Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: b6eBkTgjqp9ZLa2ytogsjJG6+1hY2b0xl7C9N+XumKI=
Subject key identifier: DA:4D:6C:99:37:44:6B:4C:45:62:CE:AA:FB:9F:B5:6C:5F:25:6F:94
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 0195113477230326C2FE1715C211BDB536E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 117D
Signing time: Mon 17 Feb 2025 00:00:05 +0000
Manifest this update: Mon 17 Feb 2025 00:00:05 +0000
Manifest next update: Tue 18 Feb 2025 00:00:05 +0000
Files and hashes: 1: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: 4FFjLa7AoyfwhbhFlJtc8Pl+8Z926PfWiNBx4T8Fkqs=)
2: faR7v_a9Va3-r60WSU_WaTJtc24.roa (hash: thaUHgZWvI2PC5jRMcEiFXRYLXPtomHvbvJ1x6LMOHg=)
3: zEjZI2nbs9NYU83i9nAA_qIX6Ls.roa (hash: NeJZaXwcRx4Bl+3WoFWMtQtTNrN4F35s8GQu8H57fPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:77:23:03:26:c2:fe:17:15:c2:11:bd:b5:36:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Feb 17 00:00:05 2025 GMT
Not After : Feb 18 00:00:05 2025 GMT
Subject: CN=da4d6c9937446b4c4562ceaafb9fb56c5f256f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:6a:14:4f:64:bc:1e:14:d0:90:a2:36:2b:
77:c1:ad:c8:db:d2:27:a5:a3:d6:f6:af:90:2a:61:
e6:27:83:57:70:33:95:82:f7:e5:9f:4f:a1:38:e7:
79:58:26:88:2d:fc:05:d7:d7:76:26:a3:69:06:f8:
10:a9:82:51:33:fd:1c:53:90:8b:d9:ef:73:2b:f4:
7c:d6:9f:ed:48:ac:0e:e8:63:e1:42:b8:bd:b6:d1:
0d:d1:c4:1f:15:dd:f9:d3:25:8e:c9:e4:0c:59:95:
d9:2e:09:ab:b2:31:4a:6b:fc:0a:50:4a:54:b8:8b:
45:2c:b3:e3:94:48:4f:9a:02:50:0c:fc:ff:18:68:
23:28:d4:3f:e2:9a:4b:11:6c:36:93:b8:0b:1b:70:
a4:d7:a9:b2:e7:b1:4d:3a:bf:95:8c:3f:28:b1:23:
d0:4f:80:5e:6b:07:f0:8c:34:55:f2:f6:f7:a0:25:
7f:d2:23:35:51:d0:d8:9d:75:30:7d:e1:2a:79:9d:
67:99:59:77:6a:b1:54:2f:89:cf:dd:3e:a3:96:91:
4b:87:93:52:e3:6b:8f:6a:f9:4d:36:d0:d5:28:42:
d6:71:ef:a1:50:45:80:55:bb:f9:98:06:f5:4b:ce:
6e:b4:6d:ad:49:1b:c6:6b:f0:f2:ab:82:2f:c2:29:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4D:6C:99:37:44:6B:4C:45:62:CE:AA:FB:9F:B5:6C:5F:25:6F:94
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ba:68:04:b4:a8:26:ad:87:ec:df:8c:6a:74:b2:68:20:60:
c7:fc:71:c8:87:a6:e8:ed:90:6a:d4:9a:84:85:57:46:52:7d:
c8:92:23:56:3c:7e:79:3b:ee:ee:6f:d3:04:94:0b:8a:93:1e:
7f:a2:fc:1e:32:36:9c:63:42:f2:6b:fd:74:bd:7e:a7:3d:60:
b2:78:25:00:ac:61:4f:0f:75:dc:35:b5:76:6f:b9:4b:7b:0b:
9f:a2:5a:09:c3:70:17:0b:fc:18:0b:46:35:ef:d9:e8:e7:86:
a7:2a:48:4a:38:2f:1e:07:9d:04:79:e4:87:e2:8b:7e:05:d8:
64:b9:6f:25:ec:d8:08:9d:d2:ec:4c:c4:eb:dc:f1:09:b6:b0:
1a:b2:9e:a9:79:f0:e0:a4:14:28:7a:70:31:1f:bb:0f:45:01:
da:25:e0:d1:6a:2b:ab:45:59:eb:66:a0:6d:96:52:1f:23:36:
d1:12:0f:d0:53:fe:9d:64:0d:78:11:63:8c:00:5a:0c:6c:42:
fb:e6:92:fd:e7:16:47:5e:65:17:91:1b:77:83:b5:3b:67:5f:
1f:df:27:69:e6:10:28:63:0e:37:72:c7:73:63:a6:52:6f:ab:
9d:40:3c:4d:0b:d8:d7:54:0a:9f:6d:0e:d4:73:1a:b3:d4:43:
fd:98:92:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:16 2025 by rpki-client