Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
File: yrjSpYc51mIvFaU8wb1U-dsIAcY.mft (raw, json)
Hash identifier: Tb6f9J4a0YJFtcvggN9pbVYhyCBvyN2QorWXO3QlqWw=
Subject key identifier: 4B:85:C8:C2:6E:40:48:EC:D0:FC:7E:A5:84:A9:FA:5F:9D:7D:A1:A5
Authority key identifier: CA:B8:D2:A5:87:39:D6:62:2F:15:A5:3C:C1:BD:54:F9:DB:08:01:C6
Certificate issuer: /CN=cab8d2a58739d6622f15a53cc1bd54f9db0801c6
Certificate serial: 0195116C1418BE690A50BB036FB336702D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
Manifest number: 028D
Signing time: Mon 17 Feb 2025 01:00:50 +0000
Manifest this update: Mon 17 Feb 2025 01:00:50 +0000
Manifest next update: Tue 18 Feb 2025 01:00:50 +0000
Files and hashes: 1: yrjSpYc51mIvFaU8wb1U-dsIAcY.crl (hash: RMPkz1sj90kmBgsJ5HcuA9lqqRuLdp8TfEMzIiLnWWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:14:18:be:69:0a:50:bb:03:6f:b3:36:70:2d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab8d2a58739d6622f15a53cc1bd54f9db0801c6
Validity
Not Before: Feb 17 01:00:50 2025 GMT
Not After : Feb 18 01:00:50 2025 GMT
Subject: CN=4b85c8c26e4048ecd0fc7ea584a9fa5f9d7da1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:9c:62:0d:dc:20:ed:41:00:85:2c:a2:c7:
c1:80:ba:72:57:bf:77:6d:44:c5:72:07:ac:3e:a3:
d8:3e:5f:1b:a5:5e:fc:6b:4b:be:54:36:3c:0d:5c:
6e:98:c8:18:c1:fc:e5:db:f3:2f:cc:6b:f7:2c:cc:
b5:17:7a:c0:ef:af:c0:c0:b6:51:26:07:ee:cf:48:
c5:e7:6e:4f:89:d2:8e:8d:ee:bb:21:53:be:71:b6:
a2:74:4a:2b:ed:3a:97:02:e5:8a:e2:e4:6c:fb:53:
5b:2f:92:a4:5e:ee:40:2d:ef:c9:dd:65:83:b1:80:
3d:29:fe:b2:f4:0f:71:23:c6:c0:67:11:b0:9e:0e:
64:fc:e4:9d:12:b1:fc:e8:02:53:ac:7c:99:1b:ea:
da:bf:37:42:ce:55:20:b9:09:c1:66:13:68:ba:be:
a9:f1:20:56:5c:c0:6f:c4:d7:51:57:82:39:38:ce:
12:63:d6:26:90:26:aa:9a:be:4a:23:52:4b:c9:c1:
bb:df:11:8a:92:6a:09:33:a7:7f:28:b4:af:0e:ef:
c5:6e:7a:a7:62:43:f0:09:7d:f0:6a:3f:5c:3f:0c:
57:d6:5a:e2:d3:3d:e3:94:8f:de:91:45:0b:b4:62:
34:ba:a9:49:3a:e0:c2:ac:9a:bd:56:d2:98:37:dd:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:85:C8:C2:6E:40:48:EC:D0:FC:7E:A5:84:A9:FA:5F:9D:7D:A1:A5
X509v3 Authority Key Identifier:
keyid:CA:B8:D2:A5:87:39:D6:62:2F:15:A5:3C:C1:BD:54:F9:DB:08:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrjSpYc51mIvFaU8wb1U-dsIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/66cecf-bdfc-4278-ae03-ad1cde1b8542/1/yrjSpYc51mIvFaU8wb1U-dsIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5a:d4:0b:b4:78:d6:11:9d:80:3a:22:bb:f4:55:61:8f:c6:
ba:ff:cd:f4:ce:56:c7:f5:9b:a3:60:40:82:d5:a2:ff:70:2a:
f7:e9:05:9f:0f:0f:3b:54:07:4f:92:e6:72:6e:66:ef:fb:9b:
bb:0b:38:b1:ce:d4:21:c1:f8:48:ab:db:0a:c1:d5:34:8c:d9:
6c:3e:71:f4:c3:81:78:10:4c:dd:e7:f8:45:a2:70:01:ff:de:
62:56:09:92:61:d8:96:f3:4d:85:3f:06:a4:41:b8:f1:b9:5b:
92:82:5f:9f:bf:87:3f:96:e2:8b:64:ea:b0:20:e6:f4:86:f8:
9c:80:85:0c:30:ef:15:de:15:05:18:10:11:3c:62:e1:07:b3:
31:c1:cc:ed:a8:07:20:cf:65:35:63:65:27:b9:7b:61:c3:4f:
93:96:69:84:e7:42:b7:a4:56:e1:9c:ec:90:4a:81:da:9d:ec:
4f:7a:ca:09:12:2c:ca:28:5a:d9:ed:a2:78:cc:58:c0:5c:0f:
3c:8b:b9:1d:ef:a2:5c:d5:ac:92:f0:65:a6:7e:0b:30:b9:42:
d2:5f:1b:0e:fe:93:5e:8f:03:3f:ef:7d:17:5a:81:6d:f1:19:
9e:78:18:9f:76:52:b8:e3:cd:0c:14:8f:d3:23:1d:e5:e0:5d:
e3:69:79:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:26 2025 by rpki-client