Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File: YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier: CuPzZmHjGFbNkfB6VVotRzzmHWiDpEUvulrV/OnqWHE=
Subject key identifier: D4:AF:77:E6:94:FE:4A:E7:7B:70:E2:44:2B:1C:78:0F:4B:03:6A:13
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial: 01951090242A601EF789D89E2D83C0822640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number: 1335
Signing time: Sun 16 Feb 2025 21:00:36 +0000
Manifest this update: Sun 16 Feb 2025 21:00:36 +0000
Manifest next update: Mon 17 Feb 2025 21:00:36 +0000
Files and hashes: 1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: e/3A2Qxh3oeHQAvMBatgokC5Q6Y9RKSiSXl2Chp50HM=)
2: aC1zrHe-B2VbFWXSrCj-et8l1wo.roa (hash: dYtxir4EItimXJqX5OgUJO3jRJ2NZN3GpkUGUsB/28Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:24:2a:60:1e:f7:89:d8:9e:2d:83:c0:82:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Validity
Not Before: Feb 16 21:00:36 2025 GMT
Not After : Feb 17 21:00:36 2025 GMT
Subject: CN=d4af77e694fe4ae77b70e2442b1c780f4b036a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:cc:9d:a6:6f:07:80:72:7b:d0:7c:76:73:
6b:f3:b3:27:70:80:75:6a:36:aa:2a:69:62:6e:23:
ac:35:a3:96:d7:2e:4c:7b:51:cb:dd:96:d9:56:21:
c5:a2:fd:af:d6:39:0f:8c:79:26:2c:2a:b1:6e:6b:
a8:ab:f3:db:9a:bc:a8:de:c8:45:9d:4e:32:1e:15:
ac:f5:7d:ca:dc:ab:70:b7:70:10:a3:cf:f8:e9:a3:
ff:ac:d9:80:ea:82:12:31:64:43:1c:62:73:f3:28:
94:e8:a3:15:c5:8a:eb:21:2b:61:1a:a5:96:a7:94:
71:04:55:ca:87:ac:9b:e6:0a:45:74:65:dc:bd:db:
e7:72:bd:ae:11:98:c9:24:79:37:92:a3:53:63:d1:
96:d3:13:70:13:d4:b9:55:96:9f:05:8f:85:3c:12:
dc:af:59:d8:62:63:d0:e3:77:9b:b6:00:c5:e6:f8:
a2:27:b5:c6:62:b4:f5:2b:2d:7f:0d:f8:9a:ec:75:
3a:be:25:8a:2f:64:46:12:4b:cd:82:a0:6c:ac:51:
a0:b2:68:e0:f2:cc:e9:d3:13:5f:6d:f0:a7:c6:98:
4d:43:60:6e:f6:d5:70:39:76:6f:70:33:b6:90:ef:
cb:7f:ee:cb:8b:a3:9a:24:7e:55:37:84:cf:2a:66:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AF:77:E6:94:FE:4A:E7:7B:70:E2:44:2B:1C:78:0F:4B:03:6A:13
X509v3 Authority Key Identifier:
keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:4d:e9:4d:18:44:9a:a1:f5:07:fc:2e:9f:2f:13:39:04:
87:a2:13:fe:4b:ae:31:2e:33:55:49:5f:d4:a2:eb:48:b2:10:
c6:31:f0:07:e5:0f:3b:60:71:3d:8c:9b:cd:6f:1e:31:1c:e2:
02:74:58:41:1e:11:49:39:33:1d:a7:03:73:5c:06:1d:5d:6f:
92:60:4a:94:b2:8f:6f:40:c5:34:28:53:2d:7e:88:23:ba:e8:
04:c1:4d:9e:d3:5a:f2:43:ce:c2:fe:d0:1c:55:38:3f:73:ab:
19:a6:93:83:86:d2:7e:59:97:ea:bb:f9:d1:46:fb:9e:61:37:
38:e6:58:a5:7a:ed:de:d8:38:56:1d:ee:34:7a:7e:5a:52:82:
51:ed:57:51:f1:11:63:1b:c8:9a:e8:63:a9:e5:9f:bc:66:df:
24:51:2e:e6:f1:9c:39:4a:42:65:16:83:1d:72:38:13:9c:f5:
df:e5:a7:c1:8c:81:4a:39:14:80:84:4a:83:27:bb:fc:6c:8f:
01:50:97:9d:24:78:00:bc:25:89:af:ba:6b:24:0d:39:b6:d0:
f1:8f:a1:ad:b7:69:74:c9:b8:2e:e4:16:27:0a:5e:db:aa:9b:
1a:be:7b:61:7d:ab:dd:d2:a6:56:4e:b2:07:55:0f:1a:7b:8a:
2f:cf:4e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:51 2025 by rpki-client