Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: P5QR8X56wpB4DGAZ86LRN9gVtFbk0+QoVlDA55CBEW0=
Subject key identifier: 38:02:B3:9A:1D:CA:DD:4F:97:05:C5:DE:A6:EB:B6:B3:5C:FE:1C:75
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 019511D9992ED60D420A252E64EF47B8017F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 0CB2
Signing time: Mon 17 Feb 2025 03:00:28 +0000
Manifest this update: Mon 17 Feb 2025 03:00:28 +0000
Manifest next update: Tue 18 Feb 2025 03:00:28 +0000
Files and hashes: 1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=)
2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: W6iD/r5BK5qfSgJFKuKgaEVAgjmUPrVYTy9dW9iHXdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:99:2e:d6:0d:42:0a:25:2e:64:ef:47:b8:01:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Feb 17 03:00:28 2025 GMT
Not After : Feb 18 03:00:28 2025 GMT
Subject: CN=3802b39a1dcadd4f9705c5dea6ebb6b35cfe1c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:ff:e5:9f:51:6b:dc:03:b0:6b:a8:80:60:
cf:e1:cc:d5:0c:ff:f4:48:06:fc:32:de:17:d5:1f:
b8:30:f2:56:a8:7c:72:5c:15:6e:5f:43:ad:cb:38:
37:e8:0c:39:5d:9f:9f:e0:a4:8b:7b:5c:23:f8:12:
43:79:90:0e:55:dc:23:14:b7:8b:0c:80:10:5c:eb:
05:87:6b:79:35:a0:e9:e3:73:2b:a3:d6:5f:8f:18:
2e:0a:7b:5d:42:6b:9c:d5:89:68:a0:03:d6:31:2e:
08:55:e2:1f:df:ee:71:d5:57:e7:fa:65:d1:76:1f:
e3:df:d9:28:5a:99:5e:ea:e6:3f:a5:6b:9f:39:36:
17:b3:29:23:bb:2d:de:c5:91:e2:c7:6c:d5:15:b6:
e0:c5:dc:d9:4b:54:b1:e9:34:ee:57:cd:38:4c:f3:
21:da:d2:e5:e3:1e:c8:76:b3:08:62:d5:c4:51:25:
4d:f2:ce:19:04:58:7f:6b:5a:33:49:5d:1c:5a:ba:
ed:c0:2b:01:5e:f4:f9:ef:1a:ed:fc:8f:04:9b:cc:
35:4d:ab:ca:2a:30:00:95:6f:b4:fc:3a:56:3d:c1:
58:d4:df:91:26:cc:08:16:32:5c:2d:44:af:79:44:
c7:96:21:64:63:c2:43:c2:81:8d:6e:c4:c6:1a:a9:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:02:B3:9A:1D:CA:DD:4F:97:05:C5:DE:A6:EB:B6:B3:5C:FE:1C:75
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f2:bb:dc:9a:78:a4:3f:f7:29:4b:2a:a1:4e:08:36:51:e1:
94:d0:b7:57:30:fb:1b:0c:13:1f:12:c4:30:e3:38:5c:c7:60:
9b:00:4d:12:35:f6:53:be:22:b2:e0:5f:20:a0:ff:78:99:d0:
52:ab:f4:aa:68:1b:1a:94:ed:18:0b:39:15:76:69:ea:3e:db:
03:42:a7:5e:75:10:b5:3e:b0:a6:a9:66:b1:62:1b:3a:62:ba:
a6:32:50:4c:c8:c9:1c:25:45:98:38:2a:5d:45:81:60:84:90:
eb:4c:3d:f3:c9:ff:62:ea:56:d5:13:18:b0:75:f2:8c:16:19:
4c:87:e7:c0:41:55:69:b7:9d:21:e5:22:36:42:e9:f7:ef:bd:
dd:b0:31:23:dd:44:86:d7:0e:cb:41:5f:54:9c:8b:44:2f:e4:
49:57:24:33:f1:e3:5e:e6:cf:a2:5f:11:4b:2e:52:1c:f9:d7:
58:62:52:8d:c7:9b:79:ee:be:54:cc:cf:9c:8a:09:03:d3:36:
a2:ce:8e:83:c4:e7:ec:1f:51:c6:bf:a6:e4:31:bf:d9:a7:9b:
a0:8c:46:17:77:d4:82:42:b0:8a:2a:9f:c7:2b:ea:d0:61:3d:
95:3b:c2:a3:e2:18:88:e6:32:a2:e7:8f:d5:fa:c6:2e:58:92:
b1:6d:e2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:09 2025 by rpki-client