Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
File: sYfM7EmqX2aqAmSNkbSi7o_3veY.mft (raw, json)
Hash identifier: C2cT8xJaJsj4Ic8nJGlzse712X+/qb5j28SX+RzFQgA=
Subject key identifier: BC:F2:FF:70:3D:68:28:86:59:D7:90:93:12:EE:A5:E4:1F:5B:CB:4C
Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
Certificate issuer: /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Certificate serial: 019578A24C84E4CD029D895E8FB2855F9836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
Manifest number: 01BA
Signing time: Sun 09 Mar 2025 02:00:57 +0000
Manifest this update: Sun 09 Mar 2025 02:00:57 +0000
Manifest next update: Mon 10 Mar 2025 02:00:57 +0000
Files and hashes: 1: OfdMOcUbbc7oEojb1zo08qkIRuQ.roa (hash: IicrU+y2VcBYbd4QyyTDfZZRjrYA59p1rvePkvFgFRg=)
2: sYfM7EmqX2aqAmSNkbSi7o_3veY.crl (hash: A6c9quBings76siML6erm8Z0B8ye6o7gWZITt305OkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:a2:4c:84:e4:cd:02:9d:89:5e:8f:b2:85:5f:98:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Validity
Not Before: Mar 9 02:00:57 2025 GMT
Not After : Mar 10 02:00:57 2025 GMT
Subject: CN=bcf2ff703d68288659d7909312eea5e41f5bcb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:a1:12:5d:51:08:1b:6b:b2:ab:42:5a:08:
9a:de:3a:a3:8e:46:c4:33:e1:39:91:64:c4:e9:7b:
aa:fa:c6:ec:a9:64:fd:b5:8e:1a:b0:cd:06:2f:38:
68:d2:e5:65:a9:fb:53:2a:f1:36:b5:e4:3b:45:f7:
aa:d4:0e:27:28:2c:3b:46:aa:60:28:ca:12:d2:05:
04:dc:de:ef:87:c7:84:35:26:ca:fb:fd:95:3a:7a:
78:99:a6:9d:a2:d4:ec:10:70:45:4c:20:eb:f2:d0:
97:65:d8:ac:3b:af:82:24:78:49:6d:1d:70:90:da:
eb:c6:9f:cc:93:78:47:2d:76:bb:f5:9f:1f:06:15:
ae:7f:ed:13:b1:d3:fd:9c:63:7e:60:ab:2a:4d:71:
e2:83:e7:8d:66:03:09:cc:90:cc:30:4f:41:e7:6d:
6e:f3:8b:01:b3:e4:b3:95:88:98:fe:3d:36:75:4f:
5e:75:77:96:84:61:c4:e6:67:96:0a:de:64:77:ad:
51:e5:fc:cb:09:2b:9e:18:51:fa:0d:93:bc:b4:f9:
55:90:ea:39:43:fe:f6:49:6b:1b:e1:af:07:94:47:
d6:8b:61:62:27:46:3b:20:c3:65:38:cf:7f:e7:d7:
fb:c0:40:39:bc:3a:2a:f6:5d:eb:26:37:15:09:8c:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F2:FF:70:3D:68:28:86:59:D7:90:93:12:EE:A5:E4:1F:5B:CB:4C
X509v3 Authority Key Identifier:
keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:4b:c9:5d:10:74:f6:c4:e7:e5:95:3e:af:8c:62:50:4b:14:
2d:5c:63:5f:43:a7:1c:4a:da:5e:24:e1:a6:70:e4:01:77:f5:
de:57:78:a8:c9:be:ec:86:6f:12:ef:13:6e:a2:40:22:36:1c:
7d:d6:e6:0f:11:a4:3b:b2:d7:5b:03:3d:48:d2:3f:d4:d7:8d:
4e:22:d9:5a:81:50:04:6c:b4:0d:f8:64:db:c1:d9:3d:c8:84:
b6:1c:27:08:5f:d9:96:a9:25:2d:9e:08:b7:95:f8:70:e8:5c:
a0:92:2f:11:5c:62:b5:f3:18:0a:c4:0e:a1:c0:c9:c3:50:91:
ae:51:1b:b4:38:6a:de:e9:dc:07:3e:8f:9a:57:81:5b:4f:97:
53:d6:69:6f:60:c7:f9:a8:7d:43:9a:f3:75:c0:91:cc:7f:bc:
40:3e:dd:b3:ef:d8:e1:50:7a:0f:83:4f:2f:1b:92:ab:59:ac:
d7:ab:df:c8:2c:c1:64:51:1c:4c:0f:c5:fd:dd:66:1f:07:67:
7e:3e:54:47:ef:d4:cc:fc:d7:db:59:6d:a2:5f:45:f2:5a:82:
63:4f:3f:bc:a9:ed:cd:0d:b9:67:47:0a:06:03:16:62:06:b3:
cd:b7:b1:1a:6d:e1:c2:5f:a3:3f:35:96:aa:08:10:54:82:6f:
a7:00:f6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:13:44 2025 by rpki-client