Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: vSOHoiwhs9S3Q05bh9mN6fbVF5R5aN/JIldi7U0wI0o=
Subject key identifier: FA:7D:04:94:2E:83:EC:E6:4A:F7:AB:9C:3C:7B:D6:CB:F4:4D:4F:75
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 019511A336C86EB06069517EA5D411554850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 145D
Signing time: Mon 17 Feb 2025 02:01:03 +0000
Manifest this update: Mon 17 Feb 2025 02:01:03 +0000
Manifest next update: Tue 18 Feb 2025 02:01:03 +0000
Files and hashes: 1: G67im2f6_ZhJBmi9qes0fIWNsWo.roa (hash: rcGVW1BtLRG5wqd17uLZEGASDvopWpXiN4N5Gl4c/9Y=)
2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: WxG13Evlop0iqJMINzSEm9UuCxC2JTn6dYRIoKIn6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:36:c8:6e:b0:60:69:51:7e:a5:d4:11:55:48:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Feb 17 02:01:03 2025 GMT
Not After : Feb 18 02:01:03 2025 GMT
Subject: CN=fa7d04942e83ece64af7ab9c3c7bd6cbf44d4f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:bb:43:5c:1d:fe:98:38:06:d5:5b:96:0f:
1c:5d:6e:dc:8d:ef:bd:fc:47:f5:e4:0c:3b:e4:89:
bb:5b:30:1d:8d:78:c1:a9:ad:af:74:66:5e:db:c6:
38:42:50:5f:8d:ce:5b:9f:5e:7e:a4:5f:e1:ca:bc:
8c:ea:1d:8b:2d:47:9b:d7:32:2c:9b:45:cb:e9:74:
1d:f6:af:3f:eb:67:ad:91:16:d1:60:60:6d:ad:86:
0f:7b:59:2b:d9:1a:04:6d:8c:4e:0f:ec:a7:b3:3f:
eb:91:ed:2b:50:8e:09:2e:1c:a8:f3:b3:a6:61:bd:
cb:6e:15:b8:56:62:93:ae:2c:59:aa:19:55:d7:86:
87:81:05:d8:e1:88:26:fb:b8:21:2f:3c:38:50:7e:
d5:22:0d:24:34:3f:23:65:35:b6:f9:f4:9a:cc:bd:
1d:6d:9c:5a:dd:e5:5f:c0:40:cf:7e:54:a1:39:c0:
8d:c9:5c:47:27:a5:90:79:e4:e5:17:d0:7b:ed:37:
80:48:a4:1e:0e:d6:3d:31:59:31:a6:65:98:3d:12:
d7:16:5e:2b:a4:31:5a:cd:a3:52:b4:c0:a2:c2:2b:
82:93:f4:a6:4a:36:0f:83:99:73:d3:17:fa:ee:b2:
d8:7e:65:68:30:a1:b0:93:96:1d:14:bf:17:31:10:
11:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:04:94:2E:83:EC:E6:4A:F7:AB:9C:3C:7B:D6:CB:F4:4D:4F:75
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e8:77:7d:de:22:72:6b:a6:b3:67:1e:f6:e3:16:28:fc:3a:
63:a2:4e:53:75:63:28:c3:c4:cd:33:d8:b4:c2:fd:60:b6:b8:
0a:b7:00:7a:59:fc:f7:22:79:95:b5:d8:81:9d:e7:4f:35:04:
0e:2e:67:f1:c9:f0:b6:d7:e1:cb:b2:cc:bc:47:e2:8e:cb:22:
9a:77:2c:fc:3b:0f:8e:02:72:b4:75:39:19:66:50:f3:ef:ca:
d7:a0:f0:b2:3f:0b:e1:40:ae:48:bb:59:cc:51:6b:d6:b9:5a:
87:96:59:c8:e7:0f:a0:eb:fc:83:f8:97:46:7a:3d:29:c7:de:
f8:63:47:c3:eb:72:0b:7b:a4:1d:bc:a7:ff:13:c7:40:1f:24:
54:21:eb:a3:fd:f5:31:fe:43:3e:1e:3f:65:63:8c:be:6a:9b:
e9:e9:25:e7:4e:97:16:65:7d:ec:bc:94:75:47:58:df:4e:5f:
55:c9:92:c2:55:1a:32:53:52:25:10:cb:13:7a:b7:e5:e8:d2:
1b:08:51:c5:3f:31:29:b3:10:61:31:b1:40:e4:8d:e7:90:be:
8b:28:4e:f1:37:b8:84:d6:8f:88:55:10:a1:67:48:10:41:60:
8a:0f:0d:9f:2f:3d:34:d1:59:46:b5:76:a9:97:82:a1:cd:1a:
e6:2f:94:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:23 2025 by rpki-client