Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
File: Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft (raw, json)
Hash identifier: C8hM5Sn0xEq6E5XtwM7/V5WDBxK529MhnqCsz8mKXuw=
Subject key identifier: C3:D4:C8:75:CD:9F:AC:4F:B9:1D:F1:03:AB:FA:F9:DD:45:85:25:2B
Authority key identifier: 63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
Certificate issuer: /CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Certificate serial: 0194C38827AB302EC5FBCD561181C67849C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
Manifest number: 0921
Signing time: Sat 01 Feb 2025 22:01:07 +0000
Manifest this update: Sat 01 Feb 2025 22:01:07 +0000
Manifest next update: Sun 02 Feb 2025 22:01:07 +0000
Files and hashes: 1: Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl (hash: AVkWqKUVQemq4qNOJmGtNALpmRxOhJEICisTyM6WTz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:27:ab:30:2e:c5:fb:cd:56:11:81:c6:78:49:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Validity
Not Before: Feb 1 22:01:07 2025 GMT
Not After : Feb 2 22:01:07 2025 GMT
Subject: CN=c3d4c875cd9fac4fb91df103abfaf9dd4585252b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:20:92:b3:f4:37:53:57:67:6b:51:3a:e3:
56:dd:41:b0:f3:58:1d:c3:be:1e:35:bf:31:f9:46:
3b:2f:81:3a:27:cd:1e:47:90:dd:4c:98:41:6f:8a:
e9:00:14:3f:ed:83:7e:8d:68:c3:e9:08:22:b9:e6:
e8:d5:ae:09:27:06:dc:ba:f3:ea:8f:c6:34:4b:3b:
7d:78:1d:6f:4a:b6:ad:62:2b:f1:5c:78:56:03:5a:
71:f1:a6:10:9c:de:c0:1f:f5:a0:0e:7b:92:1a:41:
44:d9:d0:88:73:7e:cd:01:1d:7b:2c:a6:56:b2:e1:
3a:5d:05:44:33:79:99:2c:55:cc:52:84:0a:ab:aa:
2d:ed:29:37:af:6e:da:65:d7:eb:bc:bc:ad:68:d0:
95:7b:70:e9:24:c7:7c:c0:5c:25:a2:53:07:42:79:
27:11:3d:78:e7:e8:21:85:9d:a6:0b:c7:83:35:63:
49:3f:df:aa:0d:15:06:e7:56:f0:7e:7f:9e:b4:ce:
49:60:ed:26:b3:10:e0:e5:51:3d:2d:81:5b:9d:ed:
69:c1:19:5f:47:88:f8:5b:24:ea:64:cf:da:5e:cc:
3e:25:9f:fd:8f:6a:6f:d6:c5:da:1d:d5:ba:72:33:
73:28:46:56:c5:bc:f2:cd:ea:1c:d8:f3:71:81:28:
1b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D4:C8:75:CD:9F:AC:4F:B9:1D:F1:03:AB:FA:F9:DD:45:85:25:2B
X509v3 Authority Key Identifier:
keyid:63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:76:0b:74:20:45:91:0b:e6:96:cf:66:87:86:20:16:e2:f3:
10:ea:36:f3:1c:9e:ed:ce:4a:6c:30:0f:80:ec:5d:af:42:55:
46:08:65:11:92:62:f8:6e:27:87:c5:e8:c1:82:d5:3e:fc:e3:
98:a7:c6:81:5a:f0:45:ba:8c:0c:7b:7d:dd:7f:0f:70:09:70:
f6:91:07:22:dd:3d:e6:c7:4a:a3:52:fa:af:e1:f3:08:24:b9:
50:0c:1b:6a:e3:65:4b:74:2f:42:32:83:5d:58:b1:0f:c3:62:
5a:ef:4f:e7:c5:e4:a2:b7:e7:7c:71:90:a3:c1:44:7e:c2:91:
d5:8f:5b:11:9e:2e:06:64:c4:08:6c:e9:60:1b:c1:f4:49:fb:
11:11:9a:e9:50:81:d9:57:75:99:cd:a2:e8:96:61:ef:be:74:
0d:2d:c8:bd:16:7e:34:b7:26:22:e5:34:59:9f:95:8c:a6:51:
52:b6:7e:87:ac:52:b7:f5:96:63:7e:ca:b3:e8:4b:45:b2:43:
85:d6:93:f8:4d:cd:50:e0:93:9a:bb:2e:f0:71:5a:35:1a:fd:
3d:50:9a:ea:2d:75:70:27:8a:16:0e:0d:4a:99:86:df:3a:57:
41:c3:91:21:78:85:24:39:1c:91:17:aa:0f:50:df:64:64:94:
f1:b3:16:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:59 2025 by rpki-client