Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json)
Hash identifier: O/bdy165Nuf8zdtkAXTVAiPthAZ901z1vA7TfD384MY=
Subject key identifier: B3:E3:93:07:B3:19:D5:91:35:80:24:97:CF:75:9B:10:04:E9:F5:13
Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Certificate serial: 0194C3889673045304FC730030BFE177827A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
Manifest number: 142A
Signing time: Sat 01 Feb 2025 22:01:36 +0000
Manifest this update: Sat 01 Feb 2025 22:01:36 +0000
Manifest next update: Sun 02 Feb 2025 22:01:36 +0000
Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: 4qV4F6MBBcASaEFkiuYAU5Fl37P0HsZ/t79rPLotkcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:96:73:04:53:04:fc:73:00:30:bf:e1:77:82:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49
Validity
Not Before: Feb 1 22:01:36 2025 GMT
Not After : Feb 2 22:01:36 2025 GMT
Subject: CN=b3e39307b319d59135802497cf759b1004e9f513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:de:fa:9a:1a:2b:cb:fa:f7:33:8d:9e:a2:
a0:71:ab:c2:5c:34:fa:0c:49:23:35:4f:15:ed:e1:
f9:1d:85:30:f3:9a:72:20:cb:31:39:82:4d:9c:9d:
a6:43:4c:de:f6:61:8c:ed:01:2a:b1:bf:cb:51:38:
e6:3d:f4:67:17:df:33:65:d9:33:b2:46:bc:df:c3:
11:0f:64:1d:0f:4e:62:98:07:34:c4:10:83:cb:91:
08:c3:13:2f:89:e9:28:b3:38:0a:09:07:e6:a9:a1:
ed:07:00:72:43:ea:05:ff:48:86:19:29:41:fa:3d:
e4:bf:b2:57:a2:83:dd:a2:90:d8:47:94:4a:c0:ab:
49:31:d9:70:20:b6:f5:35:b3:9e:c8:97:32:e1:86:
ec:9d:b7:5c:0c:25:30:47:d8:20:0e:02:9b:88:6b:
1b:e1:25:6b:c2:b3:8a:aa:59:e8:d4:fd:50:dd:65:
7f:be:9f:cf:f0:2b:6b:88:1f:c0:72:2b:f8:f6:54:
38:c5:f0:ba:27:67:94:08:80:f3:d6:d3:74:d4:90:
d9:06:06:87:a8:7d:ec:87:ee:26:3f:a0:eb:56:24:
a1:41:b8:ae:b5:88:b7:0e:e2:19:01:fc:94:21:01:
9e:9a:fa:44:5d:4b:4d:d9:cb:fb:08:ff:ca:56:97:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E3:93:07:B3:19:D5:91:35:80:24:97:CF:75:9B:10:04:E9:F5:13
X509v3 Authority Key Identifier:
keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:03:77:f8:25:db:9f:3a:66:48:db:da:12:38:53:e9:cf:a1:
41:fd:31:17:6e:70:ff:31:36:f9:ce:93:eb:9f:67:ab:64:6e:
fc:8a:3c:98:6b:53:8c:24:bc:35:df:a5:40:33:ba:65:f1:af:
83:95:f7:52:f2:e8:2b:12:e8:5f:20:37:21:cc:22:50:45:77:
8d:c5:f5:01:ec:cb:14:3f:4d:e0:b2:c5:5f:1f:51:15:f5:d4:
7d:1e:0a:71:98:c0:d6:c9:5c:ea:d4:a6:ef:26:20:67:9b:01:
b0:a6:bf:72:13:55:68:6c:70:fa:23:25:8c:fc:05:89:5e:2d:
bb:9b:94:5e:f7:0b:5f:38:c6:2d:05:92:17:ed:21:c8:2e:8f:
6f:d4:39:b5:57:5d:a0:f1:d6:90:97:ff:15:d6:56:45:49:ea:
60:74:08:ab:ee:e5:02:63:30:1c:67:07:c1:aa:f1:92:53:ff:
d8:7f:fb:1b:d2:ce:ec:b1:de:fd:57:8b:dc:59:d3:20:e6:cb:
3e:02:42:80:81:e3:78:5f:b0:f9:87:ae:fe:08:0c:a6:aa:91:
3e:d7:ab:38:ab:e4:e2:d5:d5:c1:b8:91:84:0e:28:a5:b9:7f:
11:a7:38:3b:9e:2b:03:e4:c0:61:56:8b:f2:84:5b:35:37:5d:
9b:a6:73:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:51:09 2025 by rpki-client