Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: EkHgrfsu1DevlDjNqAf6Tp1VkZFgC6ySKAwas03yyDY=
Subject key identifier: 58:C1:80:94:28:95:45:C4:00:3C:D8:98:09:8B:12:E8:1B:E3:9B:71
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 019511A2B7C73A9652B83958499BB3EC691B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 131D
Signing time: Mon 17 Feb 2025 02:00:31 +0000
Manifest this update: Mon 17 Feb 2025 02:00:31 +0000
Manifest next update: Tue 18 Feb 2025 02:00:31 +0000
Files and hashes: 1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: ye+hC6kX1pagXQg1UutXvoCczgGqLZJ6zyXJjbd/1UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:b7:c7:3a:96:52:b8:39:58:49:9b:b3:ec:69:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Feb 17 02:00:31 2025 GMT
Not After : Feb 18 02:00:31 2025 GMT
Subject: CN=58c18094289545c4003cd898098b12e81be39b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:0d:93:89:bb:4a:47:14:d0:29:db:96:1d:
ac:a0:f0:19:ac:e8:72:fa:b5:3c:be:10:6d:c6:5b:
0d:29:29:70:e2:29:f8:2e:1d:9b:16:d7:01:0c:3a:
22:43:c1:05:d7:a5:14:f4:74:c4:d8:d9:11:41:94:
ab:0a:bb:cd:b8:e2:fd:43:65:09:1f:d8:3a:52:e1:
df:53:6b:0b:d7:fe:99:7c:28:12:a3:16:a9:a6:73:
78:85:ea:fe:d0:bc:3a:03:11:50:93:ef:97:f1:86:
50:4e:8c:73:43:d1:51:ff:76:d8:7b:68:51:f0:b4:
95:50:d3:a0:3b:17:05:9c:be:ef:0d:55:b6:34:91:
dc:be:bc:f7:9c:e6:0e:93:96:c0:be:0d:84:8f:ce:
51:87:d8:0d:f4:2b:b3:bf:5e:10:64:b6:cd:cf:fd:
f5:69:ef:f5:bb:1f:05:3b:00:bc:ba:40:71:f3:ba:
f7:a6:45:f7:5e:aa:de:1a:a7:5d:4c:77:56:96:fc:
7f:ba:3a:7e:0b:ee:17:ca:45:07:4e:99:b6:b4:6e:
74:4b:62:b1:9f:a5:14:07:c9:38:db:2c:1f:0d:09:
e6:fc:dd:f4:89:3f:a9:ba:b3:08:f5:34:42:47:be:
68:e2:ab:15:2a:8f:bd:89:68:5a:4d:95:83:0d:62:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C1:80:94:28:95:45:C4:00:3C:D8:98:09:8B:12:E8:1B:E3:9B:71
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b3:12:a1:60:49:2d:df:d6:cb:18:b8:08:b6:d5:23:c9:77:
75:5e:57:b0:2e:83:2b:64:ff:d7:23:56:bf:5e:f6:c7:ee:46:
9c:48:12:8a:ac:e0:1b:1d:3c:67:14:59:9d:2d:73:be:ee:b7:
df:67:ec:85:db:50:20:fa:c9:7f:94:f8:0c:bf:48:3c:f6:b4:
8c:59:65:1d:80:b9:39:22:bd:0a:74:41:17:32:c0:41:fc:f2:
4f:bd:b2:09:89:8e:65:08:e6:69:04:02:40:fd:19:b8:e9:16:
fc:f9:ac:20:b0:3a:6b:0a:af:60:fc:c6:f0:a8:8b:e4:22:8f:
8a:6a:fd:b5:0a:79:92:0c:42:15:40:6f:46:4b:fa:f4:2b:d0:
77:6d:78:28:e2:9d:19:84:e1:03:6c:49:6b:14:91:a3:67:b1:
36:eb:75:38:d4:7b:87:82:b1:ac:18:7f:f3:4f:a2:a8:5d:b1:
09:7f:c0:44:60:37:31:2c:fd:d5:79:5a:55:a7:75:25:3a:02:
99:d3:1c:3d:6f:47:7e:ca:1a:7e:08:f9:e4:5e:4c:59:7a:55:
20:61:db:96:ae:5c:0c:f5:3b:40:82:5b:c1:07:86:7e:b8:4c:
f6:07:50:2b:11:23:7f:a5:77:86:7d:85:0b:2a:54:30:6c:af:
81:35:e9:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURorfHOpZSuDlYSZuz7GkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5Yzg4MTI0N2NhZGJjYmY1MmFhMmFkNzYyY2M3NDU0YTdh
ODcyNmUwHhcNMjUwMjE3MDIwMDMxWhcNMjUwMjE4MDIwMDMxWjAzMTEwLwYDVQQD
Eyg1OGMxODA5NDI4OTU0NWM0MDAzY2Q4OTgwOThiMTJlODFiZTM5YjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlUNk4m7SkcU0Cnblh2soPAZrOhy
+rU8vhBtxlsNKSlw4in4Lh2bFtcBDDoiQ8EF16UU9HTE2NkRQZSrCrvNuOL9Q2UJ
H9g6UuHfU2sL1/6ZfCgSoxappnN4her+0Lw6AxFQk++X8YZQToxzQ9FR/3bYe2hR
8LSVUNOgOxcFnL7vDVW2NJHcvrz3nOYOk5bAvg2Ej85Rh9gN9Cuzv14QZLbNz/31
ae/1ux8FOwC8ukBx87r3pkX3XqreGqddTHdWlvx/ujp+C+4XykUHTpm2tG50S2Kx
n6UUB8k42ywfDQnm/N30iT+purMI9TRCR75o4qsVKo+9iWhaTZWDDWJTwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjBgJQolUXEADzYmAmLEugb45txMB8GA1UdIwQY
MBaAFMnIgSR8rby/Uqoq12LMdFSnqHJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQt
N2VmZTkwNWZmMjkxLzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZDZiNTMtOTVhOS00ZDYwLWI0NmQtN2VmZTkwNWZmMjkx
LzEveWNpQkpIeXR2TDlTcWlyWFlzeDBWS2VvY200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7MSoWBJ
Ld/Wyxi4CLbVI8l3dV5XsC6DK2T/1yNWv172x+5GnEgSiqzgGx08ZxRZnS1zvu63
32fshdtQIPrJf5T4DL9IPPa0jFllHYC5OSK9CnRBFzLAQfzyT72yCYmOZQjmaQQC
QP0ZuOkW/PmsILA6awqvYPzG8KiL5CKPimr9tQp5kgxCFUBvRkv69CvQd214KOKd
GYThA2xJaxSRo2exNut1ONR7h4KxrBh/80+iqF2xCX/ARGA3MSz91XlaVad1JToC
mdMcPW9Hfsoafgj55F5MWXpVIGHblq5cDPU7QIJbwQeGfrhM9gdQKxEjf6V3hn2F
CypUMGyvgTXpGQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:09 2025 by rpki-client