Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: nnTTYG20LXxiebSSmtthyhFS0veD9mDsqGhSynM6Uig=
Subject key identifier: FB:FE:D7:0A:B4:FF:AA:94:B2:6A:79:45:93:39:6C:E8:7A:3D:A6:E4
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019511347CC45A8F54C7E2AB734BA4209C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 1383
Signing time: Mon 17 Feb 2025 00:00:07 +0000
Manifest this update: Mon 17 Feb 2025 00:00:07 +0000
Manifest next update: Tue 18 Feb 2025 00:00:07 +0000
Files and hashes: 1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: MMsCwmAtFH/YFyLTlQvvFvlswxcRqO5koZC+ZddNQEI=)
2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:7c:c4:5a:8f:54:c7:e2:ab:73:4b:a4:20:9c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Feb 17 00:00:07 2025 GMT
Not After : Feb 18 00:00:07 2025 GMT
Subject: CN=fbfed70ab4ffaa94b26a794593396ce87a3da6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:cd:42:47:64:6e:88:44:2f:08:ce:7c:a0:
40:33:b2:3a:66:3b:13:38:d0:74:ee:b6:a5:52:75:
f7:89:23:33:06:46:8e:ef:47:9c:0d:44:34:94:3d:
b7:87:ed:c3:a8:b3:28:5e:8a:1b:1b:78:eb:a1:42:
5a:51:4a:e4:b6:ed:6f:9d:6c:ad:da:3f:7c:58:3e:
03:4e:62:c8:98:75:68:e2:6c:ee:91:91:2f:20:58:
92:6b:c3:67:7a:ee:c3:d2:7c:20:9d:17:b4:33:99:
b2:31:20:eb:3b:69:3f:d8:c3:9d:d5:72:a9:e7:35:
e3:6c:84:e5:31:cb:a3:9d:24:5b:a2:4d:29:74:1a:
74:ef:f8:55:47:21:d7:4e:7e:8e:fc:dd:7d:03:43:
49:4b:49:1e:d5:e8:84:88:83:09:d3:f7:02:36:f9:
31:cf:9b:c5:65:2d:8f:d2:dc:39:34:c0:75:a6:ca:
1e:45:b5:e7:d4:ad:d8:6f:65:5a:75:55:ec:95:e7:
b7:8b:bf:ba:74:19:3d:ba:00:48:46:5e:37:c1:68:
a9:2d:d5:4f:bf:b2:f3:1f:58:f7:48:5f:89:c3:b9:
92:6c:70:8f:a5:a2:fb:9d:f6:8b:b2:13:f2:14:dd:
b5:54:e0:ba:f6:e8:5a:af:c4:0c:40:93:89:1f:2e:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FE:D7:0A:B4:FF:AA:94:B2:6A:79:45:93:39:6C:E8:7A:3D:A6:E4
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:16:3d:cb:e8:62:b3:86:b8:16:c8:f3:29:d4:73:54:af:92:
0a:58:a6:74:fa:76:87:72:11:c0:5a:4f:e0:e1:9a:7e:93:e7:
fa:18:9c:51:4d:bd:89:e5:ad:7b:d9:76:88:1c:8a:39:e8:b8:
05:4d:68:98:f5:c7:b6:e4:81:fd:58:32:eb:2d:7c:b8:bf:fc:
cb:1d:d4:f3:4a:cf:3f:a7:f9:c1:35:8d:0d:ec:15:46:34:1a:
57:92:7d:4a:88:9b:a2:e3:25:58:b6:bc:fe:a2:b8:d8:be:90:
00:59:8d:73:49:87:6e:50:ca:7b:58:c0:52:92:90:33:1e:24:
a7:c1:d6:62:52:3d:92:6e:7f:0c:80:c0:ef:12:ee:c7:a3:32:
e8:8d:cf:fc:48:ff:25:91:ce:8d:15:db:19:ed:ef:e0:10:4e:
fc:09:28:75:98:ff:02:92:95:23:6e:08:bf:cb:2f:d6:2d:40:
03:5d:1e:65:6a:e2:46:35:32:f3:a2:26:86:fb:58:8a:28:53:
d6:e1:e0:05:88:4f:52:40:77:e0:c3:ce:e3:8b:3e:ea:69:a5:
89:56:3e:59:20:0b:22:56:f3:fd:72:10:da:cc:b3:53:f8:de:
84:9b:33:78:94:4c:68:e6:e6:3c:72:ad:b8:cc:d5:b5:a0:18:
d3:ed:23:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:08 2025 by rpki-client