Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/yuDyZX221YxEden7gXNW4u3SzA8.mft
File: yuDyZX221YxEden7gXNW4u3SzA8.mft (raw, json)
Hash identifier: M50FYyZHMomFWvBZtmaAWFdx6kJSLv152vapF76G+A0=
Subject key identifier: B7:C9:4D:8F:61:A2:38:73:AF:68:AB:D0:D2:27:D5:55:94:4E:39:8E
Authority key identifier: CA:E0:F2:65:7D:B6:D5:8C:44:75:E9:FB:81:73:56:E2:ED:D2:CC:0F
Certificate issuer: /CN=cae0f2657db6d58c4475e9fb817356e2edd2cc0f
Certificate serial: 0194C3F62D1F878E51528B99F6643731D631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuDyZX221YxEden7gXNW4u3SzA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/yuDyZX221YxEden7gXNW4u3SzA8.mft
Manifest number: 100A
Signing time: Sun 02 Feb 2025 00:01:18 +0000
Manifest this update: Sun 02 Feb 2025 00:01:18 +0000
Manifest next update: Mon 03 Feb 2025 00:01:18 +0000
Files and hashes: 1: yuDyZX221YxEden7gXNW4u3SzA8.crl (hash: IRHKGyT8k1fL4UESu12NOqXb86ppvBOR2pbHEbeKrcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/yuDyZX221YxEden7gXNW4u3SzA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/yuDyZX221YxEden7gXNW4u3SzA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuDyZX221YxEden7gXNW4u3SzA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:2d:1f:87:8e:51:52:8b:99:f6:64:37:31:d6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae0f2657db6d58c4475e9fb817356e2edd2cc0f
Validity
Not Before: Feb 2 00:01:18 2025 GMT
Not After : Feb 3 00:01:18 2025 GMT
Subject: CN=b7c94d8f61a23873af68abd0d227d555944e398e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:2e:78:99:d2:a5:41:c1:c8:b3:7b:91:9a:
76:79:ca:45:d2:bc:49:1c:22:44:54:20:a4:a6:99:
ef:34:46:f6:70:0d:aa:90:ec:05:94:18:c6:50:14:
04:92:83:5d:11:8b:4c:f7:b7:f3:c5:bc:93:4a:4e:
60:19:1d:e3:d6:ee:24:ba:3e:52:49:17:0f:cd:c2:
69:8c:b7:86:3f:4d:a6:b7:90:f9:0e:3f:99:0c:00:
f8:bb:8f:56:cc:70:6e:74:aa:24:10:69:fc:cc:e7:
c5:7f:f9:a3:ba:b7:cc:98:d6:e8:59:9a:fa:44:07:
c3:63:e7:e9:39:55:23:c8:d6:7a:65:54:44:c6:ad:
1c:e6:2c:19:af:56:de:cc:3d:4b:08:ff:d2:c2:33:
72:fb:01:5d:5f:e8:b5:48:da:10:74:2a:a7:5a:36:
ff:c4:3a:3e:7e:e2:d8:06:51:0c:ad:cc:5f:e3:cb:
7b:4a:9f:61:f1:a1:46:50:33:15:77:1a:55:0a:57:
67:12:42:fd:8b:a7:d8:b1:ca:91:bd:8c:01:6f:75:
f3:22:80:27:40:f5:6d:b7:7b:59:90:52:40:17:eb:
27:d7:84:03:25:31:82:ed:22:fc:17:50:1a:27:99:
dd:b6:ba:48:97:dd:da:86:a3:0c:a0:46:82:fa:33:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C9:4D:8F:61:A2:38:73:AF:68:AB:D0:D2:27:D5:55:94:4E:39:8E
X509v3 Authority Key Identifier:
keyid:CA:E0:F2:65:7D:B6:D5:8C:44:75:E9:FB:81:73:56:E2:ED:D2:CC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuDyZX221YxEden7gXNW4u3SzA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/yuDyZX221YxEden7gXNW4u3SzA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/037ff1-69b9-44b4-8c0e-a19a3beb15b2/1/yuDyZX221YxEden7gXNW4u3SzA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a2:2a:64:35:bb:5a:9b:d1:af:35:ca:b6:61:3e:6a:12:4e:
13:f2:0a:a0:89:80:2e:8b:a5:14:ec:b6:5e:f7:0b:0f:c3:c1:
61:4f:be:c4:a3:f3:7e:9f:df:17:18:e9:ed:46:1e:53:f3:9d:
2b:3a:5e:25:7f:aa:1e:43:1e:15:8b:95:4b:0c:45:85:89:a4:
04:23:a1:78:54:84:47:f8:88:fa:8e:1d:df:2a:73:20:92:77:
f1:68:4e:eb:4a:3f:01:d8:6f:bb:54:22:fb:a4:0a:3b:40:52:
af:05:12:57:82:b4:dc:dc:e7:ff:09:65:c1:4a:25:8c:00:5b:
64:23:f0:f3:3c:d4:fc:71:44:cd:4e:5f:e9:e3:f7:1c:aa:67:
a1:5d:c4:97:87:b0:82:00:ff:3b:1b:1a:c7:bd:25:69:35:a2:
bc:3d:18:d5:a1:c1:f0:85:46:fe:ec:1b:ef:32:df:3e:74:24:
68:86:48:d9:d2:e1:c5:a1:6d:3d:10:c9:56:5d:ce:16:c3:3d:
d6:dd:8c:5e:ae:c2:96:59:5d:e1:2e:92:15:b4:3f:f3:6b:c7:
99:4d:3c:be:d0:a8:7f:25:d7:87:2b:75:c6:46:4b:b5:ed:20:
4e:c3:c7:8b:cd:dc:78:e7:ea:7d:36:33:aa:3f:43:aa:9b:fc:
ef:6f:39:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:24 2025 by rpki-client