Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: rTn06B4ZgV1IZoS6fdb2F55LxnlK4aWH3jnQg1Uzq4g=
Subject key identifier: EF:33:BD:EB:5B:FF:A6:E4:7F:1C:F2:62:2A:D0:AD:E9:FD:FF:69:E3
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 019511A2810164DC42694B5B080E7BEFE02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 02:00:17 +0000
Manifest this update: Mon 17 Feb 2025 02:00:17 +0000
Manifest next update: Tue 18 Feb 2025 02:00:17 +0000
Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: cSoaWuzxU2qZ0W1vyFuC6jSUSqLbUO9tLkw1+8KI0uY=)
2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:81:01:64:dc:42:69:4b:5b:08:0e:7b:ef:e0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Feb 17 02:00:17 2025 GMT
Not After : Feb 18 02:00:17 2025 GMT
Subject: CN=ef33bdeb5bffa6e47f1cf2622ad0ade9fdff69e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:89:85:bd:c0:4d:eb:9b:95:e5:a7:d3:bd:
0f:17:b8:ce:77:35:71:3e:c2:8a:8a:c2:0b:37:0f:
36:2b:67:7b:f5:0e:cd:68:91:f3:58:b1:2e:92:1a:
07:3b:38:72:b7:24:1a:bf:a5:ce:6e:b6:ab:58:ab:
81:4f:05:a0:78:9f:2f:97:65:e9:13:74:cb:18:24:
91:14:06:17:e1:65:d6:9a:55:47:59:3d:4c:45:2d:
46:9b:c8:b1:0d:0d:32:56:71:6b:72:30:bd:7f:ab:
87:8b:f0:27:94:69:f6:97:a3:28:3c:eb:a8:ac:32:
fb:64:2f:68:fe:dc:9f:a0:5f:12:c8:d0:51:87:8b:
d8:c2:aa:ba:73:ab:53:03:ad:6d:3f:5d:77:ff:c3:
c3:3c:2a:96:f4:d3:64:3d:8f:a3:fc:c9:27:b7:90:
7a:e0:5c:8b:ed:a0:01:bf:c5:37:98:26:17:00:13:
d0:80:a6:46:37:8d:da:e6:a5:25:b0:e5:a0:d8:67:
ae:bc:59:a4:10:68:ea:ab:9b:9c:07:3c:37:26:05:
b3:50:0c:62:c9:4d:ba:d2:d7:34:fa:1e:8d:14:03:
cd:00:db:a1:ae:07:30:b0:e8:0c:c9:ae:4f:83:59:
c5:d7:3f:a0:b6:e3:42:1e:0e:64:3e:d8:5d:96:b1:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:33:BD:EB:5B:FF:A6:E4:7F:1C:F2:62:2A:D0:AD:E9:FD:FF:69:E3
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:18:d9:95:33:32:87:83:76:41:7a:55:d0:61:4e:7c:f3:a4:
78:91:3a:94:ce:9a:59:90:f5:e3:14:58:e2:6c:7c:10:f8:11:
8a:58:79:13:04:f2:3f:d6:77:ad:da:97:ed:33:52:06:09:d2:
20:64:f2:48:11:08:d2:fa:ef:26:38:1c:6f:96:94:f3:a0:b5:
a8:b4:03:01:c1:85:85:b0:e9:18:c0:13:f6:a4:6e:14:0e:29:
7a:98:a8:19:05:5b:f4:1c:4e:09:7b:f7:d5:5a:61:e7:33:cd:
35:2b:43:d4:18:88:7c:09:c8:a5:fa:26:39:81:df:7a:15:e6:
94:cb:73:1c:e4:d5:5a:38:35:2f:86:cd:63:fe:d3:a2:6d:b5:
ad:69:9c:e3:f6:99:33:09:f0:05:75:af:af:24:ca:aa:66:82:
e6:2e:9d:7f:64:1d:4a:a1:94:40:35:8f:2b:58:4b:be:fe:5d:
54:a8:35:7b:8d:ad:79:05:4a:78:e5:14:f4:09:ed:25:8c:09:
62:73:a7:fa:bd:20:c6:ba:e0:12:4e:0c:18:2d:16:7b:2b:57:
a6:ce:5b:ed:df:80:a3:8a:fd:93:b1:b2:bb:82:b3:21:14:86:
b1:6f:17:9f:a4:5a:00:34:f0:f2:e2:ba:5b:bb:e0:f1:75:df:
45:e2:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:55 2025 by rpki-client