Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
File: yYfQn9P8K3BMZhELsCUu4Maxuko.mft (raw, json)
Hash identifier: QERS4s6NiLMeA4crlAUaJqk0ihcLHv6ZEdWmqz21F9c=
Subject key identifier: AB:92:58:D6:AD:57:C4:96:51:14:6C:35:85:3E:1B:57:A0:C3:16:FE
Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Certificate issuer: /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Certificate serial: 019510FDC69A7EB3CD14526DDA0D066560D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
Manifest number: 0B36
Signing time: Sun 16 Feb 2025 23:00:21 +0000
Manifest this update: Sun 16 Feb 2025 23:00:21 +0000
Manifest next update: Mon 17 Feb 2025 23:00:21 +0000
Files and hashes: 1: jZJbW0BsVFzwOis1-qgAs4YgHTo.roa (hash: Sk/yWlF7AwtnMT+QuY5wwjFpUnvnxIEukFPcttfDcVM=)
2: yYfQn9P8K3BMZhELsCUu4Maxuko.crl (hash: 5S1adPYpPHgkxKivJfLj1rcZA4jFVF1szNhXGqKE0HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:c6:9a:7e:b3:cd:14:52:6d:da:0d:06:65:60:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Validity
Not Before: Feb 16 23:00:21 2025 GMT
Not After : Feb 17 23:00:21 2025 GMT
Subject: CN=ab9258d6ad57c49651146c35853e1b57a0c316fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:9c:ff:2b:84:5f:52:31:08:39:ab:45:4e:
2f:3f:87:e4:c1:c5:1e:62:a1:3e:5d:80:85:13:57:
49:ab:52:03:02:b0:d1:f5:be:f2:60:cb:73:5f:a3:
41:58:a9:be:d0:02:27:eb:6c:dd:59:0a:9a:56:26:
bc:de:44:99:1f:a3:62:9e:7c:d1:16:48:80:45:9f:
92:21:c8:3c:e0:6d:99:c1:a1:57:d6:3f:15:84:12:
b6:ff:92:ed:05:97:1a:9b:96:92:64:9f:54:b5:72:
bd:80:0b:a2:3e:0d:ee:e8:c3:e8:ea:2b:c8:3c:76:
9b:dc:2f:04:a9:4b:7b:98:fe:ec:1f:bc:6f:3b:a5:
40:b3:b8:38:6d:4f:24:7b:6e:98:d1:9e:b5:1f:ea:
b3:69:5d:24:ca:b4:90:7b:70:b5:e0:54:91:dc:0e:
73:42:93:f0:2a:e4:e6:44:09:6d:cc:f9:e3:0b:5f:
47:27:ac:00:80:d3:4b:ec:42:6f:23:e9:ee:60:93:
07:72:f4:06:42:1e:59:b1:44:bd:72:44:e8:b8:f7:
2e:96:7f:07:8c:37:b5:11:6a:04:4e:55:0e:2a:8d:
9a:3e:06:5b:4d:f7:6d:65:f1:4f:98:6a:b5:32:9f:
5e:6d:1f:fb:e3:24:bb:84:c3:c9:75:01:c7:46:62:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:92:58:D6:AD:57:C4:96:51:14:6C:35:85:3E:1B:57:A0:C3:16:FE
X509v3 Authority Key Identifier:
keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4b:b4:c2:a8:61:b8:2f:71:6f:cb:86:af:95:48:d6:7f:4b:
94:b9:04:bf:f3:7d:da:fe:8b:16:47:ee:f5:95:f9:c9:9c:ba:
52:06:07:f6:e4:25:41:d1:93:19:a1:6d:f1:9f:b7:62:12:4e:
95:36:4d:78:9d:32:6c:4b:fa:80:ea:ba:3c:e2:72:a3:d3:15:
0f:cf:2f:4f:fe:41:73:99:14:e5:64:17:c3:04:60:30:06:9e:
63:69:60:f3:f2:fc:b0:23:d2:2f:1f:71:d9:5d:6d:ae:1e:3f:
c0:4f:9a:35:77:33:1d:f7:98:ac:e2:bc:15:c9:f7:93:f6:4a:
4e:91:a2:cd:b4:b0:d8:cb:06:a9:e9:21:18:71:c3:df:a0:cc:
b2:68:2e:f6:8e:9f:48:26:6e:c0:d4:e4:03:a6:77:09:73:0c:
99:b7:6a:fe:b5:2d:95:88:72:46:af:f6:51:00:17:00:d6:d8:
38:87:1c:8b:6c:9e:69:9d:00:8b:ef:62:7c:d4:07:f2:fb:61:
ea:cf:67:0e:ae:11:2f:00:10:f4:81:d5:63:f5:2f:02:6f:3e:
be:10:e6:a4:e6:e8:6a:98:ba:05:88:d2:fa:44:55:3c:d2:2f:
0f:b7:44:43:8d:04:66:b9:d6:3f:15:39:19:a6:11:67:dc:a9:
c2:a3:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:13 2025 by rpki-client