Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File: yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier: 4MkTul9gPqTETzCooCeNEhm1NR5oHRvqVXi5HGYC6Dk=
Subject key identifier: 21:FE:A1:8E:CF:84:C4:4A:82:A4:0B:5E:0E:06:6D:CC:D0:3C:7E:FB
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer: /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial: 0194C42C752D887C9EBA6E11EED1FF1E7120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number: 1175
Signing time: Sun 02 Feb 2025 01:00:35 +0000
Manifest this update: Sun 02 Feb 2025 01:00:35 +0000
Manifest next update: Mon 03 Feb 2025 01:00:35 +0000
Files and hashes: 1: I2Yr1zW3N9WPKWaBf8XpZBa9KTQ.roa (hash: FDkYKTEP0Um2LUoCF//rx7PCDLHD998Rc7mDWECM5U8=)
2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: IseHyvQWKAYSpUC6uzr2NEGOGf81pFayHxQ16FIX0dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:75:2d:88:7c:9e:ba:6e:11:ee:d1:ff:1e:71:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
Validity
Not Before: Feb 2 01:00:35 2025 GMT
Not After : Feb 3 01:00:35 2025 GMT
Subject: CN=21fea18ecf84c44a82a40b5e0e066dccd03c7efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:cd:f5:35:70:e4:83:9d:04:2a:13:81:c3:
e8:5a:8c:8d:b5:87:c8:a7:9d:47:2b:c2:a5:4d:0b:
43:fd:38:cd:46:ff:0d:30:f6:93:34:b7:76:02:84:
7d:ed:8a:13:65:19:a3:d2:a3:1f:c6:76:fd:df:83:
e8:96:c1:26:95:c9:c4:3b:1d:d6:aa:0e:34:88:9a:
d9:fa:e3:fa:b4:51:3f:24:8a:d0:8f:7f:e2:08:40:
6c:4b:49:e7:d3:8c:6c:7f:03:79:c5:b1:bf:25:f7:
c6:9c:73:0f:c4:53:ea:49:8f:9c:72:94:68:ea:4e:
a0:aa:79:33:aa:1f:54:56:56:99:f7:e4:ff:9e:89:
5d:3b:cb:49:b8:8a:65:f4:72:de:1b:67:b2:ee:2a:
8b:70:19:0e:1a:17:78:64:a7:fe:d4:36:6e:8f:9f:
63:b1:ca:84:51:f3:39:b6:42:e1:f7:33:26:b6:f5:
ad:ee:b5:73:97:9a:df:ae:53:e8:a4:f7:f3:66:d6:
dc:e5:f6:6c:7b:96:9e:34:04:93:31:80:d7:83:fe:
98:b3:fc:12:a0:82:7e:52:c5:47:1f:5f:2f:82:84:
46:a9:93:a6:bf:51:7d:6a:da:08:aa:4d:f6:86:e8:
94:3a:d9:45:24:c1:0d:73:25:a2:a6:ea:32:14:77:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FE:A1:8E:CF:84:C4:4A:82:A4:0B:5E:0E:06:6D:CC:D0:3C:7E:FB
X509v3 Authority Key Identifier:
keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:15:26:06:87:c1:13:d4:d1:12:f5:43:ca:c5:d6:cc:90:db:
d2:41:79:5e:ed:1f:a4:2a:68:53:09:4e:74:cf:10:9a:73:0e:
46:2f:16:84:2f:db:3d:f9:a0:a2:ef:b6:54:b5:84:6e:a7:64:
97:4b:d2:48:14:22:cd:18:e1:a0:61:f3:bc:51:f2:c9:5e:1a:
ee:e8:20:42:f0:5b:9a:2f:76:f3:81:7c:2e:5a:7b:dc:97:3d:
d5:96:d4:6e:b4:61:b7:b3:54:47:98:9b:f7:f0:d9:92:86:9b:
ca:b6:dd:44:d6:4f:72:ef:2d:a2:84:e8:94:bf:e4:a9:a2:3a:
f3:f1:82:43:db:8f:7c:47:1a:4b:57:73:ab:4c:22:d7:ec:4f:
d8:e3:e4:f4:01:a2:8f:52:af:71:95:8f:0d:23:9d:9a:51:89:
cf:cc:c3:c6:62:f6:cd:94:14:69:7f:84:55:f4:b5:44:64:1f:
5f:c3:88:c8:1f:3b:a6:a0:82:6d:02:ca:e6:6e:ff:ca:45:91:
96:dc:9e:59:02:e0:62:e1:9a:f4:cb:b8:78:af:2a:2c:f2:cb:
ba:38:49:0a:38:93:8a:3b:0e:cb:ba:f9:db:53:c0:c3:b6:44:
4d:a5:ef:a6:73:d4:4d:40:7b:2b:c8:34:53:28:05:97:00:ec:
78:1c:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:38 2025 by rpki-client