Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: Odjzuy4Q4SB9B78o5CEFNOFj4teWpzoVueSOOdnwds8=
Subject key identifier: B6:1A:FE:A1:F9:5A:D6:4B:F8:04:A4:3E:28:37:56:FE:CF:40:85:63
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 019510FE1D01F234B12D1576EDC3987608CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 0A99
Signing time: Sun 16 Feb 2025 23:00:43 +0000
Manifest this update: Sun 16 Feb 2025 23:00:43 +0000
Manifest next update: Mon 17 Feb 2025 23:00:43 +0000
Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: NBNCpsecRVnb6Xplis+YUEWIpanhKVDFejPoivoR3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:1d:01:f2:34:b1:2d:15:76:ed:c3:98:76:08:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Feb 16 23:00:43 2025 GMT
Not After : Feb 17 23:00:43 2025 GMT
Subject: CN=b61afea1f95ad64bf804a43e283756fecf408563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:a7:26:fd:4c:41:8a:11:9c:99:45:44:81:
f3:09:47:b6:3e:86:42:4d:11:0a:d2:c8:e1:ec:56:
8a:40:b2:31:e5:64:dc:dd:a2:96:90:35:88:76:d9:
15:17:69:10:6a:1c:ed:2d:f2:5d:65:38:25:00:07:
1a:36:ec:2a:c1:e7:ab:d9:71:e9:76:ec:80:f9:ae:
00:35:96:15:b8:59:96:2b:62:41:fb:2e:f8:94:1a:
95:5f:56:fd:99:f4:72:e0:c2:f5:14:1b:38:10:7c:
a1:bb:2c:1b:85:6c:fd:f0:0f:c0:e9:aa:62:f4:c9:
02:94:cf:d1:34:8e:03:62:0d:71:23:c6:31:9b:d0:
85:99:53:73:5f:82:f0:d8:dc:2c:27:f3:76:78:53:
8b:7a:0b:2b:1b:c2:3a:66:8f:2c:b9:b6:c2:7c:f6:
2f:3f:2f:44:4e:3c:40:a9:8f:47:ff:91:70:64:0d:
5e:39:b9:b3:74:d1:62:ff:a9:0c:75:84:60:a0:fd:
27:aa:c3:c1:32:76:56:02:d2:11:8a:21:41:48:b9:
ae:f6:3b:d2:47:7a:ad:67:f7:bd:94:f3:2e:e7:05:
93:75:45:ff:bc:df:5c:88:b2:76:c9:d6:c6:1f:b3:
22:f2:3c:a0:a9:0f:99:1b:90:73:55:4e:b7:3c:e5:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1A:FE:A1:F9:5A:D6:4B:F8:04:A4:3E:28:37:56:FE:CF:40:85:63
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7a:ba:2b:4f:20:66:e6:4a:33:a2:db:ec:4c:48:28:94:a9:
25:6e:49:bc:cd:c3:7a:bd:9a:7f:02:01:93:e1:5a:57:26:ca:
cd:15:a5:bc:7c:7d:02:fc:72:fb:9e:e2:ff:f8:f0:69:2e:24:
33:06:ca:62:4f:f2:79:21:25:06:37:f5:f7:53:e3:51:84:75:
d7:fa:36:fa:40:2e:bb:c1:be:39:45:fe:81:d0:9d:0e:1e:84:
6a:0e:6e:1a:65:18:1d:79:8b:1f:02:1d:d7:49:b3:56:3d:a2:
cb:f1:ac:b5:b7:7a:8a:3d:f5:d9:19:6c:25:61:eb:e5:5c:a5:
e6:57:f1:91:d6:f5:fa:b2:d8:a1:20:84:66:af:31:b4:c9:f8:
ba:63:87:72:94:66:90:73:20:56:8f:96:4d:6a:8f:03:9b:4d:
e9:f3:78:d7:d0:4f:64:53:8a:dd:16:86:d2:2c:eb:d6:20:1c:
71:2c:c4:5b:7c:6c:a8:45:5a:5f:dd:0e:ce:09:c6:40:87:20:
b2:6f:2d:6a:80:46:0f:0e:31:0a:a7:ca:f0:5d:3b:9a:a5:7a:
24:e2:3c:37:0e:d8:c5:0f:3c:e9:69:e7:a0:27:5b:18:90:7b:
ed:01:63:85:20:42:6b:4f:ff:36:91:d2:e5:a9:45:d2:f2:4e:
22:7a:33:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:20 2025 by rpki-client