Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json)
Hash identifier: IOIolIT1lWFd0bCgIJWuzXVtBuRKG3DLOGfa8Blfp8E=
Subject key identifier: 1E:3F:CC:82:7E:3C:87:8C:34:9B:7E:BA:03:79:78:30:CB:05:6B:1C
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 019510FE1DB9B2BFE654A563EE54D77A759C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 23:00:43 +0000
Manifest this update: Sun 16 Feb 2025 23:00:43 +0000
Manifest next update: Mon 17 Feb 2025 23:00:43 +0000
Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: R3Gdh+0fHdWC7g1dGMJ3oCJ4sHYf35YhO3sXZC/Zv7A=)
2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:1d:b9:b2:bf:e6:54:a5:63:ee:54:d7:7a:75:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Feb 16 23:00:43 2025 GMT
Not After : Feb 17 23:00:43 2025 GMT
Subject: CN=1e3fcc827e3c878c349b7eba03797830cb056b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:b2:6f:79:ed:63:74:d7:35:20:4c:d7:2e:
1b:92:ef:d9:7d:cd:e6:4d:ab:df:d6:9b:da:fb:1a:
e1:c5:65:84:da:71:49:61:dc:62:aa:8f:c7:6b:52:
0d:bd:b4:25:fe:8c:80:81:db:50:d0:4b:9b:19:9d:
35:69:65:cf:d8:af:6a:fa:5a:65:36:7a:1f:12:c4:
68:9e:89:85:f1:73:f7:00:96:d5:66:49:b6:18:03:
28:41:79:d7:65:6a:36:b5:92:66:ec:86:3a:65:90:
9e:f4:f5:ef:76:1f:80:bd:f8:71:d0:dc:bf:27:34:
7a:b0:1f:65:b9:c9:82:d4:45:1d:68:99:62:ad:24:
46:38:40:3a:f6:a1:45:4d:07:5c:8a:53:05:15:7b:
77:14:3d:76:e7:65:d3:c2:e6:6d:99:7c:35:67:60:
2b:c9:32:1f:ad:f6:b9:ec:d3:cf:22:f7:b6:f6:c4:
a5:25:30:49:33:41:9b:11:2b:49:6f:74:99:76:f4:
79:37:86:82:16:6a:fe:c9:a1:01:d6:3f:ee:f8:46:
3a:96:21:a2:18:21:c9:ea:4a:61:0f:d7:69:90:19:
d7:0b:f0:ad:ce:1c:16:88:72:94:a6:b8:28:e0:df:
09:19:5e:c8:a0:ce:cb:81:13:63:f8:16:64:4e:5c:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3F:CC:82:7E:3C:87:8C:34:9B:7E:BA:03:79:78:30:CB:05:6B:1C
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2c:10:34:59:4e:ac:0b:be:cf:83:d5:ab:59:a7:18:33:3f:
42:eb:00:9c:34:29:1b:b1:7c:32:6f:da:70:aa:9b:47:20:91:
4a:be:ea:77:7a:ed:a6:f3:dc:5a:a2:93:6d:13:82:b1:53:94:
df:cc:e2:89:16:e1:1e:a2:81:99:f6:eb:91:5c:15:41:44:cf:
c7:95:92:85:4c:3a:66:00:33:47:1e:1e:c3:e5:22:43:a5:68:
51:ec:49:8a:1e:62:c8:36:47:8c:99:cf:48:4e:bc:a4:52:13:
89:83:15:3c:69:23:13:eb:f3:ed:00:1e:37:ad:ee:fb:97:dd:
ec:10:4e:d3:b7:65:e3:fc:66:5e:00:58:86:e3:25:5c:e4:36:
59:f5:8f:01:33:fb:60:21:1a:44:00:e6:48:31:c4:ec:76:6b:
10:ee:00:f0:b2:02:48:cb:90:8d:8e:df:f2:a9:9b:13:24:2f:
90:c8:8d:cc:a9:6d:94:c1:fa:9d:50:c3:34:2e:4d:c5:c3:df:
0f:4b:17:85:73:7b:c5:15:c9:11:55:e1:9f:b1:9e:0b:2a:97:
0d:11:1f:cb:66:38:5c:45:a6:84:ff:49:94:b8:4a:e5:22:fc:
2a:62:b8:e5:cf:95:53:4c:c4:a7:27:bd:be:78:c1:0d:4e:48:
7b:93:37:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:20 2025 by rpki-client