Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: HJM0XNfbEluBWGEbNZAIpGV3l/ZpDa10hC/IgVaLKlM=
Subject key identifier: E8:9D:2D:14:39:8C:09:09:9F:89:AB:5E:C4:49:45:4A:E0:9B:05:9B
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 019511348898DDA9949340FBF7A885ACA650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 00:00:10 +0000
Manifest this update: Mon 17 Feb 2025 00:00:10 +0000
Manifest next update: Tue 18 Feb 2025 00:00:10 +0000
Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: vgQOU68E8a4BI5xm/l+KDvB8oUalAuffwG20yvSzU9Y=)
2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:88:98:dd:a9:94:93:40:fb:f7:a8:85:ac:a6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Feb 17 00:00:10 2025 GMT
Not After : Feb 18 00:00:10 2025 GMT
Subject: CN=e89d2d14398c09099f89ab5ec449454ae09b059b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:c9:6d:7f:4d:6d:ee:d3:f0:7d:33:20:0c:
5a:4c:1c:87:8e:8a:93:4c:16:ca:5d:79:c3:8e:a0:
93:79:e2:5c:2a:e9:97:11:f4:1a:b9:4e:a8:9d:ae:
39:1a:48:86:ab:2c:3e:4f:45:41:c1:f9:97:00:39:
0e:c2:1d:a9:cb:76:9f:e5:1a:ca:9f:e4:69:0d:45:
83:b5:98:72:f7:cc:47:cf:83:62:30:a1:f5:9c:3a:
93:4c:14:d9:ed:f0:47:af:20:11:62:5e:5b:bb:a2:
c3:db:2e:95:56:22:fb:7d:70:fc:2f:e3:fb:6e:86:
39:6b:4e:2d:46:b3:ee:87:c1:fb:32:fc:f2:13:b7:
c4:d2:a5:e9:44:3b:7d:5d:ba:fe:46:ec:9c:d9:45:
88:97:00:9e:e7:af:ec:40:61:cd:76:d2:0d:82:2d:
8d:a7:9c:9d:31:67:00:e3:32:54:09:d4:cb:ba:78:
c7:ef:93:9c:4a:00:ca:9a:70:23:e6:7a:f7:b4:93:
89:0e:a4:a6:57:b5:a2:f2:d8:ef:3c:7a:e4:09:ba:
a0:1e:ae:c3:e8:ec:dc:84:96:d2:53:0f:30:18:96:
8f:05:d0:0a:3b:b5:ce:c0:a9:03:88:ed:a2:68:1b:
e8:bb:41:cc:cc:79:27:a7:a6:1d:74:2d:a9:82:ce:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9D:2D:14:39:8C:09:09:9F:89:AB:5E:C4:49:45:4A:E0:9B:05:9B
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:27:a4:3e:12:0c:80:4b:c0:38:c9:61:bc:88:d4:b9:5a:75:
f6:37:8c:df:49:d2:5a:38:e1:e5:0d:4d:af:25:85:29:9f:76:
db:5a:00:33:2c:58:d9:58:64:ff:4e:8c:2d:aa:87:70:35:be:
15:99:d5:0f:2b:34:0c:b0:84:d4:25:26:54:d0:ac:9b:a9:ad:
f2:d2:5e:2c:4b:ef:d1:ff:35:6d:67:ee:55:67:67:b8:8b:0e:
8a:8e:51:65:b6:ab:52:ff:a8:62:45:bf:52:00:f6:9b:03:da:
7f:ad:bb:0b:32:6f:99:de:44:7e:92:42:bb:04:8f:ea:cc:32:
b9:21:78:a7:22:f0:5d:e2:98:bc:0a:75:44:a7:55:1a:58:97:
0f:9d:d1:fd:af:62:8f:3c:9e:ae:6d:b9:1c:34:76:c8:09:57:
9d:a8:50:a4:e8:24:86:bd:a6:88:ca:ab:94:14:54:fa:ab:b3:
1f:08:ba:26:b3:b2:6a:74:03:5c:27:4a:ef:e1:b2:83:80:7d:
34:a0:58:c3:2b:31:84:a8:6c:2c:ff:31:c2:da:be:4f:05:69:
67:a2:f6:e7:35:d3:56:46:39:1d:5d:8b:31:f3:1d:0a:35:44:
e6:1b:e3:8f:f3:b0:05:78:8a:e7:48:62:90:d1:4b:68:af:57:
33:99:9c:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNIiY3amUk0D796iFrKZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZmUyZWFmYTY0YWNlYWYxZmNmY2ZiY2E2MTUwYTdhMmQz
NWJlNGEwHhcNMjUwMjE3MDAwMDEwWhcNMjUwMjE4MDAwMDEwWjAzMTEwLwYDVQQD
EyhlODlkMmQxNDM5OGMwOTA5OWY4OWFiNWVjNDQ5NDU0YWUwOWIwNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6bJbX9Nbe7T8H0zIAxaTByHjoqT
TBbKXXnDjqCTeeJcKumXEfQauU6ona45GkiGqyw+T0VBwfmXADkOwh2py3af5RrK
n+RpDUWDtZhy98xHz4NiMKH1nDqTTBTZ7fBHryARYl5bu6LD2y6VViL7fXD8L+P7
boY5a04tRrPuh8H7MvzyE7fE0qXpRDt9Xbr+Ruyc2UWIlwCe56/sQGHNdtINgi2N
p5ydMWcA4zJUCdTLunjH75OcSgDKmnAj5nr3tJOJDqSmV7Wi8tjvPHrkCbqgHq7D
6OzchJbSUw8wGJaPBdAKO7XOwKkDiO2iaBvou0HMzHknp6YddC2pgs4ZIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOidLRQ5jAkJn4mrXsRJRUrgmwWbMB8GA1UdIwQY
MBaAFGH+Lq+mSs6vH8/PvKYVCnotNb5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQt
MzlhZmQ5MzE2NTk4LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQtMzlhZmQ5MzE2NTk4
LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyekPhIM
gEvAOMlhvIjUuVp19jeM30nSWjjh5Q1NryWFKZ9221oAMyxY2Vhk/06MLaqHcDW+
FZnVDys0DLCE1CUmVNCsm6mt8tJeLEvv0f81bWfuVWdnuIsOio5RZbarUv+oYkW/
UgD2mwPaf627CzJvmd5EfpJCuwSP6swyuSF4pyLwXeKYvAp1RKdVGliXD53R/a9i
jzyerm25HDR2yAlXnahQpOgkhr2miMqrlBRU+quzHwi6JrOyanQDXCdK7+Gyg4B9
NKBYwysxhKhsLP8xwtq+TwVpZ6L25zXTVkY5HV2LMfMdCjVE5hvjj/OwBXiK50hi
kNFLaK9XM5mcSw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:33 2025 by rpki-client