Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
File: ySynGDiuM8zsxfEKtU7D_HG_u4I.mft (raw, json)
Hash identifier: 2mjbZySX3MbucAC9+mMEfj9w04z1CemprDReStMu/ow=
Subject key identifier: C2:14:6E:37:CA:64:15:D0:5D:B1:9E:B9:7D:01:9F:54:C0:63:67:64
Authority key identifier: C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
Certificate issuer: /CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Certificate serial: 019512102525D50D27930BB2FEF26E65B5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
Manifest number: 062E
Signing time: Mon 17 Feb 2025 04:00:02 +0000
Manifest this update: Mon 17 Feb 2025 04:00:02 +0000
Manifest next update: Tue 18 Feb 2025 04:00:02 +0000
Files and hashes: 1: ySynGDiuM8zsxfEKtU7D_HG_u4I.crl (hash: 1ZNWR52X/SdE7gzlR9wkAdtFAkm753fn/Na1qT/wiw8=)
2: zvBXOGhz3yT7vvMi09ydKdR3St4.roa (hash: 74R93MmSYu/Sf7aVGk3wE3AF+gpETbgTfHomBAiI6ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:25:25:d5:0d:27:93:0b:b2:fe:f2:6e:65:b5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92ca71838ae33ccecc5f10ab54ec3fc71bfbb82
Validity
Not Before: Feb 17 04:00:02 2025 GMT
Not After : Feb 18 04:00:02 2025 GMT
Subject: CN=c2146e37ca6415d05db19eb97d019f54c0636764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:3e:ec:6c:fd:48:fc:09:26:7d:45:6e:12:
24:c9:ae:eb:79:71:9c:22:eb:cf:82:6f:79:85:f7:
cc:17:07:ea:d5:b4:7a:ca:bd:8a:21:be:09:36:50:
94:ec:80:2a:c3:21:a7:db:6e:59:3e:c1:18:d7:c7:
76:d0:06:3a:02:b2:58:90:84:4c:d2:19:7c:43:e1:
e6:5c:cb:89:19:30:58:e3:91:c5:cf:9d:23:50:c3:
0b:83:39:7a:e0:9a:e4:36:8c:e9:f2:74:f3:5e:98:
b7:85:ea:a7:59:a1:69:07:27:55:f7:90:2f:e9:e0:
72:6d:8b:53:33:4d:b7:7b:7c:ee:db:ae:83:b1:6f:
e8:3d:84:52:5b:c5:7e:e0:1c:c7:1b:03:8e:a0:3b:
4c:37:3f:c3:81:8d:40:13:c8:66:5b:3a:e1:1a:96:
ec:cb:b3:0a:88:0d:0d:7a:f6:2f:5a:47:12:c3:ee:
ab:23:da:3a:a1:e4:b5:57:7c:b3:8f:a0:d9:1f:3b:
45:50:f6:41:42:09:45:13:94:b8:5f:d0:cc:04:eb:
52:36:e0:0c:43:7c:92:52:1f:1d:67:52:c0:26:0c:
50:c1:b4:bc:17:1c:63:ad:de:20:45:38:f0:35:81:
d5:b0:4b:e6:78:49:36:26:df:2f:75:42:ae:1e:7e:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:14:6E:37:CA:64:15:D0:5D:B1:9E:B9:7D:01:9F:54:C0:63:67:64
X509v3 Authority Key Identifier:
keyid:C9:2C:A7:18:38:AE:33:CC:EC:C5:F1:0A:B5:4E:C3:FC:71:BF:BB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySynGDiuM8zsxfEKtU7D_HG_u4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a46e3a-a8c6-4597-9281-9d24b40f8f72/1/ySynGDiuM8zsxfEKtU7D_HG_u4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f9:f4:0e:78:59:10:5d:a9:ae:7e:b3:3c:38:7e:04:0c:dc:
25:03:98:c1:9e:fa:ba:6d:dc:26:86:d6:fe:77:e9:44:17:ef:
23:f4:67:1b:d5:67:53:fd:ab:fa:ef:bd:b5:02:24:db:a8:03:
9f:9b:6e:69:d8:a1:0a:ed:e4:88:e3:98:d8:b6:71:15:15:74:
b8:9c:6c:87:7b:00:97:1f:7a:0a:f1:61:fe:02:f2:f9:56:c4:
48:71:a5:e9:1c:cb:48:ef:f1:98:b3:9b:f9:15:c0:48:59:63:
f9:21:e6:cd:a1:b8:6c:18:37:b7:a4:94:1c:f1:c1:a6:4a:b7:
d0:a6:97:4a:20:cd:2f:04:48:10:e9:52:86:32:66:6c:05:e6:
3f:4e:33:75:98:c3:1e:db:2d:bc:ba:c8:93:7f:bc:23:06:c7:
52:79:91:89:47:11:12:6b:2e:e1:8b:9e:58:9f:a0:1a:b3:6a:
15:e7:cf:00:7b:5c:03:c0:be:be:c5:9d:7c:ee:d2:24:f4:9e:
b0:a3:c8:f7:87:26:97:46:5e:88:32:0d:63:10:0c:4d:30:e9:
ce:33:74:a5:f0:6f:48:63:3b:72:f9:89:28:21:b3:d4:ab:65:
7b:06:e0:db:94:3c:56:5f:a0:f5:4c:84:51:50:42:49:cb:7f:
2b:76:0c:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSECUl1Q0nkwuy/vJuZbW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MmNhNzE4MzhhZTMzY2NlY2M1ZjEwYWI1NGVjM2ZjNzFi
ZmJiODIwHhcNMjUwMjE3MDQwMDAyWhcNMjUwMjE4MDQwMDAyWjAzMTEwLwYDVQQD
EyhjMjE0NmUzN2NhNjQxNWQwNWRiMTllYjk3ZDAxOWY1NGMwNjM2NzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVI+7Gz9SPwJJn1FbhIkya7reXGc
IuvPgm95hffMFwfq1bR6yr2KIb4JNlCU7IAqwyGn225ZPsEY18d20AY6ArJYkIRM
0hl8Q+HmXMuJGTBY45HFz50jUMMLgzl64JrkNozp8nTzXpi3heqnWaFpBydV95Av
6eBybYtTM023e3zu266DsW/oPYRSW8V+4BzHGwOOoDtMNz/DgY1AE8hmWzrhGpbs
y7MKiA0NevYvWkcSw+6rI9o6oeS1V3yzj6DZHztFUPZBQglFE5S4X9DMBOtSNuAM
Q3ySUh8dZ1LAJgxQwbS8Fxxjrd4gRTjwNYHVsEvmeEk2Jt8vdUKuHn4YJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIUbjfKZBXQXbGeuX0Bn1TAY2dkMB8GA1UdIwQY
MBaAFMkspxg4rjPM7MXxCrVOw/xxv7uCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVN5bkdEaXVNOHpzeGZFS3RVN0RfSEdfdTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNDZlM2EtYThjNi00NTk3LTkyODEt
OWQyNGI0MGY4ZjcyLzEveVN5bkdEaXVNOHpzeGZFS3RVN0RfSEdfdTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hNDZlM2EtYThjNi00NTk3LTkyODEtOWQyNGI0MGY4Zjcy
LzEveVN5bkdEaXVNOHpzeGZFS3RVN0RfSEdfdTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPn0DnhZ
EF2prn6zPDh+BAzcJQOYwZ76um3cJobW/nfpRBfvI/RnG9VnU/2r+u+9tQIk26gD
n5tuadihCu3kiOOY2LZxFRV0uJxsh3sAlx96CvFh/gLy+VbESHGl6RzLSO/xmLOb
+RXASFlj+SHmzaG4bBg3t6SUHPHBpkq30KaXSiDNLwRIEOlShjJmbAXmP04zdZjD
HtstvLrIk3+8IwbHUnmRiUcREmsu4YueWJ+gGrNqFefPAHtcA8C+vsWdfO7SJPSe
sKPI94cml0ZeiDINYxAMTTDpzjN0pfBvSGM7cvmJKCGz1Ktlewbg25Q8Vl+g9UyE
UVBCSct/K3YMZw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:12 2025 by rpki-client