Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json)
Hash identifier: qAOa3YgIjK8Amm9jQSi92/1dXN3OoP6GbGZ5siPiMGM=
Subject key identifier: E2:6F:5D:89:55:69:86:EF:39:84:E4:79:32:FB:A1:02:2B:A0:65:A6
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 0194C42CB3DAC247AE0548EEE257403AF4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
Manifest number: 053B
Signing time: Sun 02 Feb 2025 01:00:51 +0000
Manifest this update: Sun 02 Feb 2025 01:00:51 +0000
Manifest next update: Mon 03 Feb 2025 01:00:51 +0000
Files and hashes: 1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=)
2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: e4lddERCeHhdg9hVz0v0hu3MDi9b2U9N7KdQUj/k9/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:b3:da:c2:47:ae:05:48:ee:e2:57:40:3a:f4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Feb 2 01:00:51 2025 GMT
Not After : Feb 3 01:00:51 2025 GMT
Subject: CN=e26f5d89556986ef3984e47932fba1022ba065a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:cb:81:fa:94:82:48:a0:77:d4:89:bc:b4:
83:2b:29:21:aa:01:bc:d9:54:47:e8:88:5a:8b:98:
cc:2c:4e:33:87:9d:af:71:bc:0d:e3:5e:72:b1:56:
23:44:f6:7c:b8:96:19:ae:5b:b2:bc:1e:0a:a7:a2:
12:7f:0d:be:da:35:99:86:c4:ca:6a:8f:0e:7d:39:
12:fa:64:01:54:3c:c1:b5:4b:9b:e1:f6:e7:28:ba:
6c:0b:a2:ff:65:87:ba:21:fc:b5:18:19:80:1a:22:
ae:f9:d4:20:ac:9a:9c:7e:a4:ea:35:14:38:22:a8:
7a:37:f4:0e:2b:f1:43:c2:f6:87:65:29:b7:6a:a1:
95:9b:cd:31:e0:db:4f:20:54:6c:3a:d0:c2:51:0f:
c7:92:c2:3c:a8:e8:cc:fb:01:f7:6a:91:19:3c:8f:
dc:0f:c4:9b:c8:24:e5:9f:27:2a:82:9d:f9:53:df:
14:a6:9d:38:c5:4c:6b:00:3f:74:68:55:94:99:41:
04:b3:95:0d:a0:bf:0f:aa:38:c0:cc:43:0a:f3:05:
8f:d1:74:e1:9a:9c:24:16:92:e0:74:06:0a:94:9b:
3c:93:63:2b:a9:78:a8:92:38:90:d7:5e:6f:59:4a:
f1:2d:42:70:d6:c9:6d:ac:b9:db:fa:86:c0:f6:0f:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6F:5D:89:55:69:86:EF:39:84:E4:79:32:FB:A1:02:2B:A0:65:A6
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2f:08:a0:f3:b0:e0:e4:28:f8:3c:51:9b:9c:bc:fe:8c:9a:
7d:d8:d5:53:07:7e:42:ff:36:57:39:b6:8c:9b:21:90:7b:06:
bc:f1:df:27:21:d9:56:cd:a0:a5:c0:3e:87:15:ce:f4:52:ed:
1e:e1:f5:1a:00:b8:5c:35:9e:1a:13:a6:22:ca:e2:ff:61:b7:
e0:f7:97:b9:64:07:90:26:47:09:3b:27:64:41:db:b0:2e:e1:
b2:57:a8:07:0e:38:8f:c4:e0:98:98:a8:b6:58:8a:00:77:d4:
d3:2c:66:19:9c:8a:bc:92:c2:bc:05:ee:c7:ba:b1:39:19:14:
18:25:a8:70:0f:b3:19:a9:d1:11:b0:c8:00:c1:a1:eb:a1:9a:
ee:ac:26:97:20:04:49:67:82:4f:48:07:bb:52:0d:a2:65:95:
ba:be:5e:19:2b:58:6d:40:d6:74:bf:75:64:f0:20:29:bb:93:
4b:66:07:95:32:a0:33:9f:8d:70:d2:91:d8:78:bd:e2:fb:ee:
6f:45:ce:db:a2:6c:71:df:4e:4c:20:f8:b3:a3:d3:c9:76:51:
8a:39:ca:1d:0e:f9:89:29:2b:8c:5d:66:a3:4e:6d:b1:a4:af:
94:d7:a9:9d:d8:48:39:16:51:55:90:de:70:41:84:b6:21:fb:
a5:8b:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:55 2025 by rpki-client