Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
File: YZz5qeC2RhrYM4dawRaPiSP9VQs.mft (raw, json)
Hash identifier: rpnpSEMH/O4aa0+3Ah2YP9IfBlkgmGjE9QRVbIQ1OMQ=
Subject key identifier: F4:B8:F0:A1:43:41:78:92:B1:E3:C3:67:0A:31:B4:55:5B:AB:59:F7
Authority key identifier: 61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
Certificate issuer: /CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Certificate serial: 0194C4638F9DA12656FCB241878732342C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
Manifest number: AF
Signing time: Sun 02 Feb 2025 02:00:46 +0000
Manifest this update: Sun 02 Feb 2025 02:00:46 +0000
Manifest next update: Mon 03 Feb 2025 02:00:46 +0000
Files and hashes: 1: YZz5qeC2RhrYM4dawRaPiSP9VQs.crl (hash: ZKLF6cIJFIETYUpFwIZfSgicnMVEasO4HCh5DOw+w7A=)
2: huRseKKMZ6MrEbEtnTidADNp1Qk.roa (hash: 2Cpw72DhJ+0Co4QK9K/ptsbGLArKbkMx0RKaT4rzilY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:8f:9d:a1:26:56:fc:b2:41:87:87:32:34:2c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619cf9a9e0b6461ad833875ac1168f8923fd550b
Validity
Not Before: Feb 2 02:00:46 2025 GMT
Not After : Feb 3 02:00:46 2025 GMT
Subject: CN=f4b8f0a143417892b1e3c3670a31b4555bab59f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:99:fd:eb:9c:1f:8d:6b:24:cb:82:29:70:
a4:55:02:e8:29:a4:06:f6:e9:fd:5d:55:e2:d4:88:
ce:2a:9b:32:c5:6d:01:94:43:78:3e:8f:41:ed:4c:
8a:8c:72:15:c0:10:5b:f7:c6:09:42:4a:0e:c1:c3:
9b:01:c5:97:69:d2:53:00:74:86:b6:aa:d5:ba:df:
7e:75:b7:72:53:91:b7:20:01:d2:56:af:75:3b:a1:
e8:d2:4a:6d:0d:20:3b:96:0e:8c:2d:f4:6e:e6:e9:
b4:fc:2d:15:fd:3a:37:80:c1:bb:31:dc:96:e3:bd:
9a:bd:df:76:8c:b0:ab:06:e4:ae:10:82:40:7c:35:
57:98:d5:67:c8:51:13:ee:aa:c1:f6:8b:6c:16:b3:
09:03:43:e8:19:3a:80:11:79:e4:a6:d5:81:c4:62:
0f:be:4f:47:cd:e1:5a:f4:32:0e:31:b2:c9:f4:84:
9c:5e:7d:c0:be:c5:c6:3c:90:91:1e:b0:04:b0:a0:
da:3e:d6:5d:57:d4:22:4d:b3:33:b5:15:46:69:ad:
82:79:6a:fc:d0:97:a9:a7:46:0c:18:fc:8f:b0:5b:
ab:04:f7:df:53:5e:ad:94:b6:35:5d:65:d0:f5:50:
5b:a1:30:4b:0f:e3:9f:69:6e:89:ae:d4:51:a8:c5:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B8:F0:A1:43:41:78:92:B1:E3:C3:67:0A:31:B4:55:5B:AB:59:F7
X509v3 Authority Key Identifier:
keyid:61:9C:F9:A9:E0:B6:46:1A:D8:33:87:5A:C1:16:8F:89:23:FD:55:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZz5qeC2RhrYM4dawRaPiSP9VQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d6bfab-eac6-4a42-8872-14afae91336d/1/YZz5qeC2RhrYM4dawRaPiSP9VQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a7:54:de:4a:87:3c:bd:6b:d9:23:2c:b3:28:58:fd:12:16:
1c:41:74:0b:e3:ec:45:7a:fb:df:7d:0a:47:65:db:1c:0c:74:
a5:0b:a4:9f:4c:63:c5:07:ed:5b:09:12:1e:18:7c:94:74:bd:
d2:c8:b0:12:d8:1e:38:da:ce:97:fc:6f:66:8c:78:76:65:e7:
1d:2b:32:a2:4d:39:cf:95:62:5d:68:ae:f0:67:02:55:5a:c8:
ef:83:02:a1:c0:1c:45:4e:57:8e:9e:45:60:f0:b5:8a:1c:f0:
6f:cc:ac:c1:57:fc:1f:0b:63:ee:8e:bc:c8:5f:f6:8d:42:a2:
80:05:d8:d5:c3:2d:bd:86:5a:24:23:4c:84:eb:a9:69:b0:2a:
a1:9b:fa:a8:8f:46:c7:84:43:d4:34:b7:e5:44:3b:6a:ee:12:
9a:52:40:98:1d:2a:8f:7b:1b:e3:86:b6:a2:a0:01:1f:14:b6:
75:f3:9b:c3:d9:e1:58:78:a7:6a:db:2a:27:26:ba:7f:57:7a:
90:04:8b:ef:c5:c6:21:91:85:9e:7f:26:dd:a6:fe:81:d8:48:
b7:1c:cf:a6:3c:ab:c9:ab:bc:4e:5a:10:63:70:fd:32:cd:2f:
0d:ed:1f:3a:a1:bf:9f:88:ba:1f:11:8c:b2:a5:4e:d6:8b:ec:
47:2a:cc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:01 2025 by rpki-client