Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
File: YMZLBPqPX-5oZvXHn499zqUBJRU.mft (raw, json)
Hash identifier: mRwlbTP7pJM5LeKCjts8yVe8VfsxFnVGLggGQ7HKkqM=
Subject key identifier: 8F:A1:50:EC:76:29:03:D9:B6:55:E8:FC:A1:D7:39:17:0C:D3:24:80
Authority key identifier: 60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
Certificate issuer: /CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Certificate serial: 019511A2E6D23A52607277FBA841C5A85650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
Manifest number: 1046
Signing time: Mon 17 Feb 2025 02:00:43 +0000
Manifest this update: Mon 17 Feb 2025 02:00:43 +0000
Manifest next update: Tue 18 Feb 2025 02:00:43 +0000
Files and hashes: 1: Q9vdhvNHwOEEPnjfpoIoeq4pq_E.roa (hash: AjW64DrutKx53AvwTAQKpO/FJMGHUcE1ZDsQqqfuNRE=)
2: YMZLBPqPX-5oZvXHn499zqUBJRU.crl (hash: 6GlpEqq+sPXksj0kMT16shsblkgs23YELKNtttjptNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:e6:d2:3a:52:60:72:77:fb:a8:41:c5:a8:56:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515
Validity
Not Before: Feb 17 02:00:43 2025 GMT
Not After : Feb 18 02:00:43 2025 GMT
Subject: CN=8fa150ec762903d9b655e8fca1d739170cd32480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:3b:9f:c3:3e:94:60:50:72:d7:9a:d6:52:
f8:1d:23:ec:e0:b9:f5:9e:37:9b:de:dd:5e:dc:40:
ae:44:11:13:3b:15:01:ea:dd:1e:76:40:5f:2f:24:
15:d5:65:6e:c5:80:2e:3b:fb:c5:b6:94:4c:b8:c6:
64:92:01:ae:38:90:31:dd:49:2f:61:0d:01:06:79:
a7:31:91:64:a3:2a:91:4e:74:15:32:4d:92:89:6b:
ab:b7:16:52:a2:81:f7:be:63:26:80:a3:0d:4d:b5:
00:b6:a6:3f:d0:bd:04:41:1a:d9:dd:8c:e5:d8:0b:
95:70:f6:2b:dd:0e:a6:eb:be:c5:e6:b8:53:a7:0b:
56:46:63:89:76:80:e0:80:d6:1b:f9:6c:ba:e4:0e:
42:7f:01:87:e2:e4:a3:c1:46:4e:91:84:87:71:3a:
88:59:c5:33:e9:68:c9:b5:77:04:71:c7:55:c7:49:
a2:ce:27:06:18:09:90:b9:f5:53:c8:c0:d3:92:f2:
b8:21:0a:03:61:3b:75:27:b3:68:d7:62:22:41:f6:
64:52:5c:1d:c0:6b:d6:92:8b:c7:2f:d9:51:84:fb:
de:96:d9:83:eb:0e:61:55:f7:ce:95:ed:b4:00:ba:
fe:f6:2a:11:35:e0:8b:92:7a:f6:a8:bd:64:36:6b:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:50:EC:76:29:03:D9:B6:55:E8:FC:A1:D7:39:17:0C:D3:24:80
X509v3 Authority Key Identifier:
keyid:60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:19:95:8b:d4:e7:75:ea:ff:0e:cc:4c:1e:86:61:f7:74:04:
d2:3d:0b:34:62:7f:05:c5:88:37:59:a7:d3:f2:c9:27:a6:db:
29:00:a4:a2:ec:01:1e:b0:86:1b:91:af:f4:f3:e2:76:c7:33:
a7:b0:c6:4e:af:29:09:74:79:11:70:70:34:fc:e4:8d:d2:50:
70:9c:e4:56:76:6b:90:4f:57:89:c4:c8:54:83:02:af:f2:5e:
21:5b:66:4a:d8:8c:62:96:66:94:a3:17:5c:31:5f:8a:50:e1:
31:a1:db:f0:db:0e:9e:75:c5:e5:91:06:68:52:6c:98:81:ee:
88:c8:61:07:5f:64:e9:20:5f:00:1c:f3:cf:1b:41:c6:51:11:
9f:a5:10:29:28:87:40:2e:3f:69:e9:22:e2:c0:0b:d8:13:8d:
ed:c6:23:31:21:d8:83:74:e2:99:4e:fa:84:68:f2:85:83:f5:
f3:63:e9:cd:0c:6d:67:81:98:64:0e:ad:c4:be:08:54:29:9d:
35:c0:f6:c0:f6:f7:7c:22:0d:2b:f0:19:a5:1c:b2:f1:77:1e:
59:59:74:7a:e1:54:2c:ef:d5:d5:b2:32:73:ca:bc:7a:a4:a8:
b3:77:d9:40:cb:5b:1e:93:07:97:56:0d:37:61:d3:6b:c8:1b:
46:e7:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:52 2025 by rpki-client