Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
File: jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json)
Hash identifier: XHm0fP5YPquLkZsjgb0wGyeLM13j1nETu2OdzRoif8k=
Subject key identifier: 02:5D:81:AF:FE:34:E0:31:88:18:2D:D6:61:26:F0:9A:0A:5F:FC:EB
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 019512476EF934495C4E5983A7720E626450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
Manifest number: 111A
Signing time: Mon 17 Feb 2025 05:00:26 +0000
Manifest this update: Mon 17 Feb 2025 05:00:26 +0000
Manifest next update: Tue 18 Feb 2025 05:00:26 +0000
Files and hashes: 1: ZBTvhiqTow3aNMb2aKed7aOmeLE.roa (hash: Hs63HPHm64omZRW3Iw+4oLNTtYpDyEs3J5diEPbkms4=)
2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: M+feWiYKQqQZHWfcIlTwuP0PIISCfovGJ/buaY6BssM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:6e:f9:34:49:5c:4e:59:83:a7:72:0e:62:64:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Feb 17 05:00:26 2025 GMT
Not After : Feb 18 05:00:26 2025 GMT
Subject: CN=025d81affe34e03188182dd66126f09a0a5ffceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:3b:40:c2:c5:af:3b:6a:6e:4a:37:c3:7b:
24:b0:11:43:35:7b:b2:d7:90:3e:d3:46:a1:96:25:
fb:ab:e8:24:99:0e:67:ab:3e:9f:76:0a:e4:1c:22:
cd:6e:17:15:f1:c8:0e:9a:38:99:55:88:7a:d9:52:
f1:eb:d8:31:25:17:32:77:35:ff:7c:c4:e6:a9:ac:
57:5c:ac:12:01:86:a9:85:e5:c7:4f:44:00:74:d3:
e6:d8:91:cf:b3:06:cb:e6:fb:d8:ac:11:47:c9:9c:
73:53:f3:b1:92:da:d4:c6:27:53:1b:48:9c:c4:77:
6b:e4:73:c9:e7:ce:fd:7a:11:a4:af:47:40:95:28:
b1:9a:de:8b:fc:de:4b:e4:b6:88:89:f2:f3:32:39:
c9:e9:09:e7:df:71:bb:9d:cf:77:d5:34:55:a1:91:
5f:fe:ef:b6:7c:b3:8d:35:ed:73:d5:f2:a0:10:33:
57:34:a3:60:50:20:d9:b9:54:de:58:bc:7d:12:f4:
0e:f5:bb:7d:7d:88:65:4f:9f:6d:93:54:19:a6:4d:
4e:04:ce:59:23:cd:a9:bc:be:37:37:78:6a:03:0c:
dc:a2:11:7c:67:fc:3e:94:0c:55:bf:e6:39:2e:fe:
8e:39:e7:3d:2a:69:65:44:97:f8:33:29:99:c6:d6:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:81:AF:FE:34:E0:31:88:18:2D:D6:61:26:F0:9A:0A:5F:FC:EB
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ec:64:ae:a3:5f:58:c4:a2:14:78:d1:5b:39:bc:c3:8b:07:
48:a4:3c:de:e6:b9:35:9e:ec:f0:ba:9d:e2:3e:7b:ce:a4:ec:
e8:ad:66:74:fd:37:4f:c2:1d:7c:d5:74:53:a3:af:08:d3:2d:
f2:e4:6f:b0:cf:b6:5f:74:37:02:09:f9:38:4f:c4:1b:90:93:
4a:1a:44:00:70:61:37:8f:90:4a:8e:22:26:87:ba:47:4b:67:
76:d5:4b:1f:d0:64:4d:1b:92:39:b0:21:1d:22:e6:11:40:6d:
1b:f7:7d:99:ea:3f:8a:52:ce:33:a7:4f:9a:6a:32:ea:95:c9:
13:22:19:53:16:40:cb:35:b3:dc:bd:96:ad:85:4d:66:d6:de:
f0:90:ec:88:6a:a0:03:0b:e4:ab:23:4e:b7:6d:42:c1:c8:59:
9b:b8:f6:6f:19:b4:d9:4d:df:af:6c:88:c0:72:88:18:5d:6d:
c6:df:f6:29:a9:6e:67:84:36:25:00:7a:1b:23:39:c4:de:0f:
77:8f:6a:90:d2:25:02:d5:50:20:bf:89:38:3c:c4:08:f3:de:
70:29:92:de:08:01:c3:d7:39:7f:d5:cf:9b:3e:32:e2:dd:a9:
24:f6:d2:d9:c7:e7:b5:ce:53:1c:d4:84:8e:e8:c3:55:f1:02:
6c:10:06:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:20 2025 by rpki-client