Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
File: yh79jmMWnY_b-YtxOfzd7a8BbLI.mft (raw, json)
Hash identifier: jTTpUEy4nCwug0xF8mrZQhUp+Q0xS84OwG4ndgIDeR0=
Subject key identifier: C8:46:4D:D7:74:A7:0A:09:35:E7:13:9B:60:59:42:8E:3E:6A:90:A5
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Certificate issuer: /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial: 01951210C8429E40E788E1729267B45EEF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 04:00:44 +0000
Manifest this update: Mon 17 Feb 2025 04:00:44 +0000
Manifest next update: Tue 18 Feb 2025 04:00:44 +0000
Files and hashes: 1: BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa (hash: rqwF60FwzB+zZQwtQI8AX0k6qPeHy+PObyrOxNB5ovY=)
2: yh79jmMWnY_b-YtxOfzd7a8BbLI.crl (hash: ZZ28tRd5O9Nh2w7voLC2l4xizHxjBhh48DBE582WcaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:c8:42:9e:40:e7:88:e1:72:92:67:b4:5e:ef:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Validity
Not Before: Feb 17 04:00:44 2025 GMT
Not After : Feb 18 04:00:44 2025 GMT
Subject: CN=c8464dd774a70a0935e7139b6059428e3e6a90a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:74:0b:5e:8e:75:14:a1:e0:45:1b:ab:47:
84:25:0a:fa:22:2f:5e:db:d3:4b:88:4e:4f:f4:b3:
76:a0:9c:af:86:2a:7a:c0:10:f8:c0:4b:2b:29:1c:
45:9e:94:30:a2:cb:76:37:74:e7:c7:cf:fe:7c:84:
7a:5e:db:2f:96:3f:02:e4:df:6f:28:8c:0d:89:2f:
d2:ec:3d:30:29:21:82:c1:b0:28:60:49:9e:b2:d3:
44:3f:17:a9:ba:57:a1:05:41:d7:28:16:5c:0f:9b:
a7:bf:f8:64:e0:f1:da:37:17:a1:76:43:8b:98:d0:
4d:b2:64:5d:c5:75:77:b2:8c:ac:ec:60:56:44:6d:
3b:f6:5c:a1:64:d7:df:02:eb:2c:7a:26:b3:75:fd:
6b:68:5c:6f:01:d8:88:c0:ef:f9:6e:c1:11:55:2d:
53:5d:6a:9c:72:69:ef:d3:50:05:3e:7a:fd:50:87:
5c:84:85:4c:c7:2a:92:a3:4b:f6:48:d7:0a:80:53:
65:b3:63:76:08:e6:40:04:cf:8d:1a:b4:f4:0b:13:
be:ea:cf:d1:79:e7:c5:7f:40:ac:a1:f2:e9:b7:f7:
0b:34:4f:d9:76:f4:e1:f4:e7:fe:99:97:ec:76:c6:
c3:05:34:0a:c0:8c:b0:a6:cd:37:5e:de:9d:fe:8e:
0a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:46:4D:D7:74:A7:0A:09:35:E7:13:9B:60:59:42:8E:3E:6A:90:A5
X509v3 Authority Key Identifier:
keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3a:55:32:b0:14:e9:1e:d9:18:b0:2f:42:d3:32:70:fc:29:
1b:bd:05:68:f6:b0:eb:4e:4d:b4:a7:29:7c:60:c0:39:18:73:
8b:9b:6b:6b:57:99:e3:ce:67:77:3a:04:59:c6:07:43:aa:0b:
aa:8e:52:ca:ee:74:a7:b0:4a:fd:52:bf:25:13:57:2d:d9:0d:
5a:91:6c:30:6b:24:a6:b5:f3:f0:bf:ba:63:c3:5b:4f:8a:8b:
c3:e1:1b:69:30:7f:57:1b:0b:77:83:8e:f6:4c:0a:f5:70:67:
46:2e:c3:57:66:67:41:5a:9f:d5:37:18:54:f5:56:f6:70:c8:
49:73:34:b3:24:3c:6e:a5:1c:c6:98:0a:f0:64:32:e5:0b:65:
d1:f2:96:58:ca:13:72:da:11:5e:91:1a:cb:4e:47:ab:6f:26:
ad:35:eb:c6:23:83:67:e6:35:0e:56:87:d9:f8:db:31:ed:54:
2b:35:8a:0f:80:2a:07:fa:19:03:db:7a:dd:65:22:2b:69:11:
16:51:22:48:49:3b:70:83:e1:fc:c0:4c:61:a4:a2:63:33:e3:
09:01:fc:0d:dd:69:57:4d:4b:8b:ef:fe:38:cb:67:73:7a:1e:
cb:63:e5:ad:a2:28:66:74:32:14:14:3f:20:64:71:b4:36:49:
3c:16:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:43 2025 by rpki-client