Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: +wnRjagbAd1F1KQSJQw80AWZfQfW6VQduf6UepK/dDU=
Subject key identifier: 52:52:CF:19:AE:51:E0:F6:16:65:A4:EE:D9:91:E9:24:9F:68:BD:11
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 019511A29173553C42338472D9AE5B8FD11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 08A4
Signing time: Mon 17 Feb 2025 02:00:21 +0000
Manifest this update: Mon 17 Feb 2025 02:00:21 +0000
Manifest next update: Tue 18 Feb 2025 02:00:21 +0000
Files and hashes: 1: sjAjhtjT9idj_VOPKz21hZUiTyM.roa (hash: GIvaCG/17riJHZiERj633+3ciTXhudtU1ZczZq4oF9g=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: P27UAg05rfm82yoqd3PT6h3+ksE8oQFAJMK0YecjKak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:91:73:55:3c:42:33:84:72:d9:ae:5b:8f:d1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Feb 17 02:00:21 2025 GMT
Not After : Feb 18 02:00:21 2025 GMT
Subject: CN=5252cf19ae51e0f61665a4eed991e9249f68bd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:5e:4a:f6:f3:be:c0:04:df:01:18:7d:9c:
fd:10:17:81:05:d4:d3:30:6a:bd:2b:5c:87:8c:b6:
01:0b:a4:e9:4f:65:4c:2b:1f:cc:6f:53:7e:2b:39:
ec:af:36:c6:de:ce:6c:16:d7:0e:41:b9:4c:a8:05:
a7:81:ae:30:fc:9e:ca:e6:67:cc:87:5b:63:11:68:
ea:0a:2e:2b:24:a6:38:55:6b:47:d9:75:01:e7:30:
ca:57:3c:b6:87:8f:c2:2a:f8:84:4e:9a:83:b5:c6:
a0:ab:b3:57:8b:ec:cd:2e:47:2c:5c:5d:79:b2:64:
8e:dc:d0:b5:9f:16:a1:49:77:26:cd:1d:a0:7e:c4:
b8:a0:9f:e7:2a:08:7c:6a:b6:f9:84:a5:f8:36:e8:
d7:18:c1:6c:d6:c5:d2:bd:87:10:91:33:02:1a:73:
63:f3:d1:a3:33:ad:73:18:a6:e7:b7:c8:5c:ef:de:
43:7c:a8:d7:99:5b:8e:36:36:4a:a4:06:8c:98:13:
b6:f3:53:a7:01:7c:ae:c2:00:33:3f:b4:a5:31:51:
1f:53:26:e4:45:8c:c1:10:87:a0:26:9d:76:bb:05:
f3:7b:6c:8b:e6:ec:6a:99:70:06:12:ee:4c:fa:53:
bf:2d:28:9d:16:e7:12:fc:0f:73:3a:f0:79:63:d2:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:52:CF:19:AE:51:E0:F6:16:65:A4:EE:D9:91:E9:24:9F:68:BD:11
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:31:8c:26:25:fb:4f:42:10:e9:c4:6c:80:89:56:75:82:60:
c0:1e:73:c8:92:ce:dc:97:d4:09:a3:06:5d:a5:1a:66:72:15:
4b:9e:b3:44:73:11:f1:2b:68:a6:77:76:e1:a1:6e:72:9d:1a:
b3:7b:00:d6:07:c5:0d:cf:f7:ab:b5:91:7a:0c:cb:d4:91:e1:
fb:f6:4e:66:0f:af:bf:97:11:98:38:6f:e4:49:81:59:f0:0a:
f8:a9:07:5d:97:a6:53:d8:17:58:8b:df:eb:80:79:af:7a:d9:
72:60:32:65:a7:7f:62:60:f4:41:04:3a:09:fc:57:b0:86:e6:
fb:03:1e:05:7f:62:0c:31:8f:18:93:8a:1f:44:cc:ad:5b:28:
89:d8:97:02:00:3d:1c:33:73:6d:ec:42:b0:e2:fc:5d:82:54:
94:53:03:38:e1:75:a4:77:4c:eb:54:f3:2e:7d:9e:e8:97:bb:
b4:51:9b:81:c1:7b:26:5f:44:a4:9b:4f:e0:16:30:58:2d:71:
05:60:77:71:10:38:4a:87:54:e5:95:25:28:86:b1:bb:70:98:
1b:bf:d6:bd:d2:41:d5:1b:45:fe:11:94:aa:bf:21:8d:31:74:
7f:14:da:d4:77:54:5e:48:6c:1c:69:c3:be:50:4d:3f:7b:22:
95:93:6d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:57 2025 by rpki-client