Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: 7R/g5/Z+9WB5T+9aFsvlepOAVBvPr6O5gBijAuuKJqg=
Subject key identifier: 41:EF:D2:B6:AF:6A:2A:AA:69:73:13:D1:05:82:D4:B2:63:1B:2D:CA
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 019512479873EC095C37B60247EE0F393A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 05:00:36 +0000
Manifest this update: Mon 17 Feb 2025 05:00:36 +0000
Manifest next update: Tue 18 Feb 2025 05:00:36 +0000
Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: zdoWNpW0XvA9lKOiAzLRXR8KwZwEnJAFw7PK3f4tDuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:98:73:ec:09:5c:37:b6:02:47:ee:0f:39:3a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Feb 17 05:00:36 2025 GMT
Not After : Feb 18 05:00:36 2025 GMT
Subject: CN=41efd2b6af6a2aaa697313d10582d4b2631b2dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:6c:60:4b:10:c1:c4:92:b1:fa:5e:9f:33:
27:7f:9f:36:37:95:df:2e:fb:9e:88:62:7b:d5:7a:
50:c1:36:f6:ba:db:59:41:7a:d8:09:51:ea:42:8f:
96:1d:2a:87:d0:4c:ae:47:e5:91:e8:8b:ad:f4:9e:
4b:b9:66:44:3f:55:84:0a:e5:f3:8d:86:a0:25:e2:
f8:c9:ec:db:5b:52:ab:e7:10:fe:5c:0c:9f:86:c3:
ab:73:01:ba:38:24:fd:e3:ad:fe:ca:26:f8:32:92:
67:50:77:55:ae:65:2d:28:70:35:ee:69:10:c6:51:
3b:a3:fe:f0:1b:07:14:61:a3:86:41:29:d7:9a:50:
89:6d:31:5c:9c:d7:6d:0d:e5:87:b1:be:12:8d:16:
c0:6b:12:cd:01:0a:b2:01:3a:1b:e3:ac:22:ae:ef:
43:7c:c3:0b:cc:0d:28:57:21:92:0c:85:88:1b:da:
22:fb:4c:75:4c:81:e3:6d:3c:a9:25:3b:91:c2:1f:
b2:19:bf:ca:1c:8a:9b:75:7f:19:cf:64:2e:7c:1c:
07:56:8b:a0:8d:bd:13:d3:a6:44:a4:c4:8a:f5:22:
dc:0a:f0:3b:ee:ee:a4:ec:f2:f0:01:be:0f:6b:86:
fa:8a:71:a4:dd:87:aa:50:b6:d0:bf:4c:52:cd:ad:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EF:D2:B6:AF:6A:2A:AA:69:73:13:D1:05:82:D4:B2:63:1B:2D:CA
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b6:ff:50:84:d1:51:61:7c:8a:9e:f1:4d:63:ce:a9:b1:24:
6b:3f:83:ff:a9:15:e1:f4:b0:e4:5f:7e:48:b5:2f:0e:e1:a0:
e6:8f:b3:cd:a2:91:bc:54:d9:a4:92:b9:d7:4c:cb:c7:0d:0c:
48:56:5a:e5:b9:0b:79:b0:90:68:1e:7c:d0:cd:c8:fe:56:42:
5e:a0:51:f6:db:16:d6:a6:22:15:fd:75:68:ed:15:c0:e7:e5:
8a:68:52:17:85:d2:88:eb:04:85:1e:92:a8:50:77:c5:34:f6:
f7:51:e3:5b:17:42:00:6f:77:83:d3:20:e5:00:45:17:43:ec:
32:8b:70:b8:ce:9c:0d:28:4c:b9:d8:d5:1d:b7:ef:b7:85:d4:
8d:bf:83:75:d4:34:96:8d:ff:26:e6:46:d2:42:91:46:6c:7a:
a5:29:f2:0d:8c:26:c3:b0:b8:2f:28:93:fe:f3:36:30:3a:13:
ce:6c:b0:c8:cc:a2:b2:74:59:4a:69:3f:64:42:5d:42:12:61:
38:5d:03:b5:1a:a1:18:d9:47:e2:66:14:41:93:5f:90:b4:6a:
50:b1:fb:19:47:e9:2e:35:c1:c3:c1:33:51:c6:7e:20:ec:03:
d8:3a:f9:43:e3:92:0e:06:8b:e4:74:17:34:b7:66:25:65:22:
78:b7:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:01 2025 by rpki-client