hash: rpObZwXeRqNfWvljX72wuAxMkWEd1hpZLqTfp5Gz8dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:ba:e1:4f:fd:f1:1c:ab:0a:fa:9d:7f:61:b5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Validity
Not Before: Feb 2 02:00:57 2025 GMT
Not After : Feb 3 02:00:57 2025 GMT
Subject: CN=bb2e36de0f30f92939a1c06b182b3529de4cf03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:eb:ed:ad:14:f8:4b:fd:40:19:a9:49:87:
a4:22:40:af:fa:d0:8f:75:64:e1:f0:d1:42:2d:a4:
f9:12:18:4f:1e:2c:bc:d0:d0:db:84:9a:51:d5:fe:
f9:c9:8e:52:c5:64:53:b0:fd:0e:3a:31:1b:f4:cd:
fc:9b:5c:c8:84:98:c8:ef:1f:5a:bd:bb:1e:5a:fd:
58:d9:e2:43:dd:41:43:2a:1f:94:bd:d9:c0:a3:c2:
b2:22:f3:b4:ed:f0:28:25:80:b9:41:22:32:22:74:
ed:00:e3:d1:52:81:8d:4d:cb:a4:dd:f4:b8:22:0f:
74:7a:de:55:d0:02:2e:ac:9b:33:92:4b:34:6d:76:
78:90:93:48:98:e4:b5:a8:3f:9e:41:b7:59:53:5c:
bb:f1:92:2c:d3:f0:b6:a2:87:55:8b:5c:06:6a:39:
e4:48:7d:1e:2d:4e:1c:4e:a2:e3:9f:7f:d2:9c:96:
3f:50:05:7f:e3:f6:fe:2b:d8:94:7c:fc:01:f0:51:
64:db:06:dd:ec:f6:2e:f3:c4:93:18:b5:59:d8:1f:
2a:39:1e:91:3c:3d:75:6c:3b:8a:9b:91:c8:2c:bf:
6e:83:73:8f:e5:79:7e:0c:ab:12:bc:b3:9a:51:48:
9e:0f:ba:bb:75:b0:b6:1f:4c:50:a3:50:1f:1c:b4:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2E:36:DE:0F:30:F9:29:39:A1:C0:6B:18:2B:35:29:DE:4C:F0:3B
X509v3 Authority Key Identifier:
keyid:CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:09:26:8d:96:94:63:81:14:a9:df:d4:7f:6b:51:ba:dd:b6:
07:4a:96:18:60:f7:b5:d3:96:20:39:b6:84:ec:f2:d8:63:89:
e2:9f:41:22:db:e9:34:08:17:2b:f5:a7:fb:3b:0a:43:fc:7e:
d4:24:98:3a:59:ca:e9:e1:5e:d4:c3:44:82:db:55:31:13:6f:
0a:68:68:8b:cf:2e:2c:57:24:cd:fe:0d:ed:37:ed:e7:e1:92:
36:df:14:3f:f6:e9:eb:ce:c2:9a:7b:d4:83:46:c6:54:1c:81:
d9:6b:1e:89:94:fb:1d:62:ce:0a:86:77:18:98:be:22:78:c1:
73:cb:c5:56:67:a7:f8:fe:0f:82:a9:75:30:aa:e2:9c:e4:74:
d3:8d:0d:d0:09:df:a0:64:a0:e6:44:7f:23:eb:4f:f7:88:64:
39:e1:df:7f:6f:ab:03:e4:d4:4d:3c:78:53:35:2b:10:0c:e5:
1d:e3:96:e1:45:99:f2:25:6c:ca:1d:af:07:76:1d:fa:80:77:
5c:d8:2a:22:4c:48:39:da:48:44:6f:f5:5c:b5:3f:eb:40:61:
20:a6:18:c8:00:67:21:f6:72:e3:a9:61:ed:b6:a0:37:a0:a4:
9f:43:6e:9f:32:e7:c1:f8:c2:ea:61:48:4c:46:b8:a7:76:4e:
b6:e4:9d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:59 2025 by rpki-client