Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
File: 04YKmzZYX7iqBR_Df8xqB3OZDL8.mft (raw, json)
Hash identifier: XfkPggptDkA5I4ZONF5dd9Oy+KBCBKqyhdYU24zms7g=
Subject key identifier: B1:AD:C8:17:C3:A0:73:8A:0D:89:AC:05:55:9F:2F:09:E8:5C:AF:5D
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 01951134EEA8AE8258947CDCFF77450CE683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
Manifest number: 1462
Signing time: Mon 17 Feb 2025 00:00:36 +0000
Manifest this update: Mon 17 Feb 2025 00:00:36 +0000
Manifest next update: Tue 18 Feb 2025 00:00:36 +0000
Files and hashes: 1: 04YKmzZYX7iqBR_Df8xqB3OZDL8.crl (hash: /NWpA7OdyHYcmKQrBAX1sFWJ59nJivSYpSi+F1sHsHk=)
2: 7tcRmUXU9Q3TzSU3E8XUeyrYniI.roa (hash: 3q07zOwK9FpR/xxKetT0w53QAdYnEKsI1+bhtbTPVBE=)
3: XK3m5m9D-x9fvYelJ012WnW2Xog.roa (hash: uj4ER+AdCmGKRZXl0/zG8YdqqGFuaXIIxndencWXdmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:ee:a8:ae:82:58:94:7c:dc:ff:77:45:0c:e6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Feb 17 00:00:36 2025 GMT
Not After : Feb 18 00:00:36 2025 GMT
Subject: CN=b1adc817c3a0738a0d89ac05559f2f09e85caf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:7c:ef:ad:0f:3f:7f:a8:b5:11:09:32:fd:
8e:30:05:99:99:ef:93:ea:66:12:cb:5b:77:65:9c:
f0:71:32:1e:a7:6d:e2:f6:19:51:11:ce:57:0c:99:
a5:3d:01:8e:e3:73:45:db:b8:93:45:c2:ea:a4:c9:
9b:80:49:db:91:a3:93:cf:cd:37:56:b2:6c:af:3a:
98:81:2e:40:16:c7:2b:9f:67:bf:3f:3e:d7:c5:ca:
cd:4c:c9:1f:e8:33:a8:e7:5d:a5:6e:7f:cf:e0:bb:
1b:5a:a7:7e:e6:a1:24:0e:00:02:54:ab:9e:4d:fb:
3e:d4:16:8b:0e:0f:ad:16:9f:7a:27:75:22:21:5a:
93:43:56:57:c0:2a:8f:11:d1:45:eb:1e:9e:bc:f3:
ae:5c:df:62:08:4b:89:49:ac:ca:3e:0f:e0:02:0f:
13:70:e2:3c:21:50:ae:2b:c8:ca:7d:93:b1:a1:76:
82:38:70:c8:df:60:c2:85:fd:5d:6f:bb:4a:56:00:
5e:38:fa:87:18:8c:eb:a9:a3:b1:af:c8:cb:fd:33:
ca:02:49:03:32:16:cc:9e:3f:67:91:df:04:ab:6f:
20:50:43:e9:d2:cd:7c:65:8f:82:24:f2:0e:50:a1:
9b:b4:c9:d8:e7:82:3d:b2:33:b5:88:33:bf:01:ef:
7e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:C8:17:C3:A0:73:8A:0D:89:AC:05:55:9F:2F:09:E8:5C:AF:5D
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:08:51:c9:42:e2:5d:4b:25:9c:bb:4c:b9:e6:b0:3b:59:a8:
92:0d:d3:d4:a4:4e:12:e8:11:31:4e:c6:f7:58:68:c1:f7:71:
4f:73:4b:dc:a8:46:37:33:8a:56:b1:fc:20:78:37:43:52:ac:
c9:10:ec:42:f4:29:82:f3:c8:80:2b:80:fe:dd:37:3b:4a:0f:
d9:29:39:40:56:88:54:59:c5:58:64:62:f9:62:84:67:b4:bf:
e3:85:91:47:0a:0c:76:62:a9:4e:f0:0b:97:7f:d3:3e:1c:58:
86:ec:9d:79:61:cf:5d:e8:38:83:7d:56:62:8d:be:dc:04:3c:
92:2b:51:56:8d:5d:91:e9:eb:23:fe:05:46:e9:c9:ee:49:ec:
4c:e8:f8:b2:f4:b5:6d:01:ba:8a:4c:3a:11:c2:d2:b7:ef:62:
dc:4a:c7:73:22:71:6a:c1:2c:54:6e:ec:69:70:6b:78:07:3f:
cb:4a:10:51:a7:69:de:ae:dd:9e:67:8d:34:ae:0a:4b:98:e2:
3b:09:03:50:67:54:fc:aa:30:78:bd:41:83:a9:39:11:30:0d:
fd:46:c7:fa:c8:47:f3:53:0f:3b:41:e3:09:78:22:30:98:33:
14:5e:ab:80:b5:ff:5a:e9:9d:db:b5:e6:78:84:77:37:66:0a:
bc:9c:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:41 2025 by rpki-client