Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
File: Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json)
Hash identifier: UDjD7cbI4NnERXrJvmq3uCxN7IawvX91UfMlErc0KJQ=
Subject key identifier: 43:A4:12:BE:FD:1C:F4:2E:BA:B9:63:3A:0D:AC:8E:6F:69:EF:E3:60
Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Certificate issuer: /CN=6309aeff6dfa89e675837e454521235c99b1be2f
Certificate serial: 0194C507FAB53C6C5620CF48B4027CE2B0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
Manifest number: 5A
Signing time: Sun 02 Feb 2025 05:00:21 +0000
Manifest this update: Sun 02 Feb 2025 05:00:21 +0000
Manifest next update: Mon 03 Feb 2025 05:00:21 +0000
Files and hashes: 1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: +mJGruJC2bI2wTSS/DOCpJr/71VhvDHIM2I+bnpC6OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:fa:b5:3c:6c:56:20:cf:48:b4:02:7c:e2:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f
Validity
Not Before: Feb 2 05:00:21 2025 GMT
Not After : Feb 3 05:00:21 2025 GMT
Subject: CN=43a412befd1cf42ebab9633a0dac8e6f69efe360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:a0:34:93:eb:dd:54:02:2a:4c:48:55:e9:
04:cf:d1:16:bd:e4:cf:17:b0:fa:2f:07:73:e3:47:
be:9e:5e:e5:2a:11:51:61:95:17:f0:79:9a:1c:20:
c2:4f:45:a3:e6:fa:ee:c2:17:d6:2b:40:e2:d7:47:
76:56:38:3a:5b:39:d2:f4:05:e5:f3:51:1b:ca:1c:
ce:e2:fd:df:a2:e6:f6:36:47:c6:9a:0d:b6:43:3a:
df:39:31:e2:26:b5:04:94:b0:9c:81:3e:75:63:63:
89:9f:cc:d3:b5:00:1b:3b:7d:97:c6:79:b3:6e:ec:
42:4f:14:ea:4f:25:66:0b:4a:37:9c:7e:99:d3:01:
dc:25:e1:8e:4c:e5:66:88:86:63:10:16:0f:c8:ef:
c3:1b:55:4f:67:29:4e:45:c4:bb:e2:c6:f9:15:fb:
b3:d2:d2:14:4c:58:3a:e9:91:e2:bf:fa:c4:21:f4:
da:85:3e:5a:4a:6d:7d:fe:dd:53:2d:f9:04:8f:eb:
ec:82:5a:88:c7:8b:8e:0d:21:eb:de:66:34:dc:d0:
d0:85:b6:85:8d:b4:90:11:2a:f0:78:77:ac:f1:bd:
0f:38:c3:c8:a5:96:b2:eb:be:86:7b:a9:91:61:29:
4e:76:53:d4:c5:ed:25:b8:74:37:ab:78:64:b3:0c:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A4:12:BE:FD:1C:F4:2E:BA:B9:63:3A:0D:AC:8E:6F:69:EF:E3:60
X509v3 Authority Key Identifier:
keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9a:70:41:16:47:34:cd:a1:78:5e:d8:17:61:d5:cb:9f:7b:
2f:50:62:de:bb:39:64:c1:6e:db:02:93:8b:13:4f:44:1f:de:
6f:04:62:54:fd:fb:a9:17:69:f3:fc:65:d4:6f:b8:c3:da:c6:
06:00:44:8c:3c:a9:9d:83:1f:77:50:01:10:65:f3:51:3e:20:
84:f2:cb:e3:7a:56:e9:78:5f:9e:86:df:a3:87:b7:d1:88:80:
f3:24:4d:bc:67:3d:d2:06:d4:51:b0:0d:4d:1b:97:bb:af:08:
d3:4f:f0:a6:2e:e7:6a:ce:3c:67:18:d4:f8:17:53:bb:43:44:
c3:80:a6:bb:56:e6:f6:2e:f1:65:56:a2:4d:84:24:77:c0:7c:
e3:cd:6d:64:a3:e8:48:54:c9:96:eb:3f:b2:ed:e3:2c:08:04:
25:cb:19:e4:11:7c:08:62:19:91:8b:bc:8f:43:71:fc:6b:72:
b0:c9:43:f6:7f:b8:19:cf:14:3c:07:60:8a:ca:ad:69:f7:c1:
de:01:fa:f1:70:ef:14:8c:fb:34:4f:5a:22:21:aa:94:35:8c:
db:96:42:74:28:1c:2f:ba:7f:52:ff:a1:66:d7:7a:7b:a7:64:
98:2f:f1:72:8d:3e:b6:78:d3:b7:5c:b4:fd:88:af:9a:76:29:
cc:b2:b3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:49 2025 by rpki-client