Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: IGwhFw6dlJNMm/oC/IIMAguRBsm6M3IHgIqNXGB480U=
Subject key identifier: B9:0B:30:99:68:3F:46:78:F3:27:B8:D0:23:8C:FF:80:E6:17:E2:17
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 019511D97C6D03A7CB9EDD8CF0060D715B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 0DF6
Signing time: Mon 17 Feb 2025 03:00:20 +0000
Manifest this update: Mon 17 Feb 2025 03:00:20 +0000
Manifest next update: Tue 18 Feb 2025 03:00:20 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: zsxVdM6/r6tSeYttZZwOSQ8FDIzJvYQknmEWS6SDHvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:7c:6d:03:a7:cb:9e:dd:8c:f0:06:0d:71:5b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Feb 17 03:00:20 2025 GMT
Not After : Feb 18 03:00:20 2025 GMT
Subject: CN=b90b3099683f4678f327b8d0238cff80e617e217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:14:33:f4:1c:a5:86:27:20:0d:fe:16:1b:
ef:3b:10:d5:03:b4:b7:c7:61:0f:89:76:1c:ac:30:
2f:f3:14:23:12:fe:f5:e2:59:70:62:85:f6:86:4d:
23:94:fe:ec:60:5f:1c:04:d0:d6:5d:28:f9:66:64:
2f:cd:2e:0e:06:29:26:1a:73:a0:6b:ed:b7:42:bf:
5b:fd:5a:ce:ee:b0:2a:d0:5e:d2:f7:7f:77:fb:99:
02:da:7e:49:00:af:2c:2d:ac:55:ce:1e:92:c4:ce:
59:4f:57:c3:6e:19:7c:9d:c7:f5:b4:9f:05:68:0e:
02:aa:65:c8:12:29:7f:28:3d:f7:c2:af:13:e9:60:
9e:8f:09:d7:73:11:ed:37:ac:79:b4:23:38:fb:3e:
b6:8a:68:e7:71:d1:32:de:11:2e:4e:c6:2e:5a:55:
9f:81:0a:a5:0b:f3:f2:a4:e6:ce:49:39:67:11:f6:
0d:d0:17:de:d0:3d:61:65:f7:27:55:2a:00:ef:5c:
ea:00:d3:ad:f3:14:fb:2d:27:8e:52:dc:9d:5f:fd:
64:96:90:a0:60:c1:89:fb:7a:48:97:1c:e6:5b:1e:
67:f1:35:ab:e9:2d:9c:b7:93:b2:c3:4e:57:cb:fc:
ff:ea:44:ba:ef:1a:1f:b3:d8:b4:98:34:5a:7c:ce:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0B:30:99:68:3F:46:78:F3:27:B8:D0:23:8C:FF:80:E6:17:E2:17
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5d:46:ed:cd:6e:2a:7e:10:dc:ba:c9:20:b9:4c:45:d6:9f:
40:e9:a8:50:9c:ac:9e:ad:e4:1c:e5:51:6e:9a:84:69:e5:f4:
c4:d7:a0:cd:23:46:b3:59:89:df:29:88:c2:b1:fb:41:fd:0a:
e0:5f:c1:1b:36:fa:8e:13:67:4a:4b:ff:08:14:54:ec:42:ff:
e2:fb:4d:82:c9:9b:b7:70:f6:87:d0:d5:23:a0:38:af:55:70:
4b:59:8f:64:6e:23:09:24:6b:d8:ba:af:53:2b:94:73:d8:9f:
9a:6f:8d:9b:43:f5:51:24:f8:ed:71:48:16:40:30:09:a7:c7:
76:88:79:80:8e:62:e1:20:72:f7:9d:59:ea:9a:e0:f4:e5:23:
26:2e:b1:ca:0d:70:d6:35:2b:34:5a:b5:4b:b8:95:2e:b5:27:
fa:42:8b:c6:ee:c4:7a:73:ee:5a:fd:f3:5b:be:00:df:56:30:
a4:d2:2f:3b:7a:17:68:0f:f5:cb:65:c7:8c:01:9f:46:9b:46:
58:69:1e:6a:bf:58:13:97:89:96:e4:cd:1f:17:21:cd:70:34:
f1:dc:e3:c7:fb:45:12:98:a1:9d:4c:cd:1a:f8:91:5c:88:de:
6c:ff:e0:5e:bd:98:85:60:97:c0:13:30:33:26:e2:73:e9:c8:
e1:ce:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:32 2025 by rpki-client