Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier: XTpXaaU+7hv3MnE+Fwmr+lPpktiEhhxs4BL/2vJ4z0w=
Subject key identifier: 67:B9:AF:22:F0:E5:3F:8F:27:1B:76:21:C3:B3:98:8D:29:23:D5:7B
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 019511A31ABA13B9376DD2D55C65B685AACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number: 0BE5
Signing time: Mon 17 Feb 2025 02:00:56 +0000
Manifest this update: Mon 17 Feb 2025 02:00:56 +0000
Manifest next update: Tue 18 Feb 2025 02:00:56 +0000
Files and hashes: 1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: zqCYrAnfv0szXAd7+P5FBnZehDTT9kX9y91RPghBBAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a3:1a:ba:13:b9:37:6d:d2:d5:5c:65:b6:85:aa:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: Feb 17 02:00:56 2025 GMT
Not After : Feb 18 02:00:56 2025 GMT
Subject: CN=67b9af22f0e53f8f271b7621c3b3988d2923d57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:43:54:d3:c8:18:9f:7b:76:55:2d:85:fc:
4d:79:8e:02:a8:0b:5d:e4:84:75:64:e7:45:12:6b:
ab:27:fd:28:4e:78:c5:87:24:66:43:6b:51:a4:25:
9e:7b:70:72:5d:31:58:54:1e:eb:37:dc:3f:4a:93:
9a:11:1d:d0:3a:22:3e:fa:41:33:49:bf:a2:0e:0f:
bd:d1:d8:c9:c2:1d:32:aa:12:c5:b6:76:25:ee:e5:
e2:1b:6d:cc:14:18:05:f9:91:ae:e5:e0:cf:67:62:
98:ab:a7:73:f5:5f:26:e1:1a:dc:d4:2c:63:fb:21:
a7:68:7f:97:ee:2b:c4:2d:fb:93:e9:ce:b0:aa:a9:
63:a8:c6:11:da:90:bb:d0:7f:aa:ea:0f:e0:f1:f1:
32:2b:ca:ac:1d:ce:5b:87:be:82:54:8b:11:35:9d:
e3:d3:17:c0:56:bc:9b:2e:ab:9c:35:ba:b6:3c:64:
95:ba:53:e7:f3:a1:27:c6:50:84:b4:46:47:dc:80:
d7:a2:1f:66:3c:ec:a5:4a:c6:c4:2a:13:00:a1:dc:
95:61:99:3d:86:f7:c7:23:13:0a:13:16:59:3b:52:
8e:78:4f:8c:6c:db:4a:6c:43:f0:77:d4:c3:bf:48:
36:5d:f3:4c:a5:b9:de:9c:27:85:0d:3e:6a:58:4d:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B9:AF:22:F0:E5:3F:8F:27:1B:76:21:C3:B3:98:8D:29:23:D5:7B
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9a:ca:84:20:76:3f:63:3d:ac:12:2f:48:f5:14:3b:4e:66:
9a:1d:3b:9e:3f:b5:fe:51:f7:97:51:2d:18:8f:26:73:7a:ff:
81:51:72:26:8d:1f:e7:dc:d8:a9:ce:99:e4:da:d3:6c:73:df:
ee:3d:3d:a5:07:9c:ae:b3:e5:5c:40:72:40:5d:41:7c:5b:0b:
c6:53:c4:9f:02:de:4e:27:7d:a0:dc:d8:37:67:59:96:63:a9:
2a:d3:d7:d8:79:db:09:5b:1b:7f:1e:dd:5a:b2:14:e4:86:07:
d9:92:af:fd:67:0d:19:d8:c9:5a:94:d0:b4:09:d2:d9:ce:80:
36:76:09:09:b1:71:5f:07:b4:51:71:bb:2b:27:e7:47:84:9f:
5a:0b:5c:08:67:0f:55:fe:81:89:bc:37:06:a1:47:13:ac:8c:
cd:2a:bb:52:f1:91:0b:f4:c5:ad:ff:fb:e2:d8:05:d4:14:a8:
f5:9b:a9:cb:4d:17:f2:9d:be:c9:5b:f3:fe:23:85:0f:ae:58:
1e:98:e9:1f:4c:85:65:53:6e:04:fb:35:3e:10:c9:23:b7:a6:
76:73:d1:c9:85:65:39:67:82:0d:c6:f6:e8:18:83:a9:18:52:
33:3f:84:62:ec:2c:4a:32:be:38:b9:51:94:de:94:48:85:3f:
4b:11:fc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:34 2025 by rpki-client