Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: K+ZaJFUNk0534trUaJSOafAHnM/8ldkbm7AY7JLBGQM=
Subject key identifier: 4C:3A:3F:B0:83:ED:62:3D:3C:C5:39:EB:43:72:2D:B5:33:D1:8F:61
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 0195116C1FFAC730660D91C5A5000E0D40C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 01:00:53 +0000
Manifest this update: Mon 17 Feb 2025 01:00:53 +0000
Manifest next update: Tue 18 Feb 2025 01:00:53 +0000
Files and hashes: 1: VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa (hash: MDdqX3nQAwimP61KTWNfGEm7PlFzODAKVqf8oTIIVz0=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: bAHToC55xa25IkFBEJ/fjc34PtXiltzX7zuvC9dY+0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:1f:fa:c7:30:66:0d:91:c5:a5:00:0e:0d:40:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Feb 17 01:00:53 2025 GMT
Not After : Feb 18 01:00:53 2025 GMT
Subject: CN=4c3a3fb083ed623d3cc539eb43722db533d18f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:dc:fb:fd:ea:2c:f0:bb:6c:9d:2c:45:2f:
84:c7:36:b7:e7:32:19:a6:ba:c8:59:cc:63:47:2d:
bd:44:b4:4f:85:7f:c1:17:5b:a9:df:05:a6:ef:3c:
dd:13:d1:eb:c6:f3:96:65:b9:ed:bf:4a:4d:25:48:
67:0c:9f:58:62:46:50:a6:a2:0f:31:ea:09:02:ff:
8d:10:a9:ed:35:e6:19:3a:e8:11:06:fb:87:57:71:
dc:d3:da:78:2c:2e:e9:1f:84:70:6a:d2:af:c4:cc:
68:99:54:af:20:11:d1:7a:d6:d9:44:ff:a7:cf:da:
b5:2c:f2:23:f2:a3:9a:dd:e8:6a:9a:83:f1:13:33:
a0:90:59:ca:59:7b:73:24:19:6c:14:87:1d:b8:7a:
1e:4b:9b:fa:10:6c:2c:52:2e:d0:16:29:1d:e9:f5:
ba:60:30:9e:cc:a0:11:3f:99:c4:6f:96:e2:a9:f0:
d5:4d:f6:6b:92:11:0c:9f:47:36:3d:46:ab:b3:64:
6f:7f:56:13:5e:9b:b3:7d:93:6f:65:91:79:81:a0:
80:a1:92:f5:3a:d9:81:85:3d:57:f7:53:91:03:98:
c6:26:04:28:70:e2:0e:b0:b0:5c:d7:e6:21:68:75:
51:06:f8:6b:e3:d4:df:a7:8f:be:fe:bc:a1:87:05:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3A:3F:B0:83:ED:62:3D:3C:C5:39:EB:43:72:2D:B5:33:D1:8F:61
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3b:92:35:95:ad:9a:51:81:51:13:d3:43:dd:45:e2:62:30:
4c:a9:80:6f:a9:98:87:a6:88:d3:93:61:00:b0:ac:97:97:bc:
78:50:dc:fb:4a:83:3c:ba:9b:29:da:43:1c:b5:00:b4:a7:28:
41:dd:d3:94:d8:62:bc:02:ac:68:6c:e3:b2:2d:55:41:bb:0c:
66:33:3a:49:da:c4:d5:64:a6:e9:fa:2c:d0:37:22:05:87:d8:
e0:b4:8d:64:d3:74:5b:2d:1c:58:8a:58:18:7a:f5:00:0f:5f:
5f:c7:6f:75:91:f2:a9:94:c4:63:16:97:53:00:0b:c8:fc:c0:
83:27:0d:6f:57:bd:56:70:10:96:e4:7d:27:20:11:6b:0e:23:
cd:89:3e:fe:f1:13:14:af:55:dd:9c:22:7f:1c:f1:f4:81:08:
32:62:d5:ed:4a:ce:27:d3:a4:d1:93:24:3d:c3:d6:b2:f5:64:
52:76:9f:8c:c6:c3:ea:59:6b:fc:60:4b:10:0d:08:7f:10:2d:
2e:2d:23:40:74:93:7d:ae:11:31:5f:a1:c4:5f:ba:c2:df:e2:
f3:1d:12:3f:12:8a:51:40:29:07:fc:15:a3:46:46:5d:71:18:
ff:e6:91:1b:09:7c:bb:b6:e7:a3:c7:d7:ba:1f:c1:39:f6:43:
38:d8:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:34 2025 by rpki-client