Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: RgSfcb2vkOIVQMtu0ISxxVs+ndITriOmgxVI3gfNudc=
Subject key identifier: 67:45:17:A5:E5:C5:B6:C9:BD:FB:52:BA:7A:5A:0C:41:D5:57:14:D0
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 0194C4D13782335158A7A6629E13974C9333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 0202
Signing time: Sun 02 Feb 2025 04:00:33 +0000
Manifest this update: Sun 02 Feb 2025 04:00:33 +0000
Manifest next update: Mon 03 Feb 2025 04:00:33 +0000
Files and hashes: 1: 9Aeacxzy-u4aevKcCQ9nXd_FU7Q.roa (hash: vKC+rREuRemLdV33ThPXHvcW71bg+LHpzDOvqZUoqy4=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: PxW/jiaeRAbbFQFB8RxZiWNtfJ5sSHq38Wspl81Ql8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:37:82:33:51:58:a7:a6:62:9e:13:97:4c:93:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Feb 2 04:00:33 2025 GMT
Not After : Feb 3 04:00:33 2025 GMT
Subject: CN=674517a5e5c5b6c9bdfb52ba7a5a0c41d55714d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:31:9f:47:30:8c:08:a8:9f:58:76:d7:ba:
98:d8:d6:66:48:c1:6a:1c:bb:53:32:f3:6e:7b:a9:
f1:11:26:c4:af:5a:15:de:63:d8:c7:d1:7f:c8:cc:
5e:12:ab:d5:40:51:0f:14:dd:e4:89:c7:f9:e6:e2:
30:a0:a5:62:3f:35:8e:7d:ee:4b:f6:d2:8b:b8:47:
36:28:58:bb:e6:71:15:a9:6c:e2:a1:83:66:d5:1c:
91:e0:e7:ca:46:c5:0c:95:0a:23:15:38:da:b3:20:
ce:3e:06:04:1f:8d:a6:cc:e8:49:8a:17:ec:84:2a:
3b:4f:3d:8e:e3:c7:eb:fc:f0:a6:24:0c:4b:bd:48:
32:3b:e5:16:86:7e:a3:d3:9d:72:7c:56:fa:de:66:
1a:14:da:4d:88:69:dd:62:f6:bd:fb:98:89:9c:e6:
4e:0d:78:df:41:2d:87:3d:20:a5:c5:4b:37:6c:a8:
8f:ef:9a:fc:bf:28:31:17:4d:60:82:9b:9c:08:8e:
1f:7f:6a:52:60:2c:d7:18:b2:2b:8d:e3:61:c0:c3:
ae:dd:6d:10:db:5f:e4:ad:2c:be:8d:96:08:ba:69:
37:09:51:bd:90:9e:24:ee:d0:59:24:56:3f:e0:df:
b7:5e:f0:5e:1b:0d:c5:66:8b:4a:01:9e:e5:2d:39:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:45:17:A5:E5:C5:B6:C9:BD:FB:52:BA:7A:5A:0C:41:D5:57:14:D0
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c1:fa:d9:49:1a:c4:03:96:b0:e2:3f:bf:6c:39:fa:ee:39:
c5:f6:31:32:fd:75:0e:49:ba:ab:4b:f3:2f:a5:cc:1c:95:f4:
da:9b:7c:d0:81:d4:eb:a3:b0:55:0f:0e:7f:f8:d9:02:c0:f5:
ec:a2:9b:01:af:14:3a:18:b4:66:c3:99:7a:b8:29:8f:97:e0:
1e:de:7d:e6:f7:13:ff:d9:1f:54:4e:32:c7:6c:8c:a2:8f:7e:
ac:85:c7:67:eb:78:f9:ca:58:b2:b7:27:9f:63:e3:a0:fa:b1:
f6:7d:8a:91:07:01:53:73:5d:00:bb:ea:51:9c:3b:48:89:7b:
b5:54:2a:8e:49:4d:e6:fc:92:16:59:4e:f6:fb:0d:a1:9d:01:
3f:76:2a:13:22:2c:00:84:5c:8b:ba:96:6d:58:c9:51:ce:bd:
3f:87:b4:1b:eb:35:cc:20:b8:c9:15:e7:fb:39:e4:44:15:5d:
00:8c:88:a5:1d:be:cb:dd:2c:13:d5:8d:5c:e8:03:98:e6:74:
e6:7e:6d:54:09:b7:28:54:92:df:0d:f8:a5:80:93:1b:0c:ee:
38:21:4d:da:9f:36:e0:80:7d:fb:85:d5:f4:2b:0e:8e:4e:10:
0f:0e:24:8e:ba:bb:f2:15:34:0f:46:d8:ee:d0:7e:be:fe:17:
e1:13:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:48 2025 by rpki-client