Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
File: yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft (raw, json)
Hash identifier: 7kn4e3G+5yRBhHDzzS5yf3z5zPgYNRfX7+QhVCIqT5I=
Subject key identifier: A0:92:B8:99:B5:30:60:96:4C:F3:49:01:38:1F:1E:90:5F:7F:E5:64
Authority key identifier: C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5
Certificate issuer: /CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5
Certificate serial: 0195121086F1E9AC3A5BFE51A436E41552E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
Manifest number: 0172
Signing time: Mon 17 Feb 2025 04:00:27 +0000
Manifest this update: Mon 17 Feb 2025 04:00:27 +0000
Manifest next update: Tue 18 Feb 2025 04:00:27 +0000
Files and hashes: 1: yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl (hash: KgHRT9deCC46edFLK/UXSBmYhvOrnI4Yp9YEKb9sLHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:86:f1:e9:ac:3a:5b:fe:51:a4:36:e4:15:52:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5
Validity
Not Before: Feb 17 04:00:27 2025 GMT
Not After : Feb 18 04:00:27 2025 GMT
Subject: CN=a092b899b53060964cf34901381f1e905f7fe564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:df:af:16:b5:a7:31:33:e4:5f:13:86:7b:
9b:7b:62:f8:94:d9:c3:6d:63:02:00:8b:ae:02:c1:
bc:2b:0b:24:df:4f:42:8a:d6:52:ff:9c:0d:fa:b1:
72:b5:31:b3:a0:e5:92:cb:2b:24:13:ac:73:92:2e:
e2:53:60:e0:4e:66:db:68:61:66:9b:07:17:2a:b1:
07:2e:02:95:de:bc:f7:21:6b:ab:d0:83:dd:05:b9:
53:d1:ad:95:e3:83:3a:2e:26:db:26:e7:02:22:82:
06:36:2b:ce:3f:40:63:5f:af:b6:cc:a0:bc:ce:f8:
ea:86:ad:21:39:5e:84:7c:4c:38:c0:a3:70:61:c7:
68:15:7b:d6:96:c9:9d:b3:f3:96:8b:e7:8b:0c:2f:
26:24:2d:30:97:8b:aa:3a:3e:a6:12:23:e9:4b:81:
81:3e:04:85:fa:d3:6b:ba:f7:13:83:99:f0:75:8e:
57:83:7b:99:04:13:d1:83:fc:98:be:e2:65:e7:c0:
29:fa:18:a5:77:46:c7:c6:6a:ee:c3:06:f1:57:ac:
5d:86:aa:d7:b5:55:c8:ba:86:81:23:37:22:c6:60:
3c:ba:02:90:b8:c0:71:81:57:59:ac:b9:21:5f:13:
7c:13:24:60:5f:7f:ad:e4:0d:b3:fc:ab:f1:87:b8:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:92:B8:99:B5:30:60:96:4C:F3:49:01:38:1F:1E:90:5F:7F:E5:64
X509v3 Authority Key Identifier:
keyid:C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a2:60:03:af:b9:9c:03:5d:aa:65:a1:dc:9d:85:84:01:7a:
ca:2c:bd:5b:1d:6b:36:38:91:cb:f7:96:f1:1a:cd:9e:d1:d3:
d2:1a:d6:3a:a1:12:ec:ac:b9:07:d7:9c:93:81:18:7b:56:95:
ec:2a:4d:21:b3:3e:11:47:f5:2d:7f:c1:3d:74:fb:af:d8:90:
41:55:2e:32:ac:71:a6:bd:07:6d:3e:a1:6a:b4:2e:99:75:5b:
d8:5f:cf:51:ff:10:ff:27:00:b7:13:b3:dd:b8:78:39:bc:7d:
20:1a:42:17:df:38:fc:9b:0d:87:e3:f4:70:57:65:a1:2f:eb:
22:f4:f2:e9:94:10:ec:cb:cd:7d:e7:f0:f9:63:92:df:52:a0:
3e:74:ec:9f:8e:ea:11:6b:81:d5:f6:c5:9d:ee:3c:71:ab:09:
83:02:ce:bf:83:38:bd:b8:0c:6d:1f:c9:ba:2b:ad:4a:ff:ec:
22:06:80:9a:2e:77:00:10:54:9b:d7:de:83:62:30:3b:64:3d:
80:e7:4b:eb:c1:b2:2b:da:8a:69:02:18:6f:1b:53:d3:04:51:
9a:ad:cc:e8:b7:0e:8d:51:a0:71:d1:c7:d2:00:f5:74:3b:55:
27:ba:5c:2d:05:6f:5e:ee:5b:bb:80:6b:42:93:12:c1:0f:e5:
25:f7:80:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:47 2025 by rpki-client