Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: UExDOy1v5Py1oSMg/TOrc6Sbwyk71SxwpJrdwLUtpK4=
Subject key identifier: 51:7B:12:82:AB:61:90:85:34:B5:4E:C3:A2:11:BD:0D:9A:5C:4A:4C
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 019510C69FC58BA64E4CEA359CABAFA0B601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 102D
Signing time: Sun 16 Feb 2025 22:00:07 +0000
Manifest this update: Sun 16 Feb 2025 22:00:07 +0000
Manifest next update: Mon 17 Feb 2025 22:00:07 +0000
Files and hashes: 1: bycUBAAoDdbd3Ywhozb1CxrNJmI.roa (hash: gkAbagnCg3V8VsJYqOkif+2HaGxRFUxkzvPVmQ5dGYs=)
2: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: 0vqA6m8iZ8aDl2mwuWUql7NyC/POJ3Ez6XpIHpe9Pps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:9f:c5:8b:a6:4e:4c:ea:35:9c:ab:af:a0:b6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Feb 16 22:00:07 2025 GMT
Not After : Feb 17 22:00:07 2025 GMT
Subject: CN=517b1282ab61908534b54ec3a211bd0d9a5c4a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9d:e0:cf:d8:66:d2:d6:ab:aa:ec:b2:44:14:
11:c1:ef:a5:7f:93:b7:36:4f:d6:94:27:98:cb:2e:
81:f1:24:0b:6a:76:9b:f7:29:9a:c4:ba:2a:c6:a2:
0a:92:b6:4c:ee:5b:5e:bb:05:ce:d8:14:07:98:ec:
da:6f:55:20:dc:1e:3a:c1:31:34:9c:a5:90:c7:1d:
b0:51:71:93:69:80:77:4c:df:fa:6a:99:31:ef:e5:
8c:fd:3a:27:c8:ca:3f:ba:05:64:cb:60:12:81:9f:
6c:b4:ee:8e:f6:7a:7b:5d:ee:d7:f8:6a:88:f3:54:
5f:1f:22:14:ac:7e:80:2c:e2:f4:41:ea:c9:d7:0c:
a9:8b:ef:ae:37:a6:47:67:f1:e9:de:32:3a:fb:ce:
91:a1:82:a5:74:74:31:ca:88:54:ca:f3:36:db:86:
4c:e0:19:cc:e8:ce:cf:5b:2a:05:09:97:fd:c3:bb:
bc:12:aa:2e:d3:af:e9:57:f4:b6:34:51:29:0b:4c:
aa:24:2e:07:a8:4c:62:3d:9b:9f:01:82:cd:37:d5:
be:a0:92:8c:23:c5:bf:98:f8:be:7f:8c:8f:56:8d:
82:a8:7e:e0:13:55:a2:3a:d1:78:ab:1d:c3:8a:96:
9e:05:e2:88:cc:cc:d7:b3:d2:80:96:35:02:48:31:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7B:12:82:AB:61:90:85:34:B5:4E:C3:A2:11:BD:0D:9A:5C:4A:4C
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f4:b0:c6:b5:40:71:94:7e:d1:0e:cf:64:b5:88:4f:53:f6:
33:8f:c9:55:43:a9:03:bb:45:6b:51:03:60:06:45:09:36:a6:
03:e3:8b:ab:77:f5:fb:16:44:21:fe:89:51:d9:1c:62:5b:a9:
d3:2e:b2:8e:66:1c:a7:05:00:2f:41:30:2f:0a:65:5b:a0:d5:
3a:03:aa:c7:8a:0d:c3:c5:1a:c5:3f:a1:37:ef:ae:12:eb:e2:
f4:a9:67:3a:0f:c1:03:c3:f6:dd:83:db:61:12:1d:a0:ad:63:
15:c9:2f:d1:a2:41:5d:8c:cc:68:b0:cd:1f:83:3c:6b:5f:c4:
2a:0c:d9:0a:c0:36:3c:b1:4d:5e:ae:bd:8f:55:e8:37:00:24:
ad:5d:c7:0d:cd:fe:0d:82:e4:c1:12:5d:a3:57:3e:d0:32:2b:
6e:98:cd:ea:94:d7:8f:08:12:98:df:1a:aa:93:d3:49:80:46:
ad:98:3b:28:72:ab:6d:8d:fa:11:1e:d8:99:26:f0:39:3c:11:
04:b1:32:99:3c:6f:99:00:eb:0c:92:86:a6:e5:bc:80:53:09:
9b:76:33:c5:bd:bd:79:4f:18:63:f9:07:b4:09:24:64:c6:47:
2e:2d:91:37:62:3e:05:fe:a3:5c:21:ad:3b:98:c5:8e:1e:d2:
64:a5:e8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:54 2025 by rpki-client