Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: ZsU9Ksv+CYQ/PmPYONt4m40SEJ6r7aUjBThRnp00+Xk=
Subject key identifier: 74:FF:7A:03:EF:34:39:6F:B0:98:1B:39:8A:23:3C:EE:10:B8:42:C9
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 019510C7BBEC47653A28FC2A9A786DEBA357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 12F1
Signing time: Sun 16 Feb 2025 22:01:20 +0000
Manifest this update: Sun 16 Feb 2025 22:01:20 +0000
Manifest next update: Mon 17 Feb 2025 22:01:20 +0000
Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=)
2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: hVheMM0GG5BYRWoEiwc1nBPbjiA6xdzwaoyMSWf2GSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:bb:ec:47:65:3a:28:fc:2a:9a:78:6d:eb:a3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Feb 16 22:01:20 2025 GMT
Not After : Feb 17 22:01:20 2025 GMT
Subject: CN=74ff7a03ef34396fb0981b398a233cee10b842c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:b7:d2:04:80:36:97:e1:26:60:32:d0:33:
12:84:81:3b:da:65:06:20:4a:82:0e:37:07:f9:db:
ba:d4:13:a8:b8:a3:40:d9:0f:55:88:6f:f9:7a:8b:
7b:6d:2c:ed:5d:f5:ca:f9:0d:7f:c9:97:53:5e:14:
4a:d5:f3:1f:6a:af:e3:52:51:97:6f:92:77:c3:c6:
ac:33:81:8b:77:5a:49:87:d6:52:a5:c7:c0:bc:5d:
f2:0a:10:be:bc:8e:ed:66:87:2f:f8:a6:cc:a1:85:
42:73:af:44:97:97:5b:37:13:23:1f:e4:37:8a:86:
d4:5c:a7:93:23:5d:2b:3c:65:cf:fa:4b:c9:bc:10:
be:1a:b4:de:0d:c9:42:19:2f:a8:78:fe:92:64:e1:
41:b7:4d:e5:23:33:7b:0f:96:8a:5f:ef:18:88:81:
07:2d:74:4f:e7:45:9b:21:f3:93:1e:b0:a7:95:74:
2c:25:d2:5e:66:de:40:55:b5:30:c6:ce:7e:7d:42:
35:99:a2:5c:a5:4d:c5:73:52:76:38:bf:28:3d:1f:
c6:e7:65:8f:02:0a:6f:45:de:df:29:f7:0e:9e:73:
66:db:4b:1b:11:af:ce:b3:77:d2:1c:cc:22:d8:fd:
f5:3b:e8:43:e1:43:7a:f9:3d:a7:1d:3f:70:01:8b:
14:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FF:7A:03:EF:34:39:6F:B0:98:1B:39:8A:23:3C:EE:10:B8:42:C9
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ee:9b:d9:19:89:80:09:4b:68:7e:14:6f:5e:86:6b:fc:49:
b3:33:61:98:bc:06:e6:5d:f7:ba:d1:4d:16:b8:41:c0:02:26:
e5:a0:14:91:58:2e:6f:d4:89:80:9e:05:dc:f6:75:ac:e4:d7:
21:86:88:8b:d4:86:1a:06:b8:db:11:f5:6c:8e:7b:c7:68:86:
12:21:22:ae:5a:fb:4c:f0:ba:4b:4a:35:7b:22:8e:19:40:6f:
1b:87:c5:b4:21:28:ac:3b:43:68:15:0c:2c:d2:31:18:0e:49:
67:94:ed:ac:a6:9e:e4:fb:45:51:77:a6:71:ab:0c:77:9e:3b:
3f:9e:1e:74:14:36:d9:79:8c:23:c5:b8:76:7b:7b:95:cd:6d:
f5:b8:fd:dd:9d:aa:9e:88:ac:70:ec:c7:4d:d9:e6:45:65:e5:
05:01:d5:e7:90:d3:e6:cc:17:91:70:82:8b:97:6e:66:6b:1c:
4a:b2:23:48:1e:96:b5:df:f2:05:fc:77:8e:4d:cd:57:f1:30:
bf:c0:9d:a8:d5:b1:41:b3:94:37:8a:2c:5a:9b:23:51:7b:88:
aa:6d:28:45:df:43:34:43:4e:52:7d:de:95:9a:44:8c:73:05:
d2:92:43:bc:38:88:2d:14:36:8e:09:f4:24:1b:e8:6f:dc:28:
07:3b:1e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:30 2025 by rpki-client