Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json)
Hash identifier: BxpwiKwkR2P2fbnZ90wqNDZZtErtgvD0xT/h9Kjhrhs=
Subject key identifier: CD:F0:C5:A3:70:15:8E:D5:2E:82:AD:39:33:CB:90:B0:A8:DC:EC:74
Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858
Certificate serial: 0194C3F553E0600630B8DC16C367BDD089DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
Manifest number: 19
Signing time: Sun 02 Feb 2025 00:00:22 +0000
Manifest this update: Sun 02 Feb 2025 00:00:22 +0000
Manifest next update: Mon 03 Feb 2025 00:00:22 +0000
Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: wwJALUtqDwTBA3K4H1WnSbQ+IxnqGuWLEdm/h8wMpf4=)
2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:53:e0:60:06:30:b8:dc:16:c3:67:bd:d0:89:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858
Validity
Not Before: Feb 2 00:00:22 2025 GMT
Not After : Feb 3 00:00:22 2025 GMT
Subject: CN=cdf0c5a370158ed52e82ad3933cb90b0a8dcec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:99:a5:b1:1c:55:4f:b8:50:4d:c5:c8:62:
c0:d8:7f:84:19:c0:42:ce:16:e8:62:7f:f2:8d:39:
47:90:1a:99:ef:6d:32:7c:1f:d7:08:57:6f:6f:89:
7a:9f:52:d8:4c:84:1a:6a:f9:0c:58:36:f1:53:6e:
cc:44:37:97:8a:77:0c:5e:49:99:01:de:51:da:e1:
2c:2f:05:64:c1:bd:a6:c9:24:cb:bb:17:86:09:b2:
ad:04:d4:c4:02:62:43:73:aa:c7:cb:49:a3:1e:de:
5a:bf:66:11:46:59:af:50:64:90:cb:27:37:9a:bf:
20:6f:94:ff:d2:40:d0:37:7f:8e:28:49:1d:82:37:
15:61:af:2a:4c:4c:21:62:d1:10:12:8e:48:8c:e0:
a7:bb:a7:5d:75:61:f4:21:a0:b7:b9:11:a9:55:bd:
f7:33:fb:ea:24:c5:e6:58:0c:65:d3:ea:75:a3:e4:
8b:14:85:bf:15:64:74:ae:81:a8:43:06:72:dc:84:
75:10:b2:7d:c9:ed:b9:ea:2a:a3:4b:59:7b:03:af:
d6:99:cf:e8:3e:15:52:d1:5c:b4:1c:21:f3:60:27:
b4:06:bb:d6:f3:83:08:0c:1b:fc:2c:51:0d:ac:10:
aa:e8:b3:40:c6:df:ae:87:5c:2c:64:51:5f:99:91:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F0:C5:A3:70:15:8E:D5:2E:82:AD:39:33:CB:90:B0:A8:DC:EC:74
X509v3 Authority Key Identifier:
keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:53:63:86:fc:f0:69:55:86:64:88:4f:55:4e:0a:de:d1:60:
68:a9:c3:3f:e5:73:9c:03:55:71:66:19:b7:98:27:da:c1:e0:
8e:05:b8:bd:dd:7e:68:f6:5f:17:18:a8:f4:43:00:09:02:d8:
33:c7:a2:8b:b6:65:e5:18:2f:59:b0:2b:77:e2:ff:a3:a0:a4:
4e:9a:f9:9b:79:3d:dc:d7:c0:3c:be:66:c2:87:98:78:7f:af:
fd:b8:65:c8:57:39:37:9b:2b:63:2e:c4:71:dd:fa:28:0a:1d:
83:dd:7d:ae:0b:67:4b:db:2f:ee:50:8f:24:f7:ab:c6:ee:52:
ad:cd:dd:63:f0:b9:e4:f2:39:05:cc:84:e6:b3:06:03:a7:03:
8c:c2:5f:62:ca:53:69:4e:c5:c8:e4:41:64:53:06:86:c6:13:
a4:24:5c:7b:26:2d:5b:f8:4c:21:3b:05:b4:64:0e:c9:0c:a8:
c6:59:8f:2d:fc:d4:17:da:0c:c3:42:04:f0:f3:16:d9:e0:1d:
5b:ef:75:e5:32:77:c0:3c:d5:38:3c:02:51:b7:f4:d5:a2:35:
b6:1a:66:3d:0e:40:99:4f:2c:c1:f3:6c:7d:0a:d2:b3:b6:f4:
af:52:23:5d:bc:9a:f2:95:e1:ed:50:e2:13:f2:f6:78:8f:09:
a0:11:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:07:28 2025 by rpki-client