Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: ouhWQpOCm/SIIIZSvzd0OzexyiUfr7w1IcvTOemiTHU=
Subject key identifier: EC:5F:A5:B9:0E:11:06:C2:70:0A:5E:1D:1F:E6:81:30:09:C6:24:C1
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 019511D9BFFF1AB041C7869DA995945EC421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 03F9
Signing time: Mon 17 Feb 2025 03:00:37 +0000
Manifest this update: Mon 17 Feb 2025 03:00:37 +0000
Manifest next update: Tue 18 Feb 2025 03:00:37 +0000
Files and hashes: 1: Jsgd2QMS4v8iKbqKY7mpL6rgdrw.roa (hash: zUKbiJyZKBDLVjXxF3gSP5G2WQgNlz6YzfL6risxYY8=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: /C8GVtp0qbxT1ajiApy91APrL5hfdzKu8FATgl/KUAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:bf:ff:1a:b0:41:c7:86:9d:a9:95:94:5e:c4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Feb 17 03:00:37 2025 GMT
Not After : Feb 18 03:00:37 2025 GMT
Subject: CN=ec5fa5b90e1106c2700a5e1d1fe6813009c624c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:95:2d:21:6a:32:e4:64:f0:f5:91:5e:fc:
4c:15:d5:42:44:be:4a:94:8f:1b:28:e7:53:3b:ae:
e8:91:e9:99:3b:1d:0b:d0:7b:f3:0e:ef:83:1d:9e:
d1:77:b0:d8:37:0e:0d:9d:75:2a:b8:dd:91:34:94:
58:5a:5a:1c:17:03:75:56:08:ed:49:ce:e7:6e:6b:
76:5d:cb:ac:ad:5d:48:2e:e1:cf:d0:4f:59:93:81:
e9:d3:3d:b8:ca:07:30:6e:6a:47:b8:5c:39:41:a5:
4c:c0:a0:bb:aa:fa:7d:50:ed:b5:99:01:c8:7c:be:
d0:af:57:2f:5b:1f:94:7d:5d:ee:ac:7c:f7:f2:86:
96:3e:0f:83:71:f4:89:62:53:ba:13:b7:68:9f:02:
c5:53:a4:fd:78:a9:88:48:eb:d5:e3:90:96:10:58:
60:56:77:87:2a:09:a0:a7:89:56:0c:20:90:f5:08:
d1:e0:bb:40:04:4d:5d:64:51:f9:8b:87:78:47:23:
db:e2:5b:4e:07:e7:b8:ba:c5:05:94:b4:07:29:4f:
74:6b:41:4c:99:24:3d:b4:43:a2:b7:2b:5e:84:25:
cb:fc:0d:46:54:a4:a1:dc:72:3c:50:2a:eb:bd:f9:
53:6d:ee:34:00:e7:f6:8a:9c:98:2a:a9:08:d0:46:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5F:A5:B9:0E:11:06:C2:70:0A:5E:1D:1F:E6:81:30:09:C6:24:C1
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:09:3f:26:50:97:cc:92:d0:e1:37:87:3a:a1:e3:e5:59:34:
27:9b:3e:44:d5:00:83:e4:38:dd:2e:24:1a:7d:33:e0:c2:f4:
bd:cb:ba:97:af:6d:cf:65:c4:d7:8b:72:e3:e5:a3:84:1d:18:
7a:b1:7b:3f:6b:a0:76:59:6d:3e:b8:e9:c8:bb:53:45:79:19:
cb:a0:aa:2a:d7:ef:33:62:6e:98:ac:d1:e9:17:5d:3a:a8:1b:
ed:11:d6:6e:56:5d:5a:21:7a:75:c6:aa:dd:14:d0:20:f2:1a:
f9:1e:a4:29:4f:66:5b:ba:26:0f:69:24:8a:d6:11:ea:78:cb:
c6:e5:a0:7b:58:9f:45:b3:4c:82:07:92:2f:f9:48:14:cc:91:
43:de:6c:35:27:2a:76:ac:ed:23:73:8b:7c:dc:4a:f0:e7:c3:
7d:d9:cd:a2:83:5b:5e:8d:f4:43:4b:b7:9e:14:07:81:bd:f6:
5c:16:6e:ae:2e:cd:c1:c5:e4:21:73:cd:65:11:d2:e4:52:8d:
06:4e:5c:9f:72:f8:39:0d:04:1d:79:4d:3b:60:38:75:e3:cc:
43:67:5d:92:ee:44:ab:8e:f6:92:6f:49:55:5d:18:10:77:bd:
03:23:3c:b4:e8:20:ea:28:82:97:6f:a4:cd:dd:b0:c0:71:02:
1d:b8:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:26 2025 by rpki-client