Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier: hPM63WWtNrHsTx2Wr7s4Rj2QmiZ/eZOVpPvB4ARQefw=
Subject key identifier: 89:A7:43:45:9A:B9:6A:05:55:53:DB:F4:98:16:FE:2F:E3:E0:0A:2D
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial: 019510FDD43D56BDBAFE8509EEDE308F532A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number: 0114
Signing time: Sun 16 Feb 2025 23:00:25 +0000
Manifest this update: Sun 16 Feb 2025 23:00:25 +0000
Manifest next update: Mon 17 Feb 2025 23:00:25 +0000
Files and hashes: 1: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: NpXdO+WDSdEjVgPZlepaTgI3o9yCFnqPh+IxHIs/FTg=)
2: kGTMJp8YWdhCRnyfOKgxhKChBJQ.roa (hash: ZVU5RQX8MRgj32JsdxWQo2xXu6d3VcvuzIOlJ8aVzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:d4:3d:56:bd:ba:fe:85:09:ee:de:30:8f:53:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Validity
Not Before: Feb 16 23:00:25 2025 GMT
Not After : Feb 17 23:00:25 2025 GMT
Subject: CN=89a743459ab96a055553dbf49816fe2fe3e00a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:3a:ea:7c:3f:be:e5:ad:e0:a6:7a:c9:0a:
16:04:bd:f8:1d:64:db:3d:64:98:ab:e7:5f:c5:48:
8c:05:e8:41:2e:22:0b:7f:9c:b4:5b:bd:cc:46:ea:
98:5f:73:f8:12:2f:0f:3f:31:82:8e:19:de:77:9d:
89:c6:9a:b8:f8:77:9c:1b:f6:d7:96:4e:fb:ca:14:
fd:0b:25:25:55:bf:ac:9a:b4:0c:7e:c4:4e:e2:30:
3d:16:ed:78:0d:0d:6e:b5:2f:21:e3:de:45:4a:07:
bf:f0:27:92:99:bd:a3:05:91:db:7a:03:e4:24:62:
76:64:4f:ef:ff:c0:c1:a8:30:90:eb:25:17:f3:33:
1d:a5:29:6c:f1:16:f6:e2:ef:14:be:ba:02:3c:fd:
c2:fc:a5:13:fe:20:14:3a:e3:1c:35:85:b5:28:22:
ac:dd:00:1f:1f:cd:d1:b0:ce:f2:30:cb:a2:3d:f6:
7f:71:af:16:8b:94:aa:47:c8:08:35:d5:95:25:41:
de:25:44:ec:9a:06:1f:75:f5:70:2c:5e:74:8e:cb:
7b:aa:9a:68:3d:b8:8c:3f:f1:a2:96:36:d7:78:f6:
30:02:8d:e9:1e:7b:80:12:1f:e7:57:ec:02:be:de:
64:2f:0d:0e:03:d9:d0:2b:8d:64:3c:cd:21:21:d0:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A7:43:45:9A:B9:6A:05:55:53:DB:F4:98:16:FE:2F:E3:E0:0A:2D
X509v3 Authority Key Identifier:
keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e0:df:be:18:12:b1:55:2e:a1:48:3e:84:23:e7:24:93:1d:
de:65:21:6a:39:1c:7d:3c:66:57:d7:6a:03:c2:55:e2:93:44:
c4:b3:30:ca:8d:71:47:72:c6:61:59:9e:12:90:30:92:f8:b1:
88:58:db:ae:df:06:df:91:ce:ec:2d:82:1a:1f:cb:50:db:c4:
53:6b:2b:cf:28:de:e0:cb:8d:1a:63:8a:6f:60:56:a5:3a:8a:
79:97:38:f9:f9:cc:b2:a5:25:4f:6b:33:a0:f5:f8:fb:f7:c4:
bb:e7:99:c0:7b:b3:bf:fa:cc:aa:42:66:75:f9:0b:54:21:91:
bc:77:90:2b:c1:ac:42:a6:15:ba:fc:58:b4:48:48:93:14:e7:
57:7d:78:20:a6:95:d1:36:9c:2d:c2:a7:41:75:4d:0e:95:ce:
5d:3f:c2:84:91:fd:4d:4b:cf:53:9b:b7:38:f3:16:8f:22:90:
d5:bf:61:d6:fc:07:26:cd:24:aa:71:42:7f:c6:7c:6f:bd:e0:
b1:8d:07:77:7f:0e:5e:5f:5d:0c:0d:90:b2:d6:eb:7b:c2:b5:
26:21:53:80:bb:5d:7f:50:31:31:34:e2:b5:ed:45:b3:f0:1f:
93:c7:82:aa:3b:90:b1:a2:87:b3:53:13:1d:dc:78:88:8f:36:
c7:f5:cc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:48 2025 by rpki-client