Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File: YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier: l92Xex5QsUshNZ6dJKkDpYmSdfqJXtygTVscKhLb1iI=
Subject key identifier: 87:7F:4A:DE:EB:1E:E8:E3:2C:14:05:31:03:EC:60:58:32:1F:C3:7F
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer: /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial: 0194C3BEAD03D065B83A55F9EBD45FA72B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number: 0D16
Signing time: Sat 01 Feb 2025 23:00:40 +0000
Manifest this update: Sat 01 Feb 2025 23:00:40 +0000
Manifest next update: Sun 02 Feb 2025 23:00:40 +0000
Files and hashes: 1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: 9omOKChMhJVnOA8pePa0KJFZ3d6ADU29MyKdBh1aqa8=)
2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:ad:03:d0:65:b8:3a:55:f9:eb:d4:5f:a7:2b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
Validity
Not Before: Feb 1 23:00:40 2025 GMT
Not After : Feb 2 23:00:40 2025 GMT
Subject: CN=877f4adeeb1ee8e32c14053103ec6058321fc37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:ad:7f:23:d4:50:e9:b2:93:89:86:1a:fa:
61:54:f8:4f:03:16:9b:56:36:a5:db:05:a9:6e:d5:
a9:9b:e5:fc:b1:6b:96:57:48:f4:ac:e2:3b:ba:ac:
b9:22:07:f3:95:99:c3:d3:e8:c5:3f:96:31:88:49:
22:31:60:7e:52:c5:6a:ca:b7:92:0e:57:d5:aa:cd:
16:bb:c1:da:d7:a4:70:f8:bf:16:08:8d:80:21:b6:
7d:2f:1b:fc:c2:74:ff:f5:bc:f4:aa:f3:b8:de:02:
7b:6a:32:ce:7c:a0:17:7c:86:d5:74:f0:df:f1:a9:
5e:1c:91:53:78:06:f8:ff:ca:5b:c4:39:73:61:6f:
37:2a:45:3f:21:96:93:51:68:8f:46:a9:8e:ff:fe:
d2:77:4e:78:58:eb:58:54:fe:1b:3c:a1:b6:b1:8d:
e4:4c:9b:4a:56:90:83:21:86:b1:54:ba:f4:54:18:
4b:08:3a:64:22:1b:68:d7:d9:15:40:ef:e8:2e:01:
dc:76:c5:ea:75:4c:cf:50:b5:31:0a:aa:4b:dd:cd:
cc:f4:16:56:b0:29:83:ae:01:9e:cb:80:b7:23:10:
fa:1d:cd:59:29:47:cf:74:7d:2e:21:5f:91:ac:2e:
98:ea:af:34:02:30:c9:23:ac:31:94:3e:e3:35:d4:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7F:4A:DE:EB:1E:E8:E3:2C:14:05:31:03:EC:60:58:32:1F:C3:7F
X509v3 Authority Key Identifier:
keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f5:b3:09:4c:53:51:13:95:a9:fd:ed:ad:2b:38:7c:d4:1c:
5b:e7:4e:b2:4f:e3:e5:44:2d:76:e8:3e:bd:8d:46:26:47:5a:
8b:db:c8:94:3b:b3:b1:f1:a9:b0:ee:3d:20:79:df:d1:01:10:
0c:c3:4f:16:fc:0c:83:5c:a1:61:f1:03:85:cb:45:be:15:ce:
b7:e2:19:cf:79:28:25:44:34:33:f4:ab:ed:71:39:ca:98:5a:
b2:26:a7:1c:f8:ae:40:f9:9f:bb:aa:58:79:30:53:1d:0c:4f:
55:ed:71:45:69:64:16:03:e9:6d:c8:d2:67:e4:7d:f7:cd:75:
20:c2:60:b8:39:37:05:20:af:00:a2:43:81:c2:35:09:02:da:
3b:f7:6e:6b:a6:d6:65:82:cd:ed:37:da:46:9d:b0:c9:c1:a4:
66:33:38:b5:00:01:46:2c:90:28:b6:07:0d:82:44:ee:76:7a:
e6:27:4c:eb:80:45:f9:18:a0:1c:fd:69:df:4c:eb:7d:45:f1:
21:46:b1:58:bc:ac:9e:93:ac:f0:e0:5a:4c:d7:60:bf:93:34:
fe:54:ad:c4:f2:6d:5f:6f:24:3b:f5:2e:37:f1:a4:ee:70:df:
c4:44:79:e2:19:26:f3:0e:7e:a7:c7:73:02:d2:72:d7:76:ae:
fb:f7:06:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:28 2025 by rpki-client