Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
File: p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft (raw, json)
Hash identifier: aSm/AagnMCopDOqfMwzL61JhprG2VOaGX+MaN0M/sMg=
Subject key identifier: E3:98:BB:6F:82:67:55:19:D5:46:C8:FA:39:06:22:B2:E1:AE:76:F2
Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Certificate serial: 019511A301F513BA704FBAE61DA7BE046421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
Manifest number: 054F
Signing time: Mon 17 Feb 2025 02:00:50 +0000
Manifest this update: Mon 17 Feb 2025 02:00:50 +0000
Manifest next update: Tue 18 Feb 2025 02:00:50 +0000
Files and hashes: 1: p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl (hash: VrHZXHrPJIT7AbQBRUrGWf0E1hIFMk4K882XFEAo4Y8=)
2: sJgvME5bJ6yVOF59D9xKTp2vpfs.roa (hash: RFFMtoYHpJBnhJPcD6pM/r00V/xv6R7sQSuEQXzi4Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:01:f5:13:ba:70:4f:ba:e6:1d:a7:be:04:64:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Validity
Not Before: Feb 17 02:00:50 2025 GMT
Not After : Feb 18 02:00:50 2025 GMT
Subject: CN=e398bb6f82675519d546c8fa390622b2e1ae76f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:0a:9f:fe:27:88:c6:52:a8:ea:22:14:f8:
c4:fa:23:52:5e:7e:5d:6b:97:b2:d0:4d:a9:d5:cc:
98:02:28:a4:ef:27:5a:f0:2a:5e:a1:a4:ae:a7:26:
b5:ab:8f:4b:36:79:49:cf:6e:17:e2:d5:7d:4d:1f:
94:4c:d3:6f:62:de:f5:26:b3:55:a4:de:60:69:98:
16:73:71:4a:a6:c5:10:9e:99:59:b4:61:4c:57:c7:
86:4f:74:d2:7e:c0:46:78:8a:cb:e1:7f:06:38:a8:
1d:50:96:08:5a:3a:c6:cd:ad:61:95:60:84:02:37:
6d:0c:cc:f8:e0:7d:af:04:9b:83:30:d6:6a:60:fd:
2c:7b:41:02:1f:1c:85:ff:34:f8:1d:81:61:af:ac:
59:21:2a:fe:81:91:a4:7c:e1:06:4c:97:93:37:99:
3a:62:40:85:7f:8a:80:6e:e6:f1:d0:52:8c:7c:0e:
20:ff:1d:df:0c:48:d1:09:e6:62:09:b3:da:fa:7f:
d3:49:a9:1f:ab:4d:f6:86:b0:ce:f4:35:35:ec:63:
45:fb:e7:69:fa:34:55:11:9e:c7:55:a5:76:0e:7b:
0e:0c:80:c7:0d:72:50:6d:dc:3d:2d:dd:95:f0:69:
14:a1:57:a1:f2:46:16:16:26:d2:90:15:0d:92:d9:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:98:BB:6F:82:67:55:19:D5:46:C8:FA:39:06:22:B2:E1:AE:76:F2
X509v3 Authority Key Identifier:
keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0e:af:f9:8c:7f:f5:ae:50:2f:43:f2:de:d1:d8:66:88:a6:
97:82:ce:97:eb:cb:41:64:23:88:86:cc:a0:e3:59:66:9e:9b:
67:52:e9:63:d1:b0:4a:bd:b7:a3:7d:0c:52:13:1d:21:aa:8d:
33:cf:68:22:8d:ea:16:fd:b6:f6:bb:6a:0e:b9:84:c0:07:cd:
3e:69:f0:05:f2:a3:d8:19:dd:cf:e8:17:ab:df:df:76:46:12:
41:ab:b9:f0:2a:e5:bc:99:14:cd:c4:53:ea:71:a3:17:ec:d0:
17:00:57:6e:58:6b:32:cd:47:86:a1:af:2c:75:8d:47:90:f0:
79:1c:48:a0:de:84:11:bc:f9:ce:c3:07:b0:0d:bc:07:8c:cb:
85:9a:26:c0:7d:fe:1c:76:fc:3f:eb:61:47:f8:2d:f7:cb:58:
dd:7b:e0:c7:6b:47:21:7f:5e:fe:32:34:df:3d:c8:8b:3c:23:
1c:c1:cf:92:91:d1:6b:44:b0:c9:31:63:1b:e7:8b:5e:5e:6c:
d8:60:48:24:49:d4:df:a0:68:41:69:69:ff:52:58:7c:7d:1d:
ee:80:65:00:7e:5b:48:58:ec:87:53:35:e0:82:d2:b8:c0:a7:
b9:78:60:2f:08:56:75:0d:ae:7c:2e:81:f2:c0:61:9d:17:e2:
a6:8a:fa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:54 2025 by rpki-client