Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
File: yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft (raw, json)
Hash identifier: e9WEHoAIzKvzYNP5OE1nEhfOrPPOLat277oYElR5Nmo=
Subject key identifier: 5B:55:02:89:1D:00:D2:BE:78:2B:85:3D:3E:53:28:05:DE:F9:FB:C7
Authority key identifier: C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
Certificate issuer: /CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Certificate serial: 0194C319DE1EDDD331747492A8F0BDEDDAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
Manifest number: 0ABA
Signing time: Sat 01 Feb 2025 20:00:39 +0000
Manifest this update: Sat 01 Feb 2025 20:00:39 +0000
Manifest next update: Sun 02 Feb 2025 20:00:39 +0000
Files and hashes: 1: _Z27vdbVNx1AkVs4_tUBUqOLYnE.roa (hash: GcXnOCS0CtBJVhbx+3s+RdmGrB9WpH4rUku+ZZjo1A8=)
2: yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl (hash: b38+jV8dHyw6BJJf4DeYPF5WVxcjD0Dpd70a5ve47B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:19:de:1e:dd:d3:31:74:74:92:a8:f0:bd:ed:da:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Validity
Not Before: Feb 1 20:00:39 2025 GMT
Not After : Feb 2 20:00:39 2025 GMT
Subject: CN=5b5502891d00d2be782b853d3e532805def9fbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:b2:68:3e:cf:f7:f2:ad:e3:ac:c6:9f:55:
67:54:1c:f7:93:6f:5f:da:c3:c2:81:a1:80:14:7a:
9c:a0:68:80:bc:dc:85:a6:f0:77:9d:e0:de:c4:bf:
35:f0:f9:cd:c3:01:4b:30:44:ff:71:c3:1b:e5:c6:
98:79:09:4d:70:65:45:3c:94:95:07:dd:d6:ac:b5:
06:18:43:21:5f:26:82:0c:e6:e5:9c:86:13:a9:e7:
6e:d7:9e:63:fd:d9:05:fe:3a:c3:b4:77:c5:2f:8e:
98:5c:74:a4:b2:0a:c7:13:a9:ac:6c:f5:91:35:91:
d8:3c:5c:fd:3f:97:06:e7:78:7c:c3:27:d8:1f:c0:
5f:24:60:cb:82:80:c8:40:c6:c5:9a:77:84:a5:f5:
5c:a8:80:c0:05:51:13:bf:ca:71:7b:ca:e7:a2:8a:
3b:6c:7c:27:7c:7e:74:82:ee:c3:99:fc:c0:a1:dd:
3f:b3:11:00:bf:ce:bd:7c:f1:18:e6:c4:0b:6f:8d:
c4:e3:ef:fc:37:12:83:74:3a:c8:ec:bd:27:e0:06:
0a:7d:4b:56:2b:e5:28:b8:6a:03:67:da:c9:91:00:
9a:9d:18:8a:12:62:6f:65:93:bf:7d:35:06:70:1a:
14:1d:34:ff:39:db:be:d1:fb:34:cd:b2:00:71:60:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:55:02:89:1D:00:D2:BE:78:2B:85:3D:3E:53:28:05:DE:F9:FB:C7
X509v3 Authority Key Identifier:
keyid:C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dc:2e:3d:0b:8e:00:fd:c5:ed:19:b7:22:14:56:3e:6f:66:
a1:ad:ae:57:bb:96:71:73:40:11:63:90:e6:ba:b9:fb:20:2c:
aa:be:2d:13:7a:06:5e:ee:d8:91:b2:f9:de:88:26:e4:32:7c:
fe:4f:57:77:54:91:15:f4:03:36:a9:a1:97:e8:82:33:5f:25:
43:b9:9d:20:78:cc:8b:41:64:9b:2c:79:0b:9f:ba:08:b3:be:
59:f4:6a:71:da:88:dc:0b:0a:48:19:4f:8f:c0:d7:58:2b:24:
40:cd:34:7b:f0:49:7b:c7:9a:e7:52:57:7c:15:46:f6:5a:73:
2c:35:5c:07:79:13:2c:fa:6a:ce:bd:39:be:fc:01:70:bb:41:
45:97:ef:21:6b:c6:ae:99:67:9d:e1:45:16:06:d2:3a:15:ae:
bc:b3:f5:e5:a4:d5:d5:b0:4d:d3:09:59:ca:03:4f:96:82:68:
11:9b:94:43:1b:8d:5f:fd:dd:98:ed:81:f4:a7:f2:b3:db:5d:
72:72:b8:6f:44:94:c4:4e:b9:07:96:dc:88:6b:ed:59:d5:b9:
a8:97:f7:00:a3:c3:87:42:c8:c0:26:3b:c8:96:66:a1:03:d4:
b3:73:1c:65:5b:93:d0:ac:b3:5b:dd:65:ad:eb:8e:4a:5c:3c:
6c:5f:76:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:55:15 2025 by rpki-client