Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
File: cyYKr-_i7gcuQGLnvxq42cQghWE.mft (raw, json)
Hash identifier: HhU4z56FwcDVKw6euvcVA3BNnpxBO89h4n2S8VqZBSg=
Subject key identifier: 41:48:DC:30:ED:EA:63:51:5C:0B:4D:83:59:A9:68:A6:C8:D4:1F:08
Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
Certificate issuer: /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Certificate serial: 0194C50844D8670C1F76B0569AB8473F9214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 05:00:40 +0000
Manifest this update: Sun 02 Feb 2025 05:00:40 +0000
Manifest next update: Mon 03 Feb 2025 05:00:40 +0000
Files and hashes: 1: Xr6lOU6Tyn_u4v5GW5vdi-zMXGM.roa (hash: 80FIdGSyhpgpiEyJdmuxntmRKHZK2fr3v8thq23exzs=)
2: cyYKr-_i7gcuQGLnvxq42cQghWE.crl (hash: Jk00+MCgtbf+f2tVxC6zYzS3Xo7uvdREHL7lyP1S8/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:44:d8:67:0c:1f:76:b0:56:9a:b8:47:3f:92:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Validity
Not Before: Feb 2 05:00:40 2025 GMT
Not After : Feb 3 05:00:40 2025 GMT
Subject: CN=4148dc30edea63515c0b4d8359a968a6c8d41f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:92:5e:1f:b7:51:b8:b1:b0:b3:4e:d0:73:
d8:65:3d:ac:64:9f:12:df:9a:3e:fe:68:39:3b:3b:
50:ed:d6:81:cd:28:4e:58:05:40:01:1b:9c:41:5a:
c6:4e:d8:c8:b6:36:83:8e:47:66:fe:7d:e8:6d:1c:
2a:8f:33:c2:4f:99:27:b8:0d:e6:7a:35:07:41:3e:
31:77:4a:14:4f:c2:c9:cb:88:b5:36:61:f0:c0:f8:
89:47:67:ba:ed:05:63:57:cd:2a:75:03:92:ed:42:
f7:89:26:8a:df:99:7a:1d:15:d3:8e:2a:75:74:0f:
96:bc:f2:6a:8d:4a:ca:ff:75:3f:be:06:07:e3:cf:
b6:63:61:5a:d3:de:98:fb:52:48:79:ea:7f:b4:80:
90:e0:a7:0f:a5:81:3e:78:b6:65:2d:85:60:49:2c:
ac:33:79:cc:be:8a:f6:9d:7c:f8:ca:be:3c:02:ba:
9d:c5:fe:db:fd:c1:47:62:2c:6c:6b:22:61:09:46:
12:8c:54:c7:84:50:22:02:cc:59:fe:7f:77:41:8a:
73:7e:53:06:25:36:48:dd:0b:26:3e:1f:f9:ff:f4:
b5:9a:41:95:d8:9b:af:c3:d3:0c:3c:37:31:39:30:
17:ee:f5:90:44:55:03:05:5a:ba:de:46:04:99:63:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:DC:30:ED:EA:63:51:5C:0B:4D:83:59:A9:68:A6:C8:D4:1F:08
X509v3 Authority Key Identifier:
keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:af:6b:63:23:3c:a4:f7:ca:04:11:aa:b8:5a:fb:c9:a0:91:
8c:c7:91:82:2d:41:d7:b8:d5:ff:bc:ab:87:a5:87:78:c3:68:
05:cd:8b:4b:54:53:a8:3f:d7:b8:ee:d7:84:7a:bc:97:ec:f8:
28:9f:e6:c3:87:cb:5b:16:3d:48:38:5a:c4:3c:e4:0e:e9:fd:
67:d0:61:e2:d6:3d:f0:2d:d1:2c:33:1b:87:6b:66:e4:b6:5a:
b6:02:2e:51:95:93:93:00:85:76:db:87:1b:96:a0:fa:6e:fd:
cc:90:ae:56:51:4e:32:1f:81:cd:d3:7c:44:af:e7:c2:be:c6:
1b:d0:82:ac:75:6d:5f:84:5d:4d:f4:5d:2a:bf:9e:42:cd:68:
96:05:dd:87:f0:33:c1:75:ec:70:be:08:0f:6b:18:44:5e:11:
26:ad:bf:fd:9d:21:43:23:4d:ae:84:54:01:04:bf:7a:0c:71:
b7:bf:ac:59:e5:57:2d:a2:01:d0:70:87:a9:90:50:43:dd:7d:
7b:38:6f:1c:9a:5b:37:27:34:9b:fe:7d:1f:26:c7:7f:64:f0:
df:0c:39:f3:5b:8c:6f:ff:e4:d3:6d:50:13:8d:fc:00:8d:2f:
e7:19:c5:b7:03:9b:07:3e:eb:6d:e0:74:4d:71:86:ab:c6:77:
b3:f4:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:54 2025 by rpki-client