Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: F/LypaPCIZyOh5o5ExmGDqYoY0/wzxjzvol1i3gbQyI=
Subject key identifier: 64:DF:B9:18:2B:89:26:A8:D7:BD:D7:8B:C8:6D:E6:B9:8B:8E:5A:70
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 0194C3BE7CC234500155E48D201FE90595BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 10AF
Signing time: Sat 01 Feb 2025 23:00:28 +0000
Manifest this update: Sat 01 Feb 2025 23:00:28 +0000
Manifest next update: Sun 02 Feb 2025 23:00:28 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: 6uswBKhqLsvKU0A7quGhnviZS8y+UIH4AR1E5R7wwcE=)
2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:7c:c2:34:50:01:55:e4:8d:20:1f:e9:05:95:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Feb 1 23:00:28 2025 GMT
Not After : Feb 2 23:00:28 2025 GMT
Subject: CN=64dfb9182b8926a8d7bdd78bc86de6b98b8e5a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:4e:68:89:ed:61:f1:f9:b1:31:0b:d9:65:
0f:41:8d:23:26:02:46:d5:26:89:e0:da:b9:3c:56:
2d:a1:e1:e2:7e:71:93:68:aa:fd:06:75:90:64:73:
17:f3:97:44:0e:8c:a2:a2:62:42:f8:d3:5a:9c:c5:
86:7f:90:98:c5:b1:7d:48:0b:8a:a1:44:a4:6d:cb:
7c:bc:6d:36:a9:32:12:a4:93:2c:5e:4c:f0:0c:fb:
dc:56:43:5c:d9:12:3c:8f:b7:f1:0d:6b:5e:e1:31:
64:db:5b:0e:39:43:ed:87:94:96:76:72:c9:19:c1:
85:f5:83:81:c0:38:17:11:b6:56:69:c6:19:24:29:
41:66:73:5f:8e:71:23:66:49:99:66:c8:84:59:ea:
e8:44:11:97:76:25:d1:99:dc:48:ce:8a:ce:ac:b9:
cd:dc:e7:2c:f4:70:59:22:8a:b7:a6:e6:b8:61:cc:
5d:4a:56:47:44:4e:b8:fe:7f:5e:93:7b:e2:0d:9f:
50:6f:67:46:4d:38:1b:af:a7:fd:32:7b:3d:d5:40:
ad:7c:a5:b8:cb:ca:5e:2b:bb:a0:4b:b0:e2:b2:6e:
22:87:e1:a8:af:c8:a5:44:9d:ad:be:00:c0:16:7f:
d4:60:49:6a:4f:ee:fe:37:be:7e:25:0e:32:c2:71:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DF:B9:18:2B:89:26:A8:D7:BD:D7:8B:C8:6D:E6:B9:8B:8E:5A:70
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7f:ec:05:d5:4a:5a:fe:17:ff:6b:f9:01:ea:82:14:ac:47:
a2:7e:df:d0:7f:66:76:c1:8d:c5:da:24:57:60:16:20:f0:31:
a1:a9:c7:2f:08:f2:08:1b:b4:25:c6:29:ae:3d:4f:d6:bd:05:
5a:05:1b:e3:3e:8a:35:35:f6:fa:3e:fd:61:fb:d5:13:a0:fe:
c4:28:70:4a:8e:c5:db:ee:80:cd:de:05:62:8c:6e:3a:a5:36:
ab:c4:1c:ed:1d:7b:61:56:73:85:04:c0:2c:fa:01:a5:01:53:
05:1e:59:41:f4:fc:e2:d0:a2:4c:68:30:7f:9b:ca:84:f3:62:
70:2e:e8:f2:ac:fb:6b:90:64:70:85:07:69:9d:7d:d2:b3:b3:
c2:78:b4:01:31:a2:00:f9:43:e9:9e:a3:24:84:88:df:e0:cf:
02:af:f2:43:03:2d:6d:1a:17:33:fa:01:00:e5:24:50:32:c9:
5a:a9:4c:d5:79:e1:58:b6:a4:61:91:e6:30:db:70:f2:e0:bd:
2d:4e:b5:48:7f:da:19:35:b4:26:ae:b6:60:1a:42:35:fd:c5:
a1:ed:aa:c8:6c:b6:02:ef:b3:cb:8b:d8:0d:5c:62:40:9a:b1:
f8:30:93:67:4b:3c:bd:3b:fa:43:68:d4:66:2c:cd:21:ca:d8:
75:bd:4d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:54 2025 by rpki-client