Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: o3m8Isz16FXTzGmkqBoJNjd6zVjAGiLrnPMK43w0tbQ=
Subject key identifier: C1:1C:57:F5:5C:9E:41:5F:45:21:56:61:50:BC:3B:69:24:0C:DB:E9
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 019511D9750415112687F8CB350F75250FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 058E
Signing time: Mon 17 Feb 2025 03:00:18 +0000
Manifest this update: Mon 17 Feb 2025 03:00:18 +0000
Manifest next update: Tue 18 Feb 2025 03:00:18 +0000
Files and hashes: 1: V9bu_0z7-vke15TqRAacNobtW_w.roa (hash: AcTyYpjmVQYslHpVhDjOI3OS/nx5PavwBhDkpmqXVeI=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: eRHP4VwoOWOqNIWCxQwrurwI37Cy+hGF/eAH6s2lqjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:75:04:15:11:26:87:f8:cb:35:0f:75:25:0f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Feb 17 03:00:18 2025 GMT
Not After : Feb 18 03:00:18 2025 GMT
Subject: CN=c11c57f55c9e415f4521566150bc3b69240cdbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:35:89:1e:9f:8b:d7:c5:a7:ed:66:59:ba:c9:
aa:5c:9d:e5:9b:6a:e2:2c:cd:44:4b:a8:cd:c5:57:
5f:be:50:e6:98:43:bd:d4:c8:84:96:df:2f:f0:73:
31:65:72:d8:2b:b9:d0:e5:e8:08:50:72:53:3d:99:
f7:d4:c5:c2:33:e4:af:eb:8c:b7:5a:49:8a:c5:62:
64:18:cf:fb:3d:f4:c0:e5:f8:40:30:80:31:15:39:
3d:fa:06:6f:40:ac:a7:46:6f:b0:9f:b3:dd:f5:40:
ff:90:a1:66:93:69:d5:38:af:ae:54:20:62:70:5c:
94:27:fc:0c:a6:a0:91:a3:39:e5:cf:8d:17:38:dd:
97:6a:20:c6:08:11:be:a2:7b:63:b2:66:1a:00:3c:
14:a7:62:e3:c2:8f:bf:15:a3:5b:c7:7c:be:f6:c4:
65:33:e2:49:14:8a:45:54:9b:d4:de:ef:35:0e:7a:
87:fa:bd:4f:bd:eb:20:96:d4:e9:eb:02:b4:f3:b4:
58:a9:74:0f:e0:62:78:96:a4:67:20:1b:4a:02:6a:
b7:69:96:df:60:6f:57:05:3b:8d:3a:e6:03:2d:72:
1a:bb:b3:a7:2d:d8:72:4e:b5:6d:69:81:3b:d1:47:
4b:6d:cd:17:ba:c0:ae:8e:ae:df:8c:c2:c6:0b:ad:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1C:57:F5:5C:9E:41:5F:45:21:56:61:50:BC:3B:69:24:0C:DB:E9
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:31:3c:f6:7f:74:bd:61:2e:c7:b3:d6:2a:08:92:18:46:cb:
76:37:ac:11:4a:6d:75:80:a1:6a:40:26:05:7e:60:c2:ea:9e:
9e:2f:86:73:eb:ff:04:8a:3d:40:d3:a2:c9:59:a6:10:98:08:
48:7e:28:90:e6:3c:28:fd:e9:54:24:05:36:e7:85:9e:89:2b:
06:5c:11:cb:b8:d3:88:02:17:a7:b2:32:37:d3:af:9f:ba:74:
c0:65:aa:16:44:52:87:73:0e:c3:ab:03:78:bc:f0:0e:45:b2:
30:c1:90:e9:78:1e:72:71:d8:47:4b:19:b5:ce:c6:ae:e0:aa:
61:26:6d:d2:fc:cc:a4:c5:97:38:01:2e:58:57:91:80:d7:bf:
8f:f1:42:0f:d9:10:91:a8:93:ba:ee:1b:8b:4c:83:97:f3:50:
a2:b1:c6:ed:18:86:95:51:44:5e:e4:1e:64:fb:11:4c:a7:fb:
2d:f3:de:94:f0:7a:f1:77:f2:d8:c9:30:6c:5c:31:6b:de:a8:
88:56:04:90:77:3d:f4:ef:85:10:4c:4a:b6:98:65:dc:66:00:
19:f1:8c:5d:db:2d:81:10:40:72:49:16:8c:41:2d:ec:94:ce:
11:a9:4f:85:70:e8:68:56:a0:3e:73:43:75:f4:92:2d:f5:85:
d1:87:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:51 2025 by rpki-client