Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
File: yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json)
Hash identifier: pVxuEojz5713gVt2Ux1JwRiNBqo8Z/3trkKhUzikMHE=
Subject key identifier: A6:C3:58:B7:CF:DE:EB:E6:CD:51:E0:7D:DC:87:71:83:61:AC:3C:37
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 0194C5083FD535868A2114656536ECB3DB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 05:00:39 +0000
Manifest this update: Sun 02 Feb 2025 05:00:39 +0000
Manifest next update: Mon 03 Feb 2025 05:00:39 +0000
Files and hashes: 1: CIsZyO4sYlxS6zxs93wo-C0_kOw.roa (hash: ioxln7YvRG7zaRY74N5lo8NJZPbsX7Lowl9YoqVb2QM=)
2: SLGZR5HlGlUvyxXb4J9dlFoOmHA.roa (hash: ItBZnQTRFfvhdaqeW1Co9+W+Nd7SvqU9wrygJFtBPMk=)
3: jX1iMEMhj6_WdXTUBq0GlWaaV20.roa (hash: 8QCHzWOckFZKqXALiiMy/qW6wfPGm8V2LBqLIdFNZH8=)
4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: Fi8b1kmEIVQrDAoAt5ozeE1gbHgFVVKD/6nXNbYYxQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:3f:d5:35:86:8a:21:14:65:65:36:ec:b3:db:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Feb 2 05:00:39 2025 GMT
Not After : Feb 3 05:00:39 2025 GMT
Subject: CN=a6c358b7cfdeebe6cd51e07ddc87718361ac3c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:0d:04:f8:c7:68:4a:f0:e3:d7:dc:e8:a3:
f1:37:3e:7a:85:03:a3:c4:35:ce:d8:22:2e:0e:af:
12:1c:6d:58:cb:fd:1c:9d:7d:08:db:dd:ab:fa:dc:
74:bf:7f:0a:1f:93:85:ae:23:08:0c:13:b8:e7:1e:
f8:be:49:3e:e5:13:0b:d4:3c:56:6e:5d:9d:32:b8:
f8:ce:22:e0:1f:91:67:fb:99:69:86:b8:ef:a5:36:
78:dc:df:ab:1e:03:df:c4:53:09:47:56:72:bb:85:
72:7a:5c:d0:de:0c:42:82:81:88:02:fa:84:98:59:
68:19:d4:83:e0:0c:33:79:78:f3:dd:32:f1:80:3c:
4e:5c:30:4c:33:58:66:29:7b:dc:f0:d0:9d:e9:22:
e5:cf:ef:27:b3:c1:fa:39:fa:b3:c5:16:5d:0b:d4:
f7:24:85:99:3d:78:f2:7b:cf:1d:c6:16:c3:2b:04:
6f:15:aa:b8:a5:05:02:b2:28:e3:19:4a:03:5e:f2:
86:06:cb:dc:b2:c9:3b:d4:d1:3a:10:51:ad:01:cc:
d8:01:11:dd:86:c2:c2:e1:23:32:78:81:b6:ce:56:
f6:a2:65:ad:86:f3:a0:9d:88:6b:dc:a9:9f:a8:e5:
5f:cb:10:c3:fd:da:3b:7a:cf:ab:e8:fc:eb:08:b4:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C3:58:B7:CF:DE:EB:E6:CD:51:E0:7D:DC:87:71:83:61:AC:3C:37
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a2:55:5e:f7:4b:eb:f0:1f:34:ef:79:77:67:55:9f:db:de:
1c:d1:cc:bb:22:83:14:af:ce:76:8e:61:60:d0:5c:4e:97:c7:
f1:af:ce:5d:a4:b2:77:d7:2c:72:47:92:1e:4f:9d:64:25:5e:
db:71:d9:5f:1e:c3:07:37:d4:a6:1f:d3:29:b9:29:97:5e:e4:
c7:1c:a8:27:89:bb:48:f4:56:2f:58:b5:59:9d:bb:96:a7:9f:
1b:c8:09:7e:5b:69:5c:3b:63:50:5d:d7:c1:31:da:f4:c3:c5:
97:8b:0c:fc:bd:2d:90:12:12:aa:98:2d:0c:ca:82:ea:5a:89:
6b:e8:30:62:a6:5d:95:b3:6f:7c:e4:dd:61:be:ef:97:0a:eb:
29:45:8b:e3:75:3c:8f:1f:b0:ea:5b:55:cf:bf:d4:02:34:85:
f4:1f:08:2f:a3:a1:df:4b:a6:64:d1:d4:d2:60:17:1d:bc:b2:
44:d7:08:87:78:ba:b1:5e:f8:48:63:4c:7b:31:4a:91:e3:82:
69:90:8e:0e:b1:db:ed:99:49:07:13:ad:55:f0:3a:62:95:fe:
bc:2b:9f:d3:ad:8d:87:08:8a:6e:18:8d:0d:41:3f:e2:c2:67:
fa:e5:50:6e:b0:e5:ac:9d:a5:c1:83:d4:f8:da:8b:a0:ea:f0:
d9:c1:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:28 2025 by rpki-client