Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File: NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier: /Ms6Zu47UQF248rDSUrhmxXjdKo/v1lk3WVJNwbfpgM=
Subject key identifier: B6:A6:65:CB:98:B4:38:21:C3:FF:4E:21:CA:54:C2:CF:96:D1:AD:B4
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer: /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial: 019510C73763C67A5448741104D08EAD26FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number: 1457
Signing time: Sun 16 Feb 2025 22:00:45 +0000
Manifest this update: Sun 16 Feb 2025 22:00:45 +0000
Manifest next update: Mon 17 Feb 2025 22:00:45 +0000
Files and hashes: 1: Ex_2ickmNwSl468A43nBNWlR1U4.roa (hash: 2F6N+mLC+ZFSEAJYbcx9IRB+VD26lz+G1r697PEXjx4=)
2: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: UjbGF9RddkHY7WOpUskqFZjUXS2M/y3iHStxLDKGZQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:37:63:c6:7a:54:48:74:11:04:d0:8e:ad:26:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Validity
Not Before: Feb 16 22:00:45 2025 GMT
Not After : Feb 17 22:00:45 2025 GMT
Subject: CN=b6a665cb98b43821c3ff4e21ca54c2cf96d1adb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:3a:28:31:53:6d:1b:af:69:c9:d7:84:82:
d7:1e:91:a3:cc:cf:ac:c8:86:da:54:ff:59:67:a2:
cc:03:91:81:ed:be:87:2e:ed:e1:d2:fa:7f:93:8d:
ff:13:af:a2:13:78:39:d4:b1:00:72:bc:6d:72:33:
46:51:72:a3:bf:39:11:1c:b8:9d:a0:2d:f4:cb:1c:
e7:7b:4a:e3:3f:37:ae:7f:93:b6:13:68:ad:36:22:
e5:f9:ab:0a:81:cf:e2:c2:3e:3b:63:75:b6:aa:47:
9a:d9:05:a0:e3:e5:15:da:c3:d9:a5:7f:95:77:ff:
58:43:40:3b:03:ba:ef:9e:bb:c1:fe:1f:06:2d:aa:
03:cf:6b:ac:84:9c:cf:82:01:c3:c8:0e:08:cd:05:
cf:80:29:09:67:49:ea:a3:3e:22:39:c2:a3:41:0d:
df:84:ab:9f:ec:61:02:0f:cd:08:fe:59:f7:d5:49:
52:de:31:af:be:b8:90:6d:26:fd:82:2b:aa:26:75:
c6:5d:62:41:5e:a9:b6:cd:58:ce:7d:6b:2e:84:94:
1e:a4:8e:1a:6b:8d:ad:3c:84:a9:99:ff:31:b2:b3:
c3:22:20:eb:c8:da:33:8e:2d:6f:42:a7:37:31:ef:
e5:92:71:4d:70:40:4a:28:30:e1:b2:a7:bf:13:5f:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A6:65:CB:98:B4:38:21:C3:FF:4E:21:CA:54:C2:CF:96:D1:AD:B4
X509v3 Authority Key Identifier:
keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:47:68:3d:aa:0a:88:31:e1:03:55:e6:fb:22:d2:46:27:13:
7c:69:08:76:6b:44:85:e7:6b:9b:85:b0:92:1a:a9:1b:e9:cc:
c7:e3:da:35:80:8c:d7:65:ab:b9:01:f6:1d:5a:b9:6f:d4:53:
49:5b:dd:ed:cb:be:15:68:2c:79:3e:39:c8:ea:01:91:51:1b:
08:1f:f9:ac:e7:21:10:66:b3:3e:4e:ee:1a:c6:5a:b5:b8:44:
18:70:da:55:f7:a6:82:d7:42:e0:09:60:a4:c5:f8:ed:02:8c:
0c:bc:70:a1:06:22:45:35:dd:97:3f:9b:29:a2:60:09:f1:46:
e0:41:19:4e:98:1b:21:1f:26:64:37:65:6f:5c:25:7e:62:80:
6c:da:ce:0d:3b:f7:89:2b:39:c8:16:1b:76:94:8a:b6:30:14:
97:43:ce:84:1e:5d:2c:0a:b1:bf:40:4b:70:bd:e1:f9:54:e6:
f4:e5:b4:af:48:3a:37:29:15:a8:6d:e3:30:be:2a:6f:c7:b3:
70:20:ba:7e:1c:d9:4d:01:00:15:3d:47:fb:fe:43:9d:74:b1:
39:18:5f:b0:b0:54:50:bd:a1:e7:76:b2:ab:e3:ec:16:f3:67:
d4:4c:29:49:e0:20:b5:e6:5f:a0:26:93:bd:8f:3a:c4:72:25:
89:eb:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:58 2025 by rpki-client