Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
File: ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json)
Hash identifier: T75NN69nIqK0OZ9jI+NeyqXyqkjX1S+AfQY1yh+oP0E=
Subject key identifier: BD:BC:CE:AB:1B:BC:E5:0D:C8:A4:C7:EE:DF:92:48:9D:68:C3:36:5A
Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177
Certificate serial: 0194C499EF2D098C0468CB1CBF40B89D2C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
Manifest number: 09BB
Signing time: Sun 02 Feb 2025 03:00:10 +0000
Manifest this update: Sun 02 Feb 2025 03:00:10 +0000
Manifest next update: Mon 03 Feb 2025 03:00:10 +0000
Files and hashes: 1: T7qjUpuFek2HO0YlRj5-k5NdZXM.roa (hash: mMiY1pDTZBZHtZK+AEVkPiyRFIi1wbnQYRg+XFOmlGk=)
2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: 9Ejpv7Nza3BoFzZsQ37tJXaVTXEcgSiwJh+doVyVl88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:99:ef:2d:09:8c:04:68:cb:1c:bf:40:b8:9d:2c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca942b2706761c2ba753289783edf985e338f177
Validity
Not Before: Feb 2 03:00:10 2025 GMT
Not After : Feb 3 03:00:10 2025 GMT
Subject: CN=bdbcceab1bbce50dc8a4c7eedf92489d68c3365a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:66:a3:6c:cd:fb:28:4d:d0:73:3e:0c:56:
1b:ff:3e:83:53:87:47:10:1e:1a:91:1f:7d:4f:18:
de:16:6d:b7:c0:8a:a4:ff:8e:62:c1:17:36:59:b8:
e4:30:a9:35:31:3a:97:19:1f:e2:9e:31:dd:b8:74:
9f:19:db:5d:a7:7d:c1:07:e5:f4:55:b0:9f:51:00:
0a:fd:4f:c0:2c:af:97:06:a0:20:34:dd:95:c9:eb:
c8:a0:f0:a5:5a:b7:96:8e:66:c8:7c:89:cb:82:53:
a5:72:ca:91:d0:3d:6c:35:15:76:89:c1:aa:08:3e:
bf:f5:21:5d:3a:14:2a:89:96:b3:dd:d3:ad:47:06:
8d:3e:e4:98:d5:e1:a9:30:ab:fd:10:6f:6e:93:ff:
89:5b:94:b5:8b:7a:a5:31:93:44:af:96:b8:8d:cc:
c3:3f:f3:58:0f:da:df:aa:b0:50:f2:5f:b2:b8:ad:
0a:27:11:34:8e:1a:42:af:0f:b3:19:0c:80:36:40:
92:8d:40:90:e5:81:14:64:7d:0a:3a:5f:02:de:a9:
f6:9c:3e:f6:a0:40:70:af:90:11:3b:4e:fb:60:ca:
e7:af:f0:1e:30:1c:6b:76:a2:16:78:7b:da:df:fd:
4d:fd:be:e8:c5:97:82:22:6a:33:e5:6f:1a:7e:ba:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BC:CE:AB:1B:BC:E5:0D:C8:A4:C7:EE:DF:92:48:9D:68:C3:36:5A
X509v3 Authority Key Identifier:
keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:66:e3:3e:89:01:d4:55:e2:62:36:19:14:d7:7e:ff:e5:06:
52:96:c0:02:42:b2:72:e4:6f:7b:dc:8f:9e:8c:ac:c0:75:62:
b1:f5:40:99:0a:4e:94:a0:59:6c:cf:89:09:62:04:42:38:7c:
d1:80:a1:c2:70:c9:9b:2c:d0:a0:21:1e:15:6a:7d:c8:d4:5b:
0a:00:1a:01:de:e8:36:9f:93:70:4c:d9:56:26:6e:97:81:37:
6c:c8:df:cf:27:64:a7:c3:d0:79:8a:80:52:1c:ef:f8:8e:64:
4c:6d:23:95:ed:6d:ce:00:5d:78:d7:e2:b0:09:53:59:5c:c9:
ee:9f:5a:3d:f9:79:b4:c2:75:b0:d8:3e:32:d3:ea:a4:3f:ae:
7a:d4:90:92:be:24:a0:27:81:24:71:24:c0:52:23:1d:0a:36:
00:8a:e4:25:70:e1:ff:d7:34:b7:63:c8:62:7c:12:7f:80:f5:
59:46:86:60:d5:90:b4:20:9a:7c:d9:c4:9d:4e:cb:ad:44:96:
2c:10:48:72:8d:2f:7a:87:a5:af:53:82:df:e6:65:79:59:41:
53:e2:be:79:55:f8:b9:27:ee:b0:05:2a:c6:07:7a:af:23:64:
d6:38:ac:35:bb:94:c2:3b:75:d8:8c:eb:c2:24:a8:7a:15:7e:
9d:fb:d5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:04 2025 by rpki-client