Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier: Lfby67UU4WVR0DX8Op+eurK2dAEIP1qP9g13LgFj6Ec=
Subject key identifier: 79:91:35:A8:90:F4:B0:58:5B:51:EA:D2:65:CC:74:57:91:1D:B6:03
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 0194C42C2FD173D49CDDD9DA19CD1AC8539B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 01:00:17 +0000
Manifest this update: Sun 02 Feb 2025 01:00:17 +0000
Manifest next update: Mon 03 Feb 2025 01:00:17 +0000
Files and hashes: 1: fkJKmh5zDN0Kqn8rotQGh7tCyI4.roa (hash: quxYWHt6uVoxRIFcZvvj9cJG53rAivUXlL4xxrWHyXs=)
2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: GbzRfr21GUt4NYwV16evP/GKfN6hNR+JWTfm/q0rpQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:2f:d1:73:d4:9c:dd:d9:da:19:cd:1a:c8:53:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: Feb 2 01:00:17 2025 GMT
Not After : Feb 3 01:00:17 2025 GMT
Subject: CN=799135a890f4b0585b51ead265cc7457911db603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:f3:87:ce:51:41:a1:27:a8:9a:f9:1c:c1:
84:0c:b3:26:ae:48:d1:c8:27:8b:77:a8:ee:fa:d6:
55:2f:a2:ae:5b:75:71:be:bd:67:11:ab:7b:f4:94:
39:ad:b2:f1:78:67:13:3d:a8:94:31:13:60:b7:e6:
5a:ea:23:f8:6b:95:31:a6:57:53:b1:e2:66:8a:77:
7f:89:25:aa:9f:9f:30:be:66:1d:bb:2b:49:31:bf:
11:5f:5c:6d:94:f6:e3:0d:21:d9:13:5c:af:3b:93:
73:d1:25:28:aa:a3:80:79:da:b4:36:a7:ba:a7:10:
0e:59:e6:27:8d:ae:8c:22:dc:37:82:a0:c5:01:d3:
87:ee:bc:84:2e:2b:00:81:aa:b4:4b:82:65:b3:b1:
49:9e:95:f0:54:03:b3:31:25:d2:08:91:f2:33:4b:
f7:23:68:f2:ec:08:df:ab:c1:2c:2d:48:e5:8a:4d:
b1:9f:28:d1:1d:08:f8:3c:f8:34:ca:a1:d4:52:1d:
fb:6e:f0:83:41:de:69:ba:2f:d2:5e:6f:60:77:15:
20:c0:c1:6b:ed:52:d2:42:54:fc:85:fc:e2:f3:3a:
76:dd:8f:0a:48:6a:e6:b0:8a:53:15:4e:f6:4b:b5:
12:5a:86:cd:c3:0c:af:cf:a3:cb:09:4d:9d:aa:00:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:91:35:A8:90:F4:B0:58:5B:51:EA:D2:65:CC:74:57:91:1D:B6:03
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:78:ef:23:aa:be:83:03:65:3e:3d:70:34:4a:e6:50:eb:bb:
72:d2:93:b6:a1:24:f2:ab:05:90:a9:57:54:49:57:46:c0:5d:
69:b7:96:b3:ba:de:4f:c3:ea:bb:5e:b8:5e:9c:cd:49:e3:fa:
26:ff:23:52:d6:c9:20:52:93:59:46:40:24:80:8e:d8:b0:f2:
6a:b6:82:43:77:a8:98:52:d6:ff:43:d4:98:f4:ae:aa:0b:d9:
57:bc:35:f1:14:2e:e4:5b:33:78:6e:65:ff:83:e8:37:5c:3a:
fd:75:a5:54:cd:3f:b5:15:c9:23:82:58:95:9f:b4:c4:e5:4b:
e9:cf:57:ff:9e:00:81:52:26:d5:f8:58:c6:c9:b1:b8:40:d5:
28:14:52:7b:9d:c2:5b:fe:ae:c3:b9:a1:69:aa:3d:3d:d4:a3:
e7:0e:5e:01:25:b2:83:f1:9f:ad:67:c4:fb:a0:1a:97:86:4f:
4a:f1:77:b8:cf:92:2a:35:df:ed:bb:09:ee:e6:48:94:18:cb:
1c:32:6e:f7:9e:0e:7a:b8:f0:f9:9c:52:8c:6f:46:ba:76:06:
7b:e4:20:c2:f6:cd:06:df:89:b7:ae:ec:7b:d1:11:61:5e:cd:
ef:75:6a:e8:af:67:c7:f4:8e:c3:dc:6c:8a:44:d9:b1:02:45:
62:86:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:52 2025 by rpki-client