Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File: yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier: S/joK+MiB0E4cBBQqKXugJ/1NboeRdPW08daRF28jgM=
Subject key identifier: 5E:E0:BB:99:5F:E6:EB:F4:DB:11:93:56:77:8B:02:4B:71:5C:41:A1
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial: 01951134FE820879574CC5969A1973A51B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number: 0A4F
Signing time: Mon 17 Feb 2025 00:00:40 +0000
Manifest this update: Mon 17 Feb 2025 00:00:40 +0000
Manifest next update: Tue 18 Feb 2025 00:00:40 +0000
Files and hashes: 1: IUu38IEhp9FcGXHXO7VwuMNYV6E.roa (hash: 0chzG77l4zUiIxP7svJWJ4YTzi1qnItTODpt8dd9BKQ=)
2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: avxws2v4aD2rovT3TXhreGn7F8YGq5Poecj9+M3s5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:fe:82:08:79:57:4c:c5:96:9a:19:73:a5:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Validity
Not Before: Feb 17 00:00:40 2025 GMT
Not After : Feb 18 00:00:40 2025 GMT
Subject: CN=5ee0bb995fe6ebf4db119356778b024b715c41a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:f3:26:61:97:ea:e4:fd:9c:db:69:e6:00:
56:58:b2:24:f6:8a:a3:1e:46:26:f3:e3:dd:68:a2:
0b:45:07:bd:77:11:2f:c3:3b:23:f1:a8:f3:07:30:
39:87:59:76:4a:4e:1b:b7:8a:e2:ee:59:01:7f:6c:
25:c9:5c:62:b3:43:6a:d5:85:33:b8:4a:0f:9b:8d:
74:6f:04:2d:fd:ff:bd:01:7a:05:a4:61:17:66:6e:
c5:8e:e5:a4:6f:be:e4:ec:90:36:75:15:4d:71:f2:
4e:2e:68:2c:b6:03:e0:b3:1d:7e:da:13:a8:b1:ae:
ef:1a:ae:a5:59:14:5b:87:29:cc:aa:cb:12:c9:bc:
c7:bb:21:16:b2:23:69:7c:29:ca:a9:8b:31:50:f0:
5c:40:f5:4a:22:9c:ba:30:23:7f:14:ff:ef:7a:fc:
6e:8a:9e:65:51:ae:ec:7b:9d:b9:d3:f7:af:a1:79:
fd:77:bd:d4:64:14:82:4f:4b:79:36:f9:d0:6d:00:
86:97:d8:93:2d:1e:b7:6c:bb:bf:53:14:48:4d:43:
3b:f2:6c:55:2b:6f:23:f8:0c:4c:69:4d:5a:16:25:
52:9e:f5:a6:92:9f:32:26:6d:a1:a2:fc:d3:2b:97:
df:57:4d:1f:af:be:82:ff:9e:01:2c:f8:e9:15:98:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E0:BB:99:5F:E6:EB:F4:DB:11:93:56:77:8B:02:4B:71:5C:41:A1
X509v3 Authority Key Identifier:
keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:50:0f:fe:b7:ab:93:64:98:eb:4f:0d:5f:33:26:bc:22:6c:
43:81:42:d8:58:a5:7c:f1:1d:ad:f5:5f:ef:d6:1e:a6:22:59:
d7:16:10:01:02:21:5e:f5:6d:03:d6:7b:8d:59:95:ff:68:24:
9e:dc:c3:fc:15:09:31:4b:de:52:f3:5f:bb:9c:fe:6d:de:ca:
28:eb:c7:fe:29:b9:70:50:2c:22:9b:9b:69:ed:d3:ac:52:fa:
53:e3:1d:97:5e:40:a0:9c:3a:a6:9d:ee:aa:2c:a7:04:a6:bc:
7a:8a:6b:c3:4b:d9:dc:f6:8f:d0:2d:74:b8:32:0c:cf:1d:5e:
11:9a:91:12:5f:c9:44:fb:31:cf:de:e0:30:0e:57:71:be:5d:
97:38:b9:26:8f:d3:c8:24:3a:15:9d:ed:ca:f5:7a:b9:be:3f:
2f:2d:ec:1c:1d:1f:86:1e:d0:66:8d:4c:66:94:fe:ba:ba:37:
36:0a:b7:94:a2:e1:d4:77:14:d9:16:e2:0c:32:70:e0:f4:fc:
e6:c4:52:10:09:9d:e4:dc:b4:db:e8:ff:ed:31:68:2e:56:3b:
71:eb:c4:34:c3:23:a9:ab:e6:fa:f2:ea:b0:a6:ab:51:ac:8a:
43:61:21:2d:f2:c6:78:2f:00:5f:7e:e3:10:18:49:8b:44:ab:
58:a1:2b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:39 2025 by rpki-client