Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: Pz5OgL0wxsGsO39yeO+2tEvLKX6Vmqi0fbCcpkxpi9Y=
Subject key identifier: 51:ED:A3:AC:88:89:58:D3:8A:0E:57:69:7D:F7:D1:52:8C:F8:71:D7
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 0194C507CE4497F5904C92AF4935C25C0D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 0921
Signing time: Sun 02 Feb 2025 05:00:10 +0000
Manifest this update: Sun 02 Feb 2025 05:00:10 +0000
Manifest next update: Mon 03 Feb 2025 05:00:10 +0000
Files and hashes: 1: 8adR64UTKfQJyv8Hn8Uu3Mto6Ss.roa (hash: QwMK3mT98zuHytYWjDXlVT7MVpssQnTqv+nHseA43Vg=)
2: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: TCgEbyw2v7aAoxBeMzCw6lPolE6ZSunOFJwG+TbgsDY=)
3: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (hash: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:ce:44:97:f5:90:4c:92:af:49:35:c2:5c:0d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Feb 2 05:00:10 2025 GMT
Not After : Feb 3 05:00:10 2025 GMT
Subject: CN=51eda3ac888958d38a0e57697df7d1528cf871d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:a9:58:d5:8a:36:7c:50:32:18:32:a0:e2:
8e:41:e3:98:2d:d3:13:9a:67:5d:4e:b2:4e:d8:38:
ab:48:65:7d:67:92:73:90:36:e4:7e:18:66:e2:9e:
09:39:78:ba:a8:79:57:1f:5d:39:73:70:e4:13:46:
cc:10:be:6d:8a:88:38:b4:71:a1:3d:d0:fb:d5:48:
12:ff:de:f4:7e:0f:ed:1a:b8:a6:93:2b:ed:33:49:
d5:55:20:a6:d5:82:6d:5e:5f:b2:fe:87:ed:e7:c3:
be:a3:55:bd:25:05:72:f5:2d:ea:26:39:57:ef:3b:
a6:a7:53:37:1f:40:92:c6:cb:2f:d2:7b:1a:0d:52:
25:c8:37:45:5b:ca:98:dc:3e:55:ef:dd:7b:8a:d4:
a1:c7:fa:71:ea:02:2e:d6:92:28:68:df:e7:e9:31:
5f:f7:d9:98:b6:71:08:ed:51:72:ba:33:fa:d2:e1:
bd:6e:57:60:62:21:82:a3:16:05:ed:ed:5f:d6:d0:
3a:85:b7:86:a3:b3:15:11:7f:8f:13:b9:56:27:e7:
ac:db:0f:d0:5f:b8:14:fd:0c:c2:4a:a5:23:e9:45:
f3:1a:aa:c4:5f:0a:fe:d6:50:2c:f9:7c:21:72:8c:
1a:9f:6c:05:5c:c0:a6:86:de:af:36:33:4f:b8:53:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:ED:A3:AC:88:89:58:D3:8A:0E:57:69:7D:F7:D1:52:8C:F8:71:D7
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1c:62:17:96:bd:19:8c:ba:64:45:41:27:33:7b:14:51:0e:
86:c0:2a:df:bc:b3:61:57:87:4e:2c:3a:06:52:55:d9:9f:8c:
40:00:2c:18:9c:d8:49:2f:b2:de:8f:e6:13:b5:64:b4:9c:aa:
cb:4f:8d:a0:93:39:1e:9a:f9:0b:89:0e:0b:d0:58:70:8c:be:
7b:ef:bf:58:6f:9a:f5:08:45:76:28:1e:db:b8:cb:8c:60:5a:
69:b0:c9:e8:88:e6:8c:f5:1d:8a:10:ea:7b:d3:10:a6:9e:ef:
dc:ba:76:3c:c8:70:90:52:10:e0:df:b3:3d:66:63:bb:df:8c:
8f:52:72:ba:65:ba:c0:d8:8d:22:97:6c:ff:d7:4d:8b:b1:e8:
03:51:3f:4a:cb:2f:bc:08:50:5f:24:27:05:c4:d5:bb:b4:39:
61:c2:0c:3a:e5:ef:c0:09:ca:48:75:b1:97:99:a9:a3:2a:e0:
7a:00:d9:3b:87:be:a7:eb:81:8a:ee:3a:02:89:71:ff:c3:00:
8c:4f:26:10:db:58:ac:fb:3a:88:34:09:22:22:02:fe:cb:c4:
90:80:28:56:e1:df:bf:78:c5:3d:4a:ef:5f:e4:53:97:8f:0a:
cd:19:a4:8e:9a:8d:5c:bd:9d:61:4a:b1:3f:20:64:4a:e0:af:
96:25:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:24 2025 by rpki-client