Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
File: rY6Ff8AL4U7ZK554zDymm4rcJIU.mft (raw, json)
Hash identifier: ty3haBF1lKQXZhD1BsWUa07wKbwVmWKIGXkHbBL6Lro=
Subject key identifier: D8:0A:C3:48:93:30:B3:84:28:D1:5E:FF:D0:53:90:FF:A6:58:05:62
Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Certificate serial: 0194C3F5B134871802E6C04EDA163270E75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
Manifest number: 1428
Signing time: Sun 02 Feb 2025 00:00:46 +0000
Manifest this update: Sun 02 Feb 2025 00:00:46 +0000
Manifest next update: Mon 03 Feb 2025 00:00:46 +0000
Files and hashes: 1: OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa (hash: EhOploeWX4IzgMSZUmJHUcObR1oyvr4q2CNLTcIgD8g=)
2: rY6Ff8AL4U7ZK554zDymm4rcJIU.crl (hash: +PsmXLgYugDZHD/U/jXewV77qT/8VmjfQj9Z2tdmOZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:b1:34:87:18:02:e6:c0:4e:da:16:32:70:e7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Validity
Not Before: Feb 2 00:00:46 2025 GMT
Not After : Feb 3 00:00:46 2025 GMT
Subject: CN=d80ac3489330b38428d15effd05390ffa6580562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:97:56:79:3c:3a:ef:26:22:ea:ce:17:2a:
ad:64:cd:a4:f2:11:3b:01:27:51:bb:76:7a:46:00:
2a:70:62:94:e5:3d:eb:40:d8:d1:b6:31:b2:2d:0a:
60:1c:79:0a:f6:06:59:7a:3a:40:bb:ec:40:d9:d1:
0b:91:d0:ef:c1:8e:9b:7e:f6:81:6c:33:35:5d:b8:
4d:e2:44:74:b3:79:68:68:fe:a0:51:38:e7:a7:b8:
7c:54:2a:e2:1e:08:96:2a:1f:b5:f5:b7:a2:ce:e2:
44:51:ee:37:f4:b4:13:f4:22:62:a7:cc:73:06:f3:
6c:5a:9c:2d:57:d0:ac:15:15:2c:52:75:b5:64:0d:
d6:f6:99:4d:d8:67:a8:3b:ca:bf:f0:78:18:f4:9c:
71:6a:f3:bf:04:15:ae:91:aa:bf:70:6b:4c:1c:ab:
4c:ad:74:44:d3:bf:5c:7d:78:f8:bd:da:cd:1e:5f:
10:cc:f5:b0:3a:9f:72:38:32:86:5f:cf:1f:ca:6c:
56:a9:7f:a6:1a:4a:1d:90:fa:1d:42:e1:73:0a:31:
e4:21:5b:9c:85:a8:de:6c:d2:58:ae:e2:1c:34:d6:
a3:79:73:43:a1:7a:71:f6:62:7e:a5:ed:23:8c:e3:
b9:16:be:e3:c5:bb:f6:1a:2a:86:9b:30:6f:54:10:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0A:C3:48:93:30:B3:84:28:D1:5E:FF:D0:53:90:FF:A6:58:05:62
X509v3 Authority Key Identifier:
keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:03:aa:54:49:cd:9b:ce:0c:87:89:14:b5:6a:b9:d6:4e:2e:
13:59:9b:c3:09:45:c7:c9:30:bb:23:d7:51:4c:d7:8a:a1:40:
9d:78:12:96:6d:a4:37:9b:70:ca:2e:7d:50:37:67:59:6d:c2:
57:c1:b8:fd:50:4c:d3:fd:88:fe:d7:2e:30:d8:bf:e7:fb:46:
5a:74:a6:d3:3f:7f:68:33:a7:13:18:b8:63:05:74:fc:e8:63:
b3:d0:b2:f3:43:c2:c3:99:55:8b:5d:1f:0f:5a:2c:f7:1a:7c:
1c:b5:57:aa:b6:c0:2e:df:6a:9f:54:8a:40:7b:e7:5a:66:37:
68:e5:d7:20:6a:e2:3b:c7:d2:3c:d8:5c:5d:66:46:a5:27:e6:
68:60:04:98:52:46:c1:5e:41:9c:f1:4f:bf:6e:b0:05:ee:90:
16:bc:bb:63:35:ab:73:26:72:14:68:9a:6f:26:7d:5d:72:21:
75:07:68:b3:4d:ca:dc:0b:63:e8:7d:51:64:90:e1:a3:47:bc:
ad:25:9f:d1:6e:91:73:ff:73:d2:5b:d2:32:62:99:83:89:d1:
97:2d:e2:17:5d:71:03:a1:39:54:48:a1:ae:55:11:be:a8:26:
a5:d6:96:18:4d:9b:bb:c5:61:17:e3:fb:bd:f9:f6:8b:9e:62:
6c:18:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:38 2025 by rpki-client