Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json)
Hash identifier: x/h5Ex4tq0rk4gSWKoTqefAIqB91ZZrC504iu7iMFWc=
Subject key identifier: A5:9B:0E:EA:BA:1E:53:71:36:5F:EF:8C:82:7B:71:F4:8F:E4:27:3F
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial: 0195127E3C9B53677E3DE3323D0BA32740CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
Manifest number: 10E9
Signing time: Mon 17 Feb 2025 06:00:17 +0000
Manifest this update: Mon 17 Feb 2025 06:00:17 +0000
Manifest next update: Tue 18 Feb 2025 06:00:17 +0000
Files and hashes: 1: uEzNWyvL5-zi2wG6wisIZYvIGW8.roa (hash: 74OlC+KGFIeOMFiETr1Upq5Oacdq7NEmnxm00bM9o0w=)
2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: KglUmA7E96bTFxq5bDCEIkoNSoJeeTa2BGs9Z1eTxNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:3c:9b:53:67:7e:3d:e3:32:3d:0b:a3:27:40:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Validity
Not Before: Feb 17 06:00:17 2025 GMT
Not After : Feb 18 06:00:17 2025 GMT
Subject: CN=a59b0eeaba1e5371365fef8c827b71f48fe4273f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b2:8f:c0:0a:3c:8a:32:4e:c8:16:5e:3e:21:
9f:08:1d:22:31:94:6e:6b:0b:b1:06:0f:4a:a3:27:
a6:0b:3a:12:b7:87:6b:1d:a1:d0:c9:8a:0d:4c:3f:
c8:e1:18:79:68:bc:e3:b1:2c:41:07:b1:30:c4:90:
9c:56:d0:b5:cf:52:19:4a:fe:90:c8:9a:6d:b0:47:
68:bb:31:34:33:cf:2f:c5:0f:65:3f:b7:80:1f:e6:
ff:f8:b6:19:85:48:cb:b5:7f:9e:f6:23:04:dc:c3:
99:62:2f:00:db:04:c0:d6:22:aa:8a:5c:c4:67:43:
ba:e6:dd:f9:97:a0:53:cb:9b:0d:33:66:f5:a2:4a:
98:de:0a:d2:32:f2:06:86:8f:8f:57:2f:8b:fd:f0:
19:75:98:f2:8b:9b:59:42:3d:e8:ca:06:71:38:aa:
84:c8:43:12:bd:41:97:b1:e7:ee:f1:60:58:8f:50:
e6:59:ff:03:9c:8b:63:40:09:d0:24:8c:70:5d:45:
06:fd:c3:1c:41:98:69:75:1b:3e:df:48:99:ff:2d:
29:3c:ea:f0:0e:e8:8c:9b:8e:47:90:b8:ce:9c:36:
06:c9:f0:19:56:8c:7e:70:37:28:fc:de:8b:45:7c:
21:d0:f3:62:30:09:da:41:4b:ac:ff:0e:7c:d7:3d:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:0E:EA:BA:1E:53:71:36:5F:EF:8C:82:7B:71:F4:8F:E4:27:3F
X509v3 Authority Key Identifier:
keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e7:93:ba:24:04:2b:d5:a5:db:00:fe:45:c0:82:64:f3:65:
14:52:ac:46:0b:3c:29:d3:5b:63:d1:67:ef:e8:ae:25:07:8f:
14:6e:6a:9d:80:2b:be:31:3c:53:50:5d:93:4d:8d:59:32:aa:
aa:bf:89:9e:f1:2a:1a:b6:28:2a:0c:16:21:dc:6d:f9:4a:0d:
85:76:ca:a5:e0:07:fe:f2:2d:d1:cd:4d:19:45:c7:fa:ca:b7:
3e:2f:7e:70:3e:51:fa:3c:33:b6:6e:78:70:65:c9:ee:45:6c:
fb:8c:6f:09:77:ef:eb:e5:d9:f6:02:30:34:10:a4:6b:ab:3a:
b2:67:6b:61:5d:54:b5:08:aa:be:1f:ba:3e:53:22:3a:06:c2:
22:e5:f7:21:49:7c:d7:77:49:f2:d6:8d:0b:19:a8:be:49:98:
1e:0e:dc:47:da:58:33:7e:c2:51:8d:78:02:57:d9:74:ac:82:
5b:5f:b8:5d:6a:a3:2f:bf:60:5c:85:a1:d6:97:c7:6c:31:f9:
ca:d9:89:07:dd:a9:de:13:4f:fd:c8:bd:28:be:83:d3:84:e3:
a6:30:ae:5e:a1:38:51:2c:d2:27:87:f1:ef:9d:01:21:b7:0b:
45:f0:ae:b6:d4:e5:57:a3:22:42:98:d9:94:66:7d:4a:14:4f:
ce:78:65:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:47 2025 by rpki-client