Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier: Br0vBnKdFqPY67YfnWAGtbnkRaXHfJIWFsT5HClfvRM=
Subject key identifier: DF:5C:DB:8D:A9:ED:82:0E:98:9C:62:6A:73:C8:DA:D0:B7:A2:73:A5
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial: 0194C4638C5C7599777D83D335C78BD796DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number: 17
Signing time: Sun 02 Feb 2025 02:00:45 +0000
Manifest this update: Sun 02 Feb 2025 02:00:45 +0000
Manifest next update: Mon 03 Feb 2025 02:00:45 +0000
Files and hashes: 1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: oyW+StTalL9Cf+Ju04C2w2wEuoTgpZ4yFnpidfU/kFU=)
2: nTuk9GI5GZL6GaqD8YI_VNHNwd0.roa (hash: rxSabvmVUQAupTJLHZRfhiqBX7/10LGXXrYJdZo74MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:8c:5c:75:99:77:7d:83:d3:35:c7:8b:d7:96:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
Validity
Not Before: Feb 2 02:00:45 2025 GMT
Not After : Feb 3 02:00:45 2025 GMT
Subject: CN=df5cdb8da9ed820e989c626a73c8dad0b7a273a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:19:07:49:cf:d7:76:e5:5c:da:84:e6:26:
25:d5:59:db:5c:7d:6a:08:ed:c1:57:86:f6:75:4b:
58:48:5f:80:e8:de:28:27:08:7c:96:64:38:92:92:
79:95:3a:52:fc:3d:8a:fc:82:06:96:0a:57:68:32:
57:e7:8b:8a:22:66:2b:a5:7b:a2:00:69:1a:04:a1:
70:6f:40:01:fd:e9:e2:f9:df:a0:7c:88:ef:78:a7:
e5:c3:cd:ad:5a:1e:31:9b:8e:f9:21:c0:47:3c:ce:
c4:a4:43:4c:10:ee:20:31:fa:95:1f:16:65:41:8a:
ac:ce:2f:67:2d:80:a1:d9:96:04:5f:c3:10:d3:a1:
44:b1:04:96:1a:31:99:42:5b:11:0a:6a:57:79:3d:
4b:17:e0:66:80:5e:26:c1:01:50:2f:64:74:09:0f:
30:d9:30:ef:10:6a:f6:3e:8f:43:00:ca:1e:94:22:
3d:e3:ed:34:93:d1:88:49:7d:74:9e:9e:e8:65:27:
fa:f3:dc:47:ba:53:51:eb:ad:c4:e8:44:c3:c2:c0:
49:93:57:af:6e:fb:01:8e:08:1d:7f:3f:6f:8f:2b:
83:6a:45:66:f5:73:11:91:c4:c4:19:54:c9:41:8d:
9f:ee:97:63:35:60:3f:95:2b:c7:11:49:92:8b:a5:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5C:DB:8D:A9:ED:82:0E:98:9C:62:6A:73:C8:DA:D0:B7:A2:73:A5
X509v3 Authority Key Identifier:
keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b6:13:5d:0c:00:94:eb:36:ef:71:04:3b:5b:1e:63:78:25:
9a:ae:cc:db:f3:87:23:4b:8e:1f:6c:3a:2c:e3:1f:ec:16:e9:
20:16:18:20:0c:6a:68:30:ce:02:25:b6:74:56:f4:a9:fc:d7:
94:f2:c8:1e:aa:4f:fd:07:d7:75:47:54:f6:bc:08:f6:f6:7b:
61:25:9b:48:5b:ee:d3:ac:12:30:bc:00:04:55:5b:81:6d:69:
61:87:83:ad:30:27:26:fa:93:7b:41:55:c9:08:bb:88:ad:ee:
82:0b:2a:4a:45:d4:51:e6:49:d0:b8:25:e5:b8:06:3e:00:2a:
6f:8c:a1:51:af:11:8f:8d:30:43:5d:de:b4:3b:c9:f5:e6:c9:
73:0c:fb:8e:45:ff:f3:63:3e:37:38:ad:41:e7:af:34:e4:9f:
ad:03:53:09:c0:a3:46:09:f2:ee:14:34:2f:14:95:5b:91:e5:
71:1e:e9:07:9a:6c:2e:1d:a2:f9:b4:04:c3:16:6d:13:be:30:
92:87:46:7c:71:69:5f:24:f4:47:74:38:d7:8d:9c:86:f5:45:
15:30:9c:85:9d:35:a2:42:c1:34:f4:65:fa:4c:eb:6f:ce:d2:
31:56:35:8b:79:85:a2:de:a6:bc:1f:f5:67:56:02:50:01:38:
39:ad:f5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:53 2025 by rpki-client