Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
File: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft (raw, json)
Hash identifier: ECWd6+6V7cbPxgBq5ac2rUXqsJXMhu3d5zvkDIp+98s=
Subject key identifier: FF:D0:8A:16:30:6B:F2:DB:A4:6D:86:31:3B:24:A2:C9:B1:10:AE:90
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Certificate issuer: /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial: 0194C350BDDB9D3E677E0251B95872EC3345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
Manifest number: 142D
Signing time: Sat 01 Feb 2025 21:00:36 +0000
Manifest this update: Sat 01 Feb 2025 21:00:36 +0000
Manifest next update: Sun 02 Feb 2025 21:00:36 +0000
Files and hashes: 1: 3yYGs7gC6Yt8xSj2vfENPhVXFvE.roa (hash: BuidZ1GvGdKg7gwYd2Ptl6PuYSRGUATkT25l43mgSwk=)
2: MTEEbTxLhwcmIFVyPc3_83L2SWM.roa (hash: pPAVTHjE82w53qTWAl4KRukHgVB0WjzGZSXqRTGTWY4=)
3: gIOaHcti7t355LnXTtGCztKWtS0.roa (hash: Cn1RCEjcCDtykL3i8BWxXer7cpYHt86vURgQOr3lUzo=)
4: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl (hash: staONQjw/X3nMqaeCdsCKlLiXK6ZVz2BNfzqwKMFtfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:bd:db:9d:3e:67:7e:02:51:b9:58:72:ec:33:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Validity
Not Before: Feb 1 21:00:36 2025 GMT
Not After : Feb 2 21:00:36 2025 GMT
Subject: CN=ffd08a16306bf2dba46d86313b24a2c9b110ae90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4e:01:27:84:81:d8:e7:cc:b1:2f:83:cb:ce:
f0:cc:ab:39:15:44:f3:91:6b:8a:17:b3:66:84:68:
52:19:a5:5b:b9:7c:30:b4:6d:d3:12:3c:3b:ad:a6:
db:45:96:aa:d1:29:e6:a3:26:82:90:a5:5e:e4:e8:
f8:00:82:8b:40:5a:7e:56:42:2f:59:67:1d:ac:4a:
af:6e:2a:5d:69:d9:7b:58:f7:91:0c:00:52:2d:01:
56:9d:08:da:a2:0c:89:6c:88:5e:51:a8:22:3e:57:
22:d2:91:2c:8c:70:55:ce:36:00:41:6a:74:47:40:
86:9b:72:ec:4e:c3:7b:b5:7f:c7:08:86:7f:cf:9d:
e4:ed:fe:11:e5:9f:c1:20:27:4d:b1:5c:87:8d:f2:
30:af:55:77:bd:9a:f6:52:21:0c:fc:49:2a:2c:10:
88:a5:f4:0d:cb:52:a8:81:d1:1e:0b:61:16:d3:8c:
f2:0b:ea:50:53:41:cf:eb:21:16:c4:0e:61:83:06:
33:5d:05:51:0b:26:51:0f:21:d5:fb:35:e0:76:7a:
3c:20:e3:48:7a:cf:e4:7a:bf:6b:a6:97:58:5d:6b:
65:8f:68:1e:48:42:95:eb:c3:cf:2b:4c:3b:f8:a8:
af:68:a8:16:97:c2:34:92:07:e3:93:a8:e9:07:12:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:8A:16:30:6B:F2:DB:A4:6D:86:31:3B:24:A2:C9:B1:10:AE:90
X509v3 Authority Key Identifier:
keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6b:f1:50:75:40:17:1e:94:99:5a:6b:1a:f7:e4:10:48:b4:
56:9a:7a:fc:db:15:51:69:ec:b6:44:c7:6e:11:9e:ed:33:9e:
46:ce:63:2a:d9:ed:db:2a:70:c6:24:d8:1a:42:80:28:63:e8:
b7:9a:88:91:b2:1f:2a:04:bf:c6:b5:ec:f5:ee:ac:61:31:e6:
e4:d3:d1:cf:b2:2e:f9:38:1f:5b:20:bc:3a:be:6a:af:77:31:
4e:83:13:cd:b0:68:33:64:ae:17:19:3b:cc:fc:88:2f:66:c7:
f8:af:21:75:42:0a:56:6d:9f:93:a6:58:be:2c:4c:cb:bd:2a:
35:be:e3:e8:e2:17:be:e9:e0:f1:8e:91:2b:2c:4e:c4:2f:29:
73:cf:44:9a:05:ff:07:36:bf:32:cc:7a:24:02:4e:75:cb:fc:
e9:62:07:b6:4f:07:62:b0:33:39:1d:ab:c3:e1:47:b3:5d:56:
a6:e2:90:7a:4a:db:de:19:df:d6:22:a8:70:49:71:63:48:f1:
2d:af:16:38:97:60:d5:f2:6f:3b:69:4d:95:3f:cc:e2:67:36:
a0:dc:fa:92:a1:33:8c:99:0e:bb:02:02:8a:ce:1d:44:c2:b9:
83:e4:64:c7:bb:a3:a8:13:3a:48:7a:f9:4f:39:de:87:6c:75:
ec:9c:70:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:46 2025 by rpki-client