Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
File: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft (raw, json)
Hash identifier: cbQyPWJT68fuh3tIbLoQBG/kMV8AVTVDKvgQS7CeCyk=
Subject key identifier: 8C:49:B6:90:75:54:42:64:6E:D4:38:2F:47:CC:D5:BF:CB:15:5A:CA
Authority key identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
Certificate issuer: /CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Certificate serial: 0194C46366CA2841FA03F7B94B75D0AC4EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
Manifest number: 1C
Signing time: Sun 02 Feb 2025 02:00:36 +0000
Manifest this update: Sun 02 Feb 2025 02:00:36 +0000
Manifest next update: Mon 03 Feb 2025 02:00:36 +0000
Files and hashes: 1: FRrrM4yAfnu6pnFh5wowlvqVDWA.roa (hash: Hv8/4ynB8VDf7OX62BWXwwqyCndg3mMaA+WdwhpJSlw=)
2: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl (hash: dwpnBC1ewIjqIUW3J7wttXiH+Xh1vJ5M6OyAWZN6H7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:66:ca:28:41:fa:03:f7:b9:4b:75:d0:ac:4e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Validity
Not Before: Feb 2 02:00:36 2025 GMT
Not After : Feb 3 02:00:36 2025 GMT
Subject: CN=8c49b690755442646ed4382f47ccd5bfcb155aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:7b:3d:54:37:9b:47:25:cb:d0:38:35:4d:
43:43:76:5a:dc:b1:87:e5:03:7a:de:4c:59:c7:a0:
a1:de:e7:04:bb:74:54:0b:e2:d6:3e:ff:f7:2d:d9:
b0:f1:0b:72:3a:b8:f9:da:a5:eb:e7:3d:a4:a5:36:
7e:89:09:33:a7:11:5f:3c:7a:1d:d9:b5:ca:83:93:
2a:04:ac:c8:b1:1e:02:aa:62:85:78:ac:ee:86:7f:
18:8b:42:23:9c:52:e1:98:17:7a:81:75:c8:f4:fe:
64:f4:52:89:62:4e:e1:23:94:18:a3:2f:16:37:52:
b7:99:0b:88:d9:d9:10:80:7b:a8:a1:16:18:79:9b:
d5:2e:d3:85:5e:cf:dc:9d:83:a3:85:8d:84:66:02:
ad:0d:1b:14:4f:13:bf:0c:e5:dc:fa:d5:d1:99:83:
e1:46:34:1b:19:54:2c:6b:6d:71:24:de:25:5b:d4:
96:55:1a:b5:03:69:c7:4c:5b:b6:f8:8d:e1:15:c3:
de:82:83:92:11:56:39:20:af:0b:86:6f:1b:d1:79:
8f:9c:73:51:25:00:1f:43:73:f5:8b:7c:ed:56:53:
37:25:23:14:c6:6e:e8:85:07:93:5f:2b:7d:11:bf:
5d:7f:7a:77:83:2a:22:37:ac:92:7a:5f:71:63:d1:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:49:B6:90:75:54:42:64:6E:D4:38:2F:47:CC:D5:BF:CB:15:5A:CA
X509v3 Authority Key Identifier:
keyid:62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d8:81:5d:f4:e5:a6:e4:86:4b:b0:3a:cf:d7:55:dd:51:93:
ff:54:32:60:b2:16:23:78:11:66:d1:76:ce:d7:e7:02:1a:f3:
0e:05:c9:d7:cc:d3:93:06:6b:fb:62:be:12:2c:1c:dd:6b:62:
d7:14:cd:fa:33:48:8a:56:c0:05:4b:7c:68:9c:9c:1f:bf:3d:
be:97:e3:3d:4d:84:24:f8:e2:c6:d0:32:15:52:32:02:6c:2d:
11:4d:a7:f8:69:54:e7:4b:10:b9:6d:de:a1:86:aa:79:c8:ef:
56:81:47:12:a4:c8:6c:e3:61:6c:76:57:a5:95:f2:f3:e9:69:
a9:44:da:e7:a1:62:4e:07:8c:4c:b9:e2:f0:f8:b2:d4:04:ca:
44:6a:98:47:14:73:ad:c6:77:75:81:c6:50:6a:cd:4c:b1:cd:
4d:8e:c9:18:fc:0f:91:dd:a2:2e:85:a0:bb:3a:1a:1c:ad:64:
92:0d:22:8a:53:98:18:ae:3b:51:8c:4f:f5:1d:a6:22:45:7c:
97:11:f8:a1:2b:7d:de:a3:b7:02:71:2c:ba:b5:1c:6e:ea:99:
59:07:bb:f4:65:5b:4e:06:24:88:a6:6f:9f:ee:a1:fe:38:b9:
2b:51:b9:20:f2:f8:67:fe:c8:e2:52:9f:4e:6d:ec:37:30:9d:
88:8c:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:06 2025 by rpki-client