Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: 9v7M6CVNMgNwAY+c4nM9ezpE+Vx8esd7ANb2F3xwPVs=
Subject key identifier: F0:0A:23:64:0A:AD:57:24:B1:02:70:1E:A7:D5:98:66:FF:3B:72:F0
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 0194C319BF494DB0CFDCA950FD50CF9514EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 1433
Signing time: Sat 01 Feb 2025 20:00:31 +0000
Manifest this update: Sat 01 Feb 2025 20:00:31 +0000
Manifest next update: Sun 02 Feb 2025 20:00:31 +0000
Files and hashes: 1: 9EAsH9WiZD4VxilaYIDfYTgwfr8.roa (hash: S6lIJn8kLzJ0SR0mYeMv6RwOAdGOeRdde/Wo386MMZ0=)
2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: uHFbKIJLMGXWmxRxUN3B/OdG6BJQE/fEOMU2BXPewQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:19:bf:49:4d:b0:cf:dc:a9:50:fd:50:cf:95:14:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Feb 1 20:00:31 2025 GMT
Not After : Feb 2 20:00:31 2025 GMT
Subject: CN=f00a23640aad5724b102701ea7d59866ff3b72f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:49:7d:19:00:48:52:d9:cf:96:f8:72:72:
ce:d5:0a:88:31:14:3f:59:45:c5:14:93:55:61:c1:
41:bd:a2:1b:60:cb:35:dc:88:55:e0:6d:f7:3f:8a:
2e:05:88:2b:f3:53:2a:b3:f3:0a:7c:85:4d:c4:02:
14:04:4f:95:e1:10:e7:d2:31:d7:88:c1:89:d6:84:
e6:b7:8b:13:d7:d6:7b:1b:47:bf:19:77:9f:9f:1d:
43:81:2c:58:b9:e6:6a:b4:b9:fe:d3:c3:18:0f:dd:
23:79:f5:57:24:36:04:54:2e:da:3c:a8:14:6e:60:
0e:e9:5c:f6:8e:6b:90:d5:e4:f7:d9:26:5e:4b:63:
ab:9f:e4:27:a5:3f:c2:0d:13:4f:cb:8a:34:62:0d:
46:10:f6:69:15:7f:68:1b:c3:c6:1e:18:3c:d4:9e:
88:7d:5b:34:2e:1d:b8:5f:b8:a4:52:ac:c6:67:4d:
5c:2c:21:69:14:6c:8a:38:80:7f:5a:a1:a8:56:96:
14:d8:0f:ba:66:51:55:cb:77:3c:df:27:c6:1b:a6:
cd:eb:c3:ba:4c:46:82:ec:af:4f:c8:8a:a6:35:e9:
c3:6a:0a:ab:9e:62:ea:47:b7:8a:57:f0:a7:61:74:
16:e1:af:cd:93:69:10:9f:f9:2f:e0:bd:1b:ad:c4:
fd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0A:23:64:0A:AD:57:24:B1:02:70:1E:A7:D5:98:66:FF:3B:72:F0
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3f:a1:85:9a:a5:50:39:ba:91:9a:d9:99:e6:b0:cf:d9:f8:
7d:a6:44:fe:cf:ff:71:b6:ec:2a:9d:7d:1f:f0:1d:ec:6c:70:
df:a8:c2:c3:06:8d:39:3b:6c:f9:fe:a0:38:cd:02:4e:e8:7a:
3e:03:9d:cb:67:5c:5c:51:45:a2:c1:e6:5a:8c:1c:65:1e:11:
19:dc:25:42:26:21:36:d7:ce:8a:22:30:b5:db:ad:ea:80:70:
a4:0a:1c:b2:38:7e:91:37:bd:7d:0d:72:91:70:44:c6:fb:b3:
56:86:70:c3:ed:4a:ab:99:05:dc:51:00:2c:5e:46:62:40:73:
80:ef:82:06:f2:93:5b:be:09:4e:2a:ec:fd:4e:dc:b0:17:54:
b6:4d:4e:d1:16:2f:78:1a:2a:ed:98:bc:7d:d8:3f:72:30:cd:
0a:82:5e:9a:37:3e:34:16:aa:62:b1:7a:5f:d8:c7:25:8f:47:
bf:4c:ba:6f:5a:eb:70:76:6a:d3:87:33:7c:07:6c:db:2b:e0:
bf:e7:38:8e:dc:22:85:a6:94:aa:c2:d2:a2:d1:53:9e:30:e9:
9b:83:f8:6c:8d:98:60:9e:0f:a9:a0:2d:a6:c2:36:04:7e:c1:
60:10:2b:58:84:9c:a5:96:c1:b9:58:42:24:63:b9:52:54:9c:
06:2a:5d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:43:04 2025 by rpki-client