Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json)
Hash identifier: 0y+XJ2Mlw3IH2K24XCP36e1bqRmQwJCtCIgvgC3AVmg=
Subject key identifier: 90:00:3F:F1:F8:CB:CE:84:CC:AC:AE:EA:50:25:2D:CC:76:F3:00:B1
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial: 0194C3F5C3E627CE3FED3560A0A18B57E72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
Manifest number: 06D4
Signing time: Sun 02 Feb 2025 00:00:51 +0000
Manifest this update: Sun 02 Feb 2025 00:00:51 +0000
Manifest next update: Mon 03 Feb 2025 00:00:51 +0000
Files and hashes: 1: COcUW0x5kxM0ZoYaE6bjH_ilI5I.roa (hash: DiDBhNFDOT29doleyEuXM5Xz1UWaH+5+crJRRQCdBnI=)
2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: kniR5ZdXaJrnsXpmNoLaiKxSSAEWljj2yBoUyF4Pl3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:c3:e6:27:ce:3f:ed:35:60:a0:a1:8b:57:e7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
Validity
Not Before: Feb 2 00:00:51 2025 GMT
Not After : Feb 3 00:00:51 2025 GMT
Subject: CN=90003ff1f8cbce84ccacaeea50252dcc76f300b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:2d:de:9b:43:1b:01:87:14:f5:92:90:62:
7f:2e:3e:7d:de:d4:37:91:44:25:ae:c9:c1:ad:31:
68:d7:18:dc:44:12:81:b0:b4:a5:f3:e5:66:ad:d0:
60:e5:9b:46:30:d9:a2:ae:ce:ad:c1:38:33:21:fe:
ba:ef:e2:d4:04:97:8f:d6:81:d3:5f:f1:5b:01:0d:
5f:50:ac:bb:5d:dd:4e:55:2c:2b:f6:83:9a:49:67:
a2:bd:2c:64:6b:24:2f:8c:ef:5b:0f:b5:a9:78:c0:
32:16:c3:e8:10:26:d2:5b:cb:33:89:bb:81:96:87:
7e:ba:17:03:fd:ce:49:04:cd:e6:01:e4:cb:48:a1:
89:83:65:38:a5:cd:40:6a:40:cc:12:25:58:d7:bd:
b4:25:80:f3:2c:3b:a2:6d:cb:c0:f8:1b:7a:10:b8:
70:25:55:b0:74:84:5a:d3:7c:b6:ee:5e:1c:1a:a8:
4e:e1:93:80:39:94:c6:5f:3e:94:dd:62:15:b1:56:
6c:a0:43:42:c7:f7:d6:c9:a6:3b:b5:0d:27:77:5a:
43:9e:f6:ee:08:25:5d:e6:93:43:b7:01:e6:78:d7:
bc:9a:5e:3b:f3:1a:c1:91:df:ea:bd:20:0d:78:17:
f2:8d:55:f5:41:11:34:f3:01:4c:25:d2:1e:31:f9:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:00:3F:F1:F8:CB:CE:84:CC:AC:AE:EA:50:25:2D:CC:76:F3:00:B1
X509v3 Authority Key Identifier:
keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:70:f8:66:0b:bd:04:f7:ec:97:bc:2b:67:9d:7b:33:28:ae:
fd:82:64:7d:07:05:7d:71:57:9a:f6:74:4d:b0:b6:e0:59:b8:
e4:62:99:a9:ed:ad:e1:00:2a:88:54:1a:c6:f1:a9:9e:83:77:
20:1c:db:22:b7:e4:a6:d5:a0:6a:ae:e8:f8:3c:87:71:25:35:
37:f5:44:fa:04:73:c1:49:69:23:65:8f:eb:9e:4b:e2:a2:be:
e3:ce:83:77:fc:98:c0:ae:d6:90:ea:4a:0e:d1:98:8d:ef:0c:
f6:7b:3e:84:5e:94:08:e7:28:c1:3c:b1:ac:8c:b1:b4:2e:7e:
a4:1d:0e:89:92:e5:1b:cf:25:43:7c:32:25:47:72:58:bd:6f:
1a:db:e6:06:7a:dd:ff:6f:c5:e8:7a:ae:3d:d6:be:f8:56:87:
f2:2d:64:4a:ac:77:1b:ae:70:46:4d:dc:76:1d:c2:83:c7:5d:
bc:a6:f5:c1:bc:e3:e8:37:e8:8d:d5:4e:61:78:9a:b7:1a:08:
de:1b:12:63:eb:2e:79:ed:32:74:2e:37:8a:f8:7c:22:6d:2f:
af:de:ed:d0:44:31:1d:1a:06:39:39:26:25:33:ce:ca:6d:52:
f0:2c:71:95:37:9e:c7:31:0e:97:b8:2d:0d:7b:2d:1e:73:18:
3b:bf:4d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:44:33 2025 by rpki-client