Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier: q4izJoYRPPeqor7WrOymhU+XHnzf7HmibiBKTRHT3cA=
Subject key identifier: E4:19:07:F9:77:AF:BA:21:A9:89:7F:C7:29:A2:5B:65:6C:9E:D5:3D
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 0194C3199F463CA5F96B1777B6C5C1151CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number: 0E93
Signing time: Sat 01 Feb 2025 20:00:23 +0000
Manifest this update: Sat 01 Feb 2025 20:00:23 +0000
Manifest next update: Sun 02 Feb 2025 20:00:23 +0000
Files and hashes: 1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: YpiPsNL3UTz7aSFVP7OQNntoq6l+AnR+sEWFKHdwcpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:19:9f:46:3c:a5:f9:6b:17:77:b6:c5:c1:15:1c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Feb 1 20:00:23 2025 GMT
Not After : Feb 2 20:00:23 2025 GMT
Subject: CN=e41907f977afba21a9897fc729a25b656c9ed53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:20:e6:9f:32:08:fe:98:1b:1c:d9:e5:70:
81:38:3b:fa:d0:fd:75:73:92:1f:e8:7c:29:6a:dc:
14:00:42:ac:8d:34:64:73:da:11:a5:a9:b0:91:87:
4f:76:03:c3:dd:f2:99:e5:c0:5d:5a:d3:c5:0f:30:
b0:07:06:e8:ff:34:f3:81:55:a5:47:12:09:9e:aa:
66:da:55:99:53:15:69:ac:2e:68:87:2f:65:d9:2f:
20:b9:f9:1b:6f:7b:85:f0:8f:bc:10:ac:8b:65:72:
f3:43:29:bb:8f:f1:5a:a8:d3:ab:de:dc:fb:95:1b:
01:bd:73:0b:5d:04:73:22:ee:6b:98:e8:d0:bd:dd:
b4:61:08:e0:31:bc:e8:e5:c3:06:87:f5:f0:38:5b:
ae:54:c9:09:da:99:1c:56:d9:33:2d:86:42:c3:14:
45:08:3d:cd:24:aa:a2:af:5f:41:ad:0a:eb:73:ac:
b3:7c:4a:75:9e:02:52:46:51:07:69:95:b4:6d:69:
21:97:92:6d:e9:19:a5:4a:19:8f:6c:a5:d2:b4:3c:
23:f2:ea:29:3f:5e:b2:21:45:7c:2b:ca:d0:2e:bf:
22:1f:6c:b1:83:4b:3e:97:a6:db:41:4c:03:16:1c:
19:03:b5:8d:01:66:62:40:13:fc:c1:dc:87:b8:db:
7f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:19:07:F9:77:AF:BA:21:A9:89:7F:C7:29:A2:5B:65:6C:9E:D5:3D
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:98:ec:32:35:d8:5c:94:2f:31:98:8c:90:89:05:fd:4d:fe:
9b:77:11:67:c7:88:e6:f9:57:57:a4:70:c3:08:29:21:72:6a:
d4:89:f9:9f:6c:9a:ef:c5:05:0a:f8:7d:44:66:ac:f6:b3:e0:
fa:2c:92:3c:32:cc:15:da:bb:a8:ee:00:be:9e:01:eb:ec:96:
b1:5a:aa:bb:a9:de:6f:48:44:5f:4e:52:57:04:d0:8a:53:b0:
f4:cf:8a:74:0e:b2:87:c4:57:60:d9:a9:5f:c5:63:93:8a:fd:
b2:ba:b9:6a:fc:81:0b:0c:5e:b7:bc:71:0c:b0:ba:d1:16:88:
8e:f1:7b:e1:52:19:1e:34:2c:ff:c3:5f:23:5c:2d:a3:3f:16:
21:32:ea:34:65:51:dd:97:49:c9:97:33:4b:f7:df:fc:fe:06:
4d:2e:d3:e7:b8:e7:52:32:82:30:96:d5:db:18:88:40:45:5e:
e7:04:18:a1:cb:0f:2b:1a:94:09:4b:d4:f9:e1:0a:68:16:8d:
53:a5:6b:4a:bc:e2:22:97:b6:26:f5:e3:bf:5c:0a:f1:70:f3:
ad:82:e1:24:5a:4b:c5:79:16:b1:d5:61:09:d2:20:63:4e:ab:
36:73:aa:1d:30:27:92:1a:80:28:13:bd:c9:d6:38:6d:f8:b4:
74:af:de:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:44:08 2025 by rpki-client