Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
File: yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json)
Hash identifier: g39cyGFjrt8YsnlNZtxhkAeVlOa+Grng6jLNFCem+7o=
Subject key identifier: 1B:B6:DB:CF:AC:6B:45:DD:95:19:85:FC:7C:54:03:E7:35:FE:63:65
Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
Certificate issuer: /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Certificate serial: 019510C716D3677C8F47CB223EDF86E6590E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
Manifest number: 095C
Signing time: Sun 16 Feb 2025 22:00:37 +0000
Manifest this update: Sun 16 Feb 2025 22:00:37 +0000
Manifest next update: Mon 17 Feb 2025 22:00:37 +0000
Files and hashes: 1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: Diztk1meBYDc0lIBhRPSJYNXpOBBBn0yibGoh2dcV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:16:d3:67:7c:8f:47:cb:22:3e:df:86:e6:59:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Validity
Not Before: Feb 16 22:00:37 2025 GMT
Not After : Feb 17 22:00:37 2025 GMT
Subject: CN=1bb6dbcfac6b45dd951985fc7c5403e735fe6365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:76:7a:90:b3:18:86:20:25:56:b8:00:51:
06:39:de:64:0e:e9:8c:84:58:30:fa:be:6d:15:e4:
1c:39:97:0d:11:ea:ac:1e:ef:13:3d:7d:eb:a2:42:
12:84:4c:5f:3d:cd:6f:46:19:b2:ae:c0:7e:ce:06:
67:01:94:4a:74:c8:e2:94:95:f9:7c:c8:f4:4e:56:
08:53:06:96:b2:7d:b6:25:7f:48:65:1d:ef:7e:43:
53:06:24:c2:0a:28:0c:8d:e0:be:c6:ee:0f:b2:b7:
ff:af:d6:c8:1e:5c:e2:1c:04:ae:ed:1f:08:77:d4:
89:19:c6:3b:ee:08:8f:fe:b4:4e:ee:41:93:f6:29:
e9:db:65:0e:2f:c9:d6:6a:86:9a:e6:cd:81:ce:89:
cb:6b:04:3a:dc:ef:8a:2a:2b:a1:d6:ae:cc:6e:5b:
ab:0f:0d:55:ac:a5:77:58:07:33:e6:ae:cd:d4:57:
ac:56:34:7e:ec:01:3a:1e:33:e2:c7:10:50:f9:20:
d3:a6:19:38:a0:78:bf:44:53:bd:40:f6:f4:76:4f:
f3:ee:5b:92:8b:fd:b7:0d:d0:4b:38:62:4f:d7:ff:
cb:f1:e2:95:67:f8:7c:f2:a5:14:22:54:10:19:08:
28:9d:ae:16:49:d7:8b:7e:28:f1:ac:e9:f1:c9:45:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B6:DB:CF:AC:6B:45:DD:95:19:85:FC:7C:54:03:E7:35:FE:63:65
X509v3 Authority Key Identifier:
keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:31:ba:b7:cb:a3:25:ce:20:49:fe:87:10:74:ff:a6:c7:88:
c4:c0:eb:68:60:5e:dd:64:a3:48:a0:38:e3:cd:5d:4f:c3:68:
58:36:92:9f:ff:84:f8:d8:2e:c9:a4:11:6b:b4:b9:56:b3:62:
75:66:0c:bc:d8:6b:e7:be:82:6e:18:e5:6c:ba:b9:7f:36:2e:
1a:b5:fb:e3:d0:a3:96:15:e9:40:e0:af:c1:36:e1:8a:90:c7:
21:9d:f7:81:ba:51:4f:e1:18:f1:9c:ba:86:d0:95:1b:95:2d:
68:f8:1a:27:61:64:27:c3:6b:cc:33:f5:01:c5:88:d1:32:8c:
71:79:d5:13:c5:06:4f:d6:01:b4:da:16:57:f8:5e:95:79:9a:
7f:9d:5f:38:b3:f5:dc:44:ee:a1:cd:87:b8:a8:08:2b:de:5e:
90:90:db:00:b5:14:7c:e7:74:64:29:3b:de:16:5a:e5:a9:df:
dd:92:8d:f9:ac:bc:ea:7c:bd:f3:89:77:08:05:3a:e7:fe:4b:
cd:5b:d2:9b:5c:3f:fd:68:1d:15:7a:c0:33:cc:65:30:78:df:
bf:23:5f:9f:6b:f7:ef:57:36:ec:ba:d3:43:7b:da:15:04:ba:
b1:26:ba:35:a6:60:06:af:54:2e:8a:ff:d9:34:63:f4:65:ce:
f7:ea:a8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:07 2025 by rpki-client