Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json)
Hash identifier: zRrdLqVyzs3swprTLLKeU3Blfn4C4XJxBwnJsX62YzM=
Subject key identifier: CC:B6:99:95:5F:07:EE:22:F0:1E:EE:36:EE:24:72:AD:35:E8:6C:11
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 0194C3F5B3E8F0C54761D7A25BAE2A7FC9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
Manifest number: 1434
Signing time: Sun 02 Feb 2025 00:00:46 +0000
Manifest this update: Sun 02 Feb 2025 00:00:46 +0000
Manifest next update: Mon 03 Feb 2025 00:00:46 +0000
Files and hashes: 1: M6Kiusoj-vmcX-l1FvQ-whelTCY.roa (hash: PZnmBtue/4j7K73vwfKaOFXRKwScBqdnVIvN9DoCZyQ=)
2: Mq4KEjTO5-3eXlg2Z24LUeQDfPk.roa (hash: iw4ECgSPXnY1fZL4AMAR4ZlIFQjssIsKBQeuJNCApWM=)
3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: 7Be+E7zFvUW7eWr9fvqdFO9KUwnnHaBEpAT6q0T2XAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:b3:e8:f0:c5:47:61:d7:a2:5b:ae:2a:7f:c9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Feb 2 00:00:46 2025 GMT
Not After : Feb 3 00:00:46 2025 GMT
Subject: CN=ccb699955f07ee22f01eee36ee2472ad35e86c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:bb:72:a3:be:63:88:3c:8c:95:2e:5a:bc:
02:e2:6b:64:3e:df:98:25:f9:3b:08:c1:54:f5:ac:
d2:07:43:c3:8f:db:b6:71:3a:5e:64:67:79:2d:4d:
32:2c:a4:18:7c:db:e9:58:4f:a4:fe:7c:74:e4:19:
d7:6e:4b:81:57:01:8a:b8:a5:eb:37:d8:2c:ff:90:
aa:95:5d:c2:f4:63:b3:73:c6:df:c5:a2:28:b0:bb:
0f:66:bd:84:2f:4c:77:c4:a7:66:73:3c:94:e9:ef:
1b:a6:d1:5f:d3:64:eb:e4:2d:15:69:86:d4:fb:b3:
c8:03:1b:f0:6f:2b:51:9a:59:41:9a:54:45:b5:a5:
01:2a:95:0b:f4:de:9f:bb:80:a3:03:2a:88:43:36:
63:13:32:ef:ea:a8:9a:a7:8d:f0:ff:fd:b5:be:93:
40:42:f4:b8:d7:fb:db:47:7f:c9:f1:e7:48:ae:8f:
0f:30:26:ab:2f:e2:20:e9:2e:8a:1c:85:3b:56:43:
57:15:56:50:f0:5e:e5:64:d4:5a:bf:8e:94:a9:4b:
b4:72:95:73:83:26:8a:30:e0:83:ec:0b:1c:c5:51:
39:65:69:ff:6e:b8:97:7d:52:67:e0:73:5b:67:43:
81:57:46:5f:ed:a0:d8:73:72:f0:6b:de:36:1b:bb:
46:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:99:95:5F:07:EE:22:F0:1E:EE:36:EE:24:72:AD:35:E8:6C:11
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8a:13:c0:b6:f2:93:c5:75:1e:12:0b:e7:76:22:5c:f1:11:
04:28:12:bf:c8:b7:70:74:1d:2e:6b:bd:61:7d:8b:44:42:a8:
92:d3:5b:4f:fe:aa:09:49:3c:bc:4a:4d:4e:6a:16:64:df:37:
b2:ee:83:00:7f:23:8b:12:b7:11:7b:8a:23:35:fb:bd:64:21:
10:b5:b2:62:3d:57:5f:aa:0e:40:ec:a5:a9:8f:e3:e8:1e:b5:
60:62:30:de:66:b9:1a:4f:5e:62:a6:70:c5:79:a9:34:25:ab:
47:23:71:4a:26:c9:43:0b:f3:04:38:19:fb:2b:fb:b7:7d:42:
cd:90:a8:57:33:81:c1:26:27:3f:00:db:c2:61:bd:f5:57:ce:
8b:a9:5c:a9:79:5b:6c:89:23:25:c9:c7:aa:70:eb:99:7b:9a:
f9:14:1e:bb:ed:a9:0d:b3:57:21:d5:6b:c3:05:9c:19:8b:f8:
57:a9:bd:04:74:f2:1d:a9:5a:6b:d6:8c:bd:75:70:38:14:f7:
4a:e2:50:39:6c:08:18:ab:27:02:de:85:75:26:37:6b:79:2d:
ad:2d:34:6c:75:2b:5a:c0:02:f1:46:a0:44:17:44:ca:d5:82:
8b:27:da:a3:52:65:49:8f:e4:ca:ab:2a:d7:dd:b7:f2:46:d9:
6b:a7:28:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:29 2025 by rpki-client