Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File: y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier: zQ+JwCXoSWNlGoWNf5rU1LeRuuDuN2K3IaoNHVdlDmM=
Subject key identifier: D4:9E:D3:C1:74:49:A1:1C:24:7E:AB:65:D4:62:EE:BF:88:C2:5E:E1
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial: 019511A2F614FE2E5F70B8360E9D9E0F6A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number: 02C4
Signing time: Mon 17 Feb 2025 02:00:47 +0000
Manifest this update: Mon 17 Feb 2025 02:00:47 +0000
Manifest next update: Tue 18 Feb 2025 02:00:47 +0000
Files and hashes: 1: wkYXDy6jmP0Af0Mp2rQ3k6yOAAw.roa (hash: UUIGA4ibmPpEgaOdXWNcs3JAI5RUgnFEIrwSbmNcKfs=)
2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: DFyqikr8DcJsYi+fbE1FmQNXnpZoTAimjUv/MSN9ASA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:f6:14:fe:2e:5f:70:b8:36:0e:9d:9e:0f:6a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Validity
Not Before: Feb 17 02:00:47 2025 GMT
Not After : Feb 18 02:00:47 2025 GMT
Subject: CN=d49ed3c17449a11c247eab65d462eebf88c25ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:85:55:13:19:26:ce:a6:fd:bf:89:3b:e2:
3f:51:f6:8c:f4:c3:b5:3a:d6:d1:5f:67:28:12:42:
53:17:78:0e:32:63:af:ba:c7:5d:75:8f:1b:cb:ed:
cb:d6:db:cb:2a:3d:d9:79:16:2a:8a:ac:9f:ba:90:
ec:3d:75:60:08:d1:e9:f2:99:0c:03:86:c3:c6:40:
85:33:bf:d3:4e:ac:1a:fd:46:2c:7a:7d:53:71:f2:
10:d6:a3:21:c2:0d:c2:b5:60:15:df:77:a0:4e:94:
c9:f5:eb:6f:e9:0e:7d:dc:b3:fd:a3:35:31:85:01:
0d:3d:0d:49:6a:ff:0d:6b:f1:b9:b5:a2:2b:5b:cd:
1a:a4:19:06:0c:6f:68:0a:be:0f:29:26:1e:2e:a7:
49:e0:65:e4:10:27:f2:52:01:76:45:81:d0:90:2f:
ed:27:95:a3:6e:ed:be:47:fc:02:f7:ee:08:f0:ad:
9a:d9:e0:90:61:71:43:a5:ba:05:84:4a:2b:57:59:
da:e8:49:ad:97:dc:f4:79:5e:68:2e:1a:b4:b9:c3:
c7:25:1c:73:21:d2:c3:c9:6b:93:1b:e0:bd:ff:b6:
ba:75:51:06:bc:52:6b:1e:f3:c8:2e:c1:0c:d8:ef:
52:24:0c:f0:00:48:ee:4d:f3:61:b4:08:6c:73:c5:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9E:D3:C1:74:49:A1:1C:24:7E:AB:65:D4:62:EE:BF:88:C2:5E:E1
X509v3 Authority Key Identifier:
keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:95:f8:55:72:56:e0:ea:47:28:f7:e5:e8:a1:1d:18:70:a9:
3f:50:e6:57:b7:58:dd:6e:bb:d3:dd:45:43:09:63:67:25:8c:
04:01:af:fa:ec:e9:4d:c6:72:2c:3e:e7:e5:b5:1f:e9:e4:5e:
ce:46:45:03:1f:91:10:82:c2:17:91:8b:2e:40:ca:ac:85:dc:
f7:5e:51:5a:89:69:ff:67:21:86:a7:0c:9a:cc:f9:ed:76:90:
08:63:72:4c:96:e7:4e:73:0a:84:59:f9:11:85:df:28:e5:07:
99:68:89:bd:cf:ca:95:be:02:40:c6:9d:28:29:f8:a3:0b:35:
52:ef:78:fa:9f:74:69:31:61:0b:94:06:1b:af:22:af:2f:f9:
c3:37:be:5d:91:e3:65:28:e1:c1:39:b8:21:2e:63:42:40:64:
80:03:4e:c1:67:92:7f:c2:48:04:58:c7:bf:ef:26:13:96:72:
9c:d8:e8:b1:94:e7:12:7d:78:68:ef:bb:ad:cd:14:e6:81:2c:
ac:9a:ad:d6:4a:87:11:18:17:bb:ea:46:d9:3a:5e:d6:38:10:
af:dd:d9:7e:09:69:42:63:c6:66:f0:96:1a:69:03:fe:7c:96:
83:71:6f:58:ef:cb:8c:3f:86:c0:cd:5b:b5:b3:10:1c:c1:e7:
00:ae:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:48 2025 by rpki-client