Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: U0e7eJX6QXqqat4rq/4GxAWuLszpiAx9scvdPUrpHXo=
Subject key identifier: 24:0A:63:92:5B:BB:78:4A:38:9A:46:24:D3:89:F3:1A:9A:7A:D5:B5
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 0194C3875B92B9B45733881F45528A86086F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 0335
Signing time: Sat 01 Feb 2025 22:00:15 +0000
Manifest this update: Sat 01 Feb 2025 22:00:15 +0000
Manifest next update: Sun 02 Feb 2025 22:00:15 +0000
Files and hashes: 1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: m0qln4aw+bJnRPj39yFS5E5mId2/kUbDmAmsKZj6kIk=)
2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=)
3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:5b:92:b9:b4:57:33:88:1f:45:52:8a:86:08:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Feb 1 22:00:15 2025 GMT
Not After : Feb 2 22:00:15 2025 GMT
Subject: CN=240a63925bbb784a389a4624d389f31a9a7ad5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:11:b5:c1:80:9a:a4:e6:80:20:a1:9a:89:
26:22:fd:e1:13:dd:83:24:44:56:22:37:d7:b1:b4:
ce:68:97:0a:ca:02:a5:0f:00:3c:3a:ef:9e:54:67:
da:60:f3:6c:9b:25:24:6f:1d:79:81:91:55:b7:ad:
57:de:a7:06:1d:60:30:13:f1:1c:d9:89:2b:b9:7b:
bf:ca:2d:53:39:21:85:0f:38:1e:65:b2:22:35:19:
6a:b6:54:e3:74:71:1c:2c:4e:fe:5e:1c:f5:1c:bf:
4c:51:81:ad:50:5e:c1:2b:48:b6:d0:b1:21:96:fd:
9f:77:e6:be:e9:ee:31:ad:97:fc:54:6d:10:21:b5:
d5:ba:35:b5:63:fe:6e:13:9e:93:66:a8:82:26:5a:
43:3b:a1:e4:20:f7:e0:7b:68:9b:4b:89:b5:86:1e:
05:f9:08:b6:5a:c0:0f:ff:a4:e9:c2:60:51:3a:ec:
4b:36:23:55:26:83:fe:55:9f:b0:fb:30:b0:27:54:
cf:13:04:69:44:3f:db:64:fe:a4:f2:77:d7:da:0f:
c6:ee:12:26:08:14:16:5a:d5:f0:4f:b3:02:98:95:
b8:0a:cf:54:26:3f:a2:9e:96:9a:ed:e9:45:2f:d7:
80:73:dd:f1:4d:bd:c5:21:ef:eb:a8:b0:2c:03:08:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0A:63:92:5B:BB:78:4A:38:9A:46:24:D3:89:F3:1A:9A:7A:D5:B5
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d1:40:4e:52:cb:0e:a3:d6:5c:23:81:5b:0a:69:9e:24:29:
e5:91:e4:9e:bd:f8:fd:80:39:30:4d:fb:5c:70:36:f1:f8:de:
de:f4:1a:55:a1:b8:00:cd:b4:82:cf:97:53:6f:60:75:7a:8a:
94:21:99:83:c1:33:35:75:c8:4e:1c:0f:c7:fa:a1:10:c2:27:
c0:00:07:e6:97:72:7f:a3:68:56:b0:30:d9:b6:82:65:89:aa:
b7:90:6d:88:20:66:ce:c9:a3:68:0f:98:95:0b:e5:7a:42:0c:
5c:fe:2f:f6:b7:94:b3:09:9b:32:cb:c6:65:c2:a3:6f:6c:71:
a5:32:27:e0:40:8c:40:13:47:7d:a9:c8:e5:46:47:5f:51:4d:
de:1b:0c:d4:c6:7a:f8:fe:42:81:bb:39:db:26:e8:82:32:bd:
50:c3:b5:26:dd:21:be:16:fa:be:60:a6:41:65:b3:0c:92:2c:
88:55:ca:cd:3c:7f:63:5d:0d:ec:d4:6d:24:75:8c:1b:0d:da:
e9:06:cc:43:64:e9:27:01:e0:5d:96:55:05:b5:d8:99:d6:86:
bf:4f:c5:45:03:b2:a6:6c:5b:45:f8:fb:11:64:07:37:06:54:
26:81:68:8f:f0:c9:ea:ee:91:e5:5f:b9:ca:96:8a:4d:84:3c:
08:99:33:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:46 2025 by rpki-client