Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: Zv9TKIABjpnkWzrTUhD7MpbuFQY5MWj9KYDQRlNMXQ0=
Subject key identifier: BE:6F:0B:FD:F0:DE:AC:DA:FD:93:AA:30:51:3F:B8:31:9C:B5:06:95
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 019510C7FFD6945060D4704CA2CEF1DB65F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 1459
Signing time: Sun 16 Feb 2025 22:01:37 +0000
Manifest this update: Sun 16 Feb 2025 22:01:37 +0000
Manifest next update: Mon 17 Feb 2025 22:01:37 +0000
Files and hashes: 1: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: kqhCCsWWQYudQ0ttVoOD9FX4peKvh22aVJ/gbyWglN8=)
2: zr3t3IA44QoorxZIsw1MTeuie_g.roa (hash: ompX8t7N2TkHWnLirBbMhvCUBmfybfJcK/n6fwWr0hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:ff:d6:94:50:60:d4:70:4c:a2:ce:f1:db:65:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Feb 16 22:01:37 2025 GMT
Not After : Feb 17 22:01:37 2025 GMT
Subject: CN=be6f0bfdf0deacdafd93aa30513fb8319cb50695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:aa:ac:bb:4b:49:81:a4:88:ed:18:da:54:
da:1e:20:30:03:cb:7a:47:84:a5:7d:65:02:63:85:
78:70:8b:8a:0c:88:c7:93:95:c2:a1:f9:de:3d:6e:
9f:b1:2a:21:fe:11:a6:74:b6:d4:da:4b:fe:2b:12:
b9:1f:10:1a:8d:8b:3f:02:46:92:4c:ef:20:75:96:
77:29:73:ee:0d:45:47:0c:48:70:3d:91:c3:8a:d8:
e7:bc:83:d4:d4:87:7a:a1:70:36:bf:29:2d:ad:fd:
bc:64:18:45:0a:0f:fd:1d:4e:84:80:00:22:18:e1:
f3:07:22:8d:a6:2d:01:45:48:83:73:18:a2:32:96:
6e:cf:01:a9:72:74:f1:30:d7:70:04:d0:df:3e:17:
6d:72:45:0d:eb:48:8f:ee:68:f8:41:09:cc:67:e3:
61:79:fd:dc:a8:ef:7f:fe:2f:6b:60:3b:db:57:a4:
45:79:6c:92:c3:65:9a:ac:ae:53:e4:9d:71:d6:e1:
ab:b8:94:b2:98:fe:42:f0:8c:b7:80:1d:19:28:04:
b0:93:33:e3:ef:59:c1:57:be:91:44:d9:88:8b:9d:
ea:8a:f6:21:6e:45:7c:e2:51:e4:66:54:de:93:cf:
d3:1d:9c:6b:ce:59:4b:b8:5e:98:06:a0:35:20:cb:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6F:0B:FD:F0:DE:AC:DA:FD:93:AA:30:51:3F:B8:31:9C:B5:06:95
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f0:27:f7:bb:86:72:29:b5:14:e5:72:db:fc:93:cd:a2:3b:
f9:3c:bc:23:5e:a4:ef:2d:f0:4e:70:8b:f6:99:53:0b:08:78:
46:6b:b6:81:fc:bc:b4:27:af:21:9a:13:f0:d9:c2:53:33:ea:
6c:55:50:dd:04:c7:48:33:c5:dc:17:5c:ae:e9:6f:ff:b6:d7:
68:b2:93:ec:b5:26:1b:e3:46:ee:d8:28:05:d3:9a:dc:60:1b:
36:1a:d7:48:5d:f0:0a:b8:75:55:4c:67:aa:45:37:00:8c:59:
5b:7f:80:76:66:ff:1b:21:37:0b:c1:1c:1b:cb:45:8b:10:60:
d9:0b:9b:19:2c:ae:59:b1:7a:bc:0c:dc:a5:df:32:ea:d5:aa:
02:6b:cf:8b:75:55:08:a7:98:6a:29:47:42:80:f0:2e:44:97:
76:d0:18:ca:fb:57:0a:55:8f:29:a4:1f:08:31:49:72:da:6f:
c8:cf:b5:ee:97:60:ce:84:ab:0e:99:36:95:c4:2f:93:bc:ec:
f9:2f:69:c9:7c:95:35:ac:2b:e5:8b:cf:58:ff:2d:3d:dd:b6:
f9:1e:7f:20:3e:c8:5d:9b:d5:c5:5f:9f:62:01:b9:25:34:ee:
00:82:fe:d2:b2:da:f5:d3:cb:c4:55:a2:73:8a:dc:7b:91:50:
4b:92:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:37 2025 by rpki-client