Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier: 4jNNROvuC9oJBusmiQAkb6TsFYRMUk6+OEku9tCHINQ=
Subject key identifier: 38:44:EC:08:08:56:89:3E:F4:74:D4:26:56:70:B5:D9:7B:F0:F5:8C
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 019512477B338DCCE99AB1531C01CE6CE643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number: 051B
Signing time: Mon 17 Feb 2025 05:00:29 +0000
Manifest this update: Mon 17 Feb 2025 05:00:29 +0000
Manifest next update: Tue 18 Feb 2025 05:00:29 +0000
Files and hashes: 1: CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa (hash: LgF/Ta729VSsHPxynFr9+mRLhRpy51NkOyQe2/JSJU4=)
2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: b7O8EE7NI0FX2yhEnzTgPXq8jxWuhSfn44M3lqGWjEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:7b:33:8d:cc:e9:9a:b1:53:1c:01:ce:6c:e6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: Feb 17 05:00:29 2025 GMT
Not After : Feb 18 05:00:29 2025 GMT
Subject: CN=3844ec080856893ef474d4265670b5d97bf0f58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:1c:bc:22:e1:a8:20:53:ce:9c:3a:4e:c2:
d6:22:f4:8e:11:0a:ea:b1:94:92:3d:c0:da:ea:d2:
38:02:bf:2f:3f:1c:22:9a:bb:b9:7a:5d:b3:a5:16:
b7:80:34:41:5b:f3:e1:a5:1f:35:8d:bc:3b:88:e7:
2a:fb:9f:3f:5f:03:4e:41:48:37:10:69:14:5f:88:
f4:b5:c2:93:08:49:f7:66:aa:fb:9e:5c:f2:1a:30:
eb:9b:1c:f0:39:74:96:73:3b:71:f3:99:b5:7a:b6:
13:01:fe:73:ae:7f:2f:60:5c:15:31:89:48:5f:f0:
21:44:85:21:93:ed:2b:58:92:2b:95:f6:f3:1c:fe:
87:35:73:fc:bf:d2:5a:73:ca:52:85:d5:b8:8f:0d:
1d:06:17:50:31:8b:72:c9:73:55:72:74:b7:47:43:
44:e8:aa:fa:5e:d0:82:c8:ea:96:52:5c:05:89:d0:
78:bb:f7:16:d3:a6:2d:c4:89:8b:76:32:1c:9a:d5:
6c:7f:b8:1f:a9:dd:71:4e:9b:38:22:d4:0d:7e:e5:
56:7b:43:b1:ea:d4:4c:67:af:ea:72:55:81:f1:70:
08:a5:27:c3:ef:9e:7f:fd:a0:01:c8:e8:83:fe:29:
ca:73:b6:64:cc:e3:fb:0b:8b:09:79:96:07:5f:fd:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:44:EC:08:08:56:89:3E:F4:74:D4:26:56:70:B5:D9:7B:F0:F5:8C
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:94:01:d3:ab:e3:1b:34:73:24:5f:dc:dc:d4:8d:fb:f3:56:
fc:fa:2c:48:44:f8:fb:ee:9d:6c:db:66:24:a1:0f:d5:65:08:
ae:d2:f8:a9:c9:78:e1:d3:39:2d:8b:53:81:b8:62:6a:43:ab:
f8:74:35:00:33:41:4c:b0:a3:84:5a:e7:12:57:76:65:25:60:
7f:00:9f:e9:f7:50:aa:5d:a3:b6:74:e0:f7:f6:8e:8c:52:80:
02:9e:55:51:5b:88:bf:55:fc:50:cf:ba:9a:20:25:ee:cc:ec:
d0:5e:74:c3:26:f6:4f:7a:46:c1:ef:47:10:70:59:63:ae:af:
a7:41:d5:9f:94:b8:ad:f9:72:1b:d5:85:5b:2a:15:71:72:b8:
29:90:96:56:a2:70:b2:00:ef:70:f2:9b:30:50:84:49:1a:4f:
20:c4:89:3f:34:2b:40:0f:2c:bc:d7:0b:61:b3:d0:68:8a:99:
b3:44:e1:fe:e6:09:d0:27:03:28:b5:25:cf:5d:b4:17:71:00:
52:be:78:43:de:cb:93:3e:01:16:13:58:2c:f3:44:3c:13:cf:
8a:38:fa:e2:48:6f:1e:c4:ce:c3:0b:74:6f:e2:19:9b:78:d1:
78:62:e6:ff:1a:b2:1f:ef:a3:33:9a:58:38:a1:e6:e6:dd:d6:
cb:31:62:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:16 2025 by rpki-client