Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
File: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft (raw, json)
Hash identifier: yoy/g8qTs1aLHD50F2Ln19BMxTpVWR260luebRYKQ40=
Subject key identifier: CD:84:3E:1F:C1:C3:2C:02:AF:B0:F9:A7:BD:5A:2A:A1:6C:EB:25:02
Authority key identifier: C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
Certificate issuer: /CN=c95998989fdb5a5f932147ad7162c63004e067a4
Certificate serial: 0194C42C33509BE1ED3E4DEF7179FBD8B025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
Manifest number: 0911
Signing time: Sun 02 Feb 2025 01:00:18 +0000
Manifest this update: Sun 02 Feb 2025 01:00:18 +0000
Manifest next update: Mon 03 Feb 2025 01:00:18 +0000
Files and hashes: 1: yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl (hash: YNkiNqHWyvnX1Rv/3M+4FeArEPyR77yaQpc458WTnNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:33:50:9b:e1:ed:3e:4d:ef:71:79:fb:d8:b0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c95998989fdb5a5f932147ad7162c63004e067a4
Validity
Not Before: Feb 2 01:00:18 2025 GMT
Not After : Feb 3 01:00:18 2025 GMT
Subject: CN=cd843e1fc1c32c02afb0f9a7bd5a2aa16ceb2502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:a0:81:5f:9a:28:7f:1f:27:7b:3c:7c:49:
d1:6a:d0:f2:da:b3:68:ef:a3:e0:53:9a:5c:a2:da:
98:61:33:cb:9a:1d:99:4b:be:ba:14:46:c9:28:18:
a9:4f:a5:eb:76:ce:7c:a8:a7:74:9a:07:df:de:d4:
d4:b2:ef:2b:ff:b2:44:d5:37:55:ba:55:c3:9c:0c:
97:b4:51:e3:8d:26:f7:93:82:82:5d:12:3a:e5:c2:
2f:ad:b1:77:60:f2:ee:22:90:4a:99:4a:1c:db:2f:
0b:ea:d8:6a:5f:a9:4a:88:23:c7:25:28:01:56:f9:
de:ec:0f:5c:8d:ab:98:12:fd:a9:7c:97:f4:69:32:
a2:60:24:66:73:63:fc:50:2f:e8:6d:89:d8:3e:81:
70:53:e7:50:03:7d:b5:d5:ba:fd:27:8e:3b:8b:91:
e6:06:c2:5c:7a:68:6b:fa:49:b1:e9:7f:df:8d:f7:
45:c1:a3:64:69:dd:98:a9:16:fd:54:3a:fa:71:95:
c6:e6:38:ed:8c:c1:60:bc:a0:e2:3e:08:06:9c:dc:
02:cf:93:8c:91:ef:71:d6:27:7d:a7:07:dc:19:2d:
a4:fc:5f:91:5e:6e:f5:40:ab:4f:45:14:07:75:0a:
02:40:72:21:73:4c:0b:8c:c3:da:6a:05:39:14:38:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:3E:1F:C1:C3:2C:02:AF:B0:F9:A7:BD:5A:2A:A1:6C:EB:25:02
X509v3 Authority Key Identifier:
keyid:C9:59:98:98:9F:DB:5A:5F:93:21:47:AD:71:62:C6:30:04:E0:67:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/78c37f-2f69-4fec-a198-ccf528eb4dda/1/yVmYmJ_bWl-TIUetcWLGMATgZ6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:21:85:08:91:79:01:7a:2e:b2:6e:2e:a1:db:97:d8:d7:9d:
3d:16:00:46:a5:2c:62:fd:fa:87:0a:af:12:32:53:60:95:0e:
83:3d:e2:7e:45:64:0e:a2:5a:d9:6b:e9:38:b4:a1:ad:62:7f:
c8:f1:67:24:25:0b:38:7c:fb:ad:0e:81:f3:2c:05:93:23:61:
93:5b:8c:58:b0:95:c3:ba:a6:7c:fb:9f:77:14:55:88:f1:f7:
24:45:0c:d8:e8:b1:42:c7:b1:88:01:2c:a6:54:19:77:25:d6:
10:21:44:a6:71:a0:e3:91:8b:7c:06:73:99:4a:72:b1:67:dc:
ca:0d:ef:c9:e6:2d:00:d2:16:c8:b8:fe:84:77:39:12:6e:5b:
5d:87:97:3b:9a:a1:8b:e2:f3:0e:2b:ef:4f:b2:e6:54:fa:7a:
25:01:89:d4:ea:d9:1c:21:8f:dc:27:59:bc:1d:f1:35:c7:5b:
e0:32:ba:83:51:25:0f:e6:b4:93:8d:08:7d:a8:43:4d:3d:6a:
e1:f8:3e:4f:fe:17:5b:ef:6c:73:c3:20:c8:fa:ac:83:e8:43:
68:3b:e2:2c:9b:29:5f:71:a1:41:b6:eb:72:09:34:6d:a7:0e:
96:57:5a:93:07:82:e0:0c:7d:06:d1:e9:4c:c6:a8:60:21:91:
db:aa:cc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:56 2025 by rpki-client