Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
File: yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json)
Hash identifier: abWg+AbiDRMgGTJvlZl0WCT8rv+lEGEQoU+KXkMm2xA=
Subject key identifier: 0E:B2:EC:B8:75:0E:A6:71:D5:96:2A:5F:C5:30:91:83:E2:6E:7D:59
Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
Certificate issuer: /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Certificate serial: 0194C4D145295AB22C2ABF97825CBBABB90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
Manifest number: 32
Signing time: Sun 02 Feb 2025 04:00:36 +0000
Manifest this update: Sun 02 Feb 2025 04:00:36 +0000
Manifest next update: Mon 03 Feb 2025 04:00:36 +0000
Files and hashes: 1: llQmZ7ox31md1xrVsOBux0Zjo94.roa (hash: zilK3SjPa7if6qVjP4zB4BrLdTd+JnUFnl8CYZtGV0I=)
2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: XBnP4C3JVRZ25hZ4cKmZ3SAGVMpoHY07acLAjv8FAkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:45:29:5a:b2:2c:2a:bf:97:82:5c:bb:ab:b9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Validity
Not Before: Feb 2 04:00:36 2025 GMT
Not After : Feb 3 04:00:36 2025 GMT
Subject: CN=0eb2ecb8750ea671d5962a5fc5309183e26e7d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:86:ab:39:4f:97:9b:01:af:72:04:e3:27:
48:76:6c:44:d4:58:34:3a:17:5a:bf:37:34:75:e3:
d1:20:cf:e4:01:9d:ed:ea:f7:81:37:68:86:84:b4:
73:ef:26:bb:d4:98:e3:cf:c1:ff:a6:00:4f:9f:85:
9c:d9:48:9d:58:97:28:f5:06:ba:ca:71:ac:fa:72:
3d:8d:18:b6:84:3b:0f:00:a1:1e:e2:41:b1:e7:65:
e9:25:9e:7d:2c:e4:d8:b5:4a:d8:ce:a3:3b:5e:0a:
c4:de:78:6d:c7:e0:8f:7b:d5:11:68:0d:59:6e:80:
47:b9:5f:e7:a9:15:40:92:d4:ca:d8:a9:e1:40:0b:
3c:6f:8b:64:57:ce:68:2b:fc:58:41:6e:7b:9e:3d:
f0:ac:d1:6c:4a:9d:dd:c3:16:98:82:b7:00:4a:1e:
b7:ff:84:d5:c6:b1:d0:8f:cb:8e:12:30:92:0a:0a:
d7:67:ff:19:ab:41:3b:e2:45:9c:c7:57:b7:a9:c4:
ce:e0:8e:77:c9:e2:2e:91:83:21:31:f3:58:aa:f9:
56:c8:de:0c:ef:43:0d:44:a4:65:e3:02:19:4e:f9:
d1:ac:02:d1:4e:f8:ac:8e:3d:c5:8c:9f:27:b4:f8:
73:78:b3:ea:0f:ac:0d:01:a7:b1:40:bd:19:86:0f:
ba:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B2:EC:B8:75:0E:A6:71:D5:96:2A:5F:C5:30:91:83:E2:6E:7D:59
X509v3 Authority Key Identifier:
keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:81:76:4a:34:d5:00:05:7e:21:92:bd:03:26:14:78:f3:5f:
60:ae:f4:a0:b0:c5:1d:55:6d:66:f8:30:af:03:bf:4e:74:d7:
5d:62:d3:4f:6a:39:e0:46:64:ae:98:93:6b:60:4c:5f:ee:29:
09:fc:10:1b:d4:40:e6:52:b8:68:ca:6d:af:8e:f1:bc:5f:e0:
01:0a:1a:88:5a:24:ac:5a:a6:37:58:29:1b:28:18:db:6d:77:
35:9a:68:2f:d7:6e:60:21:be:a8:eb:78:a7:98:4b:2c:e8:7b:
b7:e0:89:ea:87:2c:7c:2e:08:04:df:13:30:8e:48:eb:69:e3:
86:86:f7:8e:bd:0a:cf:c7:dc:5d:5d:67:3e:eb:30:ca:51:04:
e9:11:c3:6e:51:75:8b:55:23:86:eb:7e:40:26:d6:6e:a9:c0:
c9:77:cc:b8:cc:50:6f:39:44:21:28:46:1e:74:d3:5e:54:b4:
77:fc:87:be:aa:77:18:f0:41:bd:26:92:7d:c1:af:81:00:63:
e0:6e:14:35:42:c6:d7:b8:c5:2e:83:85:70:f8:cc:d6:31:87:
db:3c:22:90:af:b7:65:20:32:77:15:6d:1a:96:04:ca:d7:af:
44:a6:08:23:09:83:a3:0f:13:6b:6e:04:3e:a7:75:18:c9:32:
a2:01:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:27 2025 by rpki-client