Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier: xAuPnHjInoDchVfXNTKBK3qokIj8QLrwv9hGpYhE7Jw=
Subject key identifier: 26:A5:F7:8C:AD:67:C3:74:65:38:D1:66:CA:E6:DF:9F:79:38:C1:2E
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 019510C79785A498270755000E71D55F3DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number: 0BAD
Signing time: Sun 16 Feb 2025 22:01:10 +0000
Manifest this update: Sun 16 Feb 2025 22:01:10 +0000
Manifest next update: Mon 17 Feb 2025 22:01:10 +0000
Files and hashes: 1: Gu9ez5zlQGgsXPCgSAa011q3NCY.roa (hash: XMVaMgOJ4WWG4Lp4VxV89GlWKPKFR9zZG9BiqqxMKyA=)
2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: 3mMETLgAYXZinqV8zwxDWpkKCgzCTYtFeNYyzcBf4l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:97:85:a4:98:27:07:55:00:0e:71:d5:5f:3d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Feb 16 22:01:10 2025 GMT
Not After : Feb 17 22:01:10 2025 GMT
Subject: CN=26a5f78cad67c3746538d166cae6df9f7938c12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:bd:89:c3:1f:26:16:c7:00:73:5c:38:0a:
98:68:b1:fc:ce:da:2b:e9:ed:b3:1b:45:63:7c:33:
93:6b:f4:f9:76:67:f6:c2:7d:b6:7c:00:82:29:dc:
ae:d9:9c:70:76:57:a1:5c:d7:da:9c:54:1c:97:7d:
b7:3c:1a:53:65:c4:2a:96:77:13:01:cf:24:8d:74:
5d:f2:81:26:45:1e:e8:61:38:58:1c:00:e1:6d:16:
70:b9:26:7f:0f:26:27:ab:2e:f1:a8:93:9c:d6:61:
8d:da:8d:ca:70:1a:ad:79:5d:84:8d:00:43:92:bd:
a1:07:6f:85:75:2a:a7:e6:3c:56:9c:14:72:4f:bd:
91:ba:14:f8:99:9c:c0:c3:c5:9d:a6:73:7c:4d:40:
ff:56:4f:8a:f7:d8:f6:f8:a2:75:ea:96:f3:eb:31:
fb:45:8f:71:6a:16:a9:2e:07:42:dc:7e:d4:32:f6:
70:da:6e:48:7c:9f:dd:6f:49:74:76:14:1a:57:1a:
da:49:62:34:f1:e2:48:e1:70:4d:06:00:ad:31:f2:
45:59:dc:47:4c:37:3b:89:2c:e5:19:a8:10:8f:da:
45:a7:6b:b6:d8:7a:4c:f4:1b:01:9c:66:90:7d:84:
55:ac:05:75:c8:0c:ec:c6:44:f3:22:f4:ae:f5:8e:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:F7:8C:AD:67:C3:74:65:38:D1:66:CA:E6:DF:9F:79:38:C1:2E
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:35:0d:a0:d2:18:4a:57:bd:85:09:ec:8c:ca:d1:3d:06:3e:
4b:6d:7b:71:55:51:ca:09:f6:c7:eb:38:f7:62:e9:d4:2f:34:
e3:f3:4b:d1:cc:18:27:a5:ee:94:f1:01:a0:da:2b:51:cb:6a:
f9:5b:f3:9f:09:9b:f0:12:3a:4c:1c:39:f9:ee:e9:01:77:d1:
3d:62:bc:83:bb:97:e2:c0:94:a2:d3:db:ee:89:5a:51:a5:16:
c7:4e:ba:6e:8f:00:b9:41:84:dd:53:27:d8:7b:e3:77:9c:dd:
8e:aa:13:78:ae:db:32:7c:9e:65:cd:eb:11:16:12:3e:bb:63:
f4:ce:ec:6b:12:1f:82:10:cd:08:87:5a:d1:00:7f:fe:f2:f1:
cf:56:3a:f0:cb:a8:a6:1e:77:ea:f8:32:6c:ba:da:94:d5:92:
8b:29:0e:2d:bc:c0:d8:8f:71:fa:9d:16:fb:73:a0:3e:f3:9e:
a8:d3:bc:a9:ba:81:44:f4:40:c5:3f:b5:47:86:9c:87:e4:b4:
b8:d1:c2:5a:2f:b8:33:73:71:22:4b:a0:a9:13:a8:47:b1:b3:
a9:83:3b:57:e5:36:e7:cd:d7:3c:65:9f:51:73:d3:aa:f2:43:
c6:a0:f4:31:6c:64:e9:fe:e5:39:1b:fb:22:2f:55:4b:2e:fd:
c3:2e:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:09 2025 by rpki-client