Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft
File: YoNhOQ7U4GYi62soNtdn918Ic2g.mft (raw, json)
Hash identifier: 3fJKR9NA4CKkOGvtZzCMqYy2ckGxUAyTwMRaghg+VZc=
Subject key identifier: F3:D0:C9:A5:0A:77:90:28:1E:3A:E2:45:64:94:7E:FF:4B:1A:87:E1
Authority key identifier: 62:83:61:39:0E:D4:E0:66:22:EB:6B:28:36:D7:67:F7:5F:08:73:68
Certificate issuer: /CN=628361390ed4e06622eb6b2836d767f75f087368
Certificate serial: 019510C6D2BE45FB651D3EAFCDC67CE094F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoNhOQ7U4GYi62soNtdn918Ic2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft
Manifest number: 08F5
Signing time: Sun 16 Feb 2025 22:00:20 +0000
Manifest this update: Sun 16 Feb 2025 22:00:20 +0000
Manifest next update: Mon 17 Feb 2025 22:00:20 +0000
Files and hashes: 1: YoNhOQ7U4GYi62soNtdn918Ic2g.crl (hash: xw54mEVeOuYRbXOWXxFPkL0YE0Y3ie5NxZtxpn52Jcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoNhOQ7U4GYi62soNtdn918Ic2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:d2:be:45:fb:65:1d:3e:af:cd:c6:7c:e0:94:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628361390ed4e06622eb6b2836d767f75f087368
Validity
Not Before: Feb 16 22:00:20 2025 GMT
Not After : Feb 17 22:00:20 2025 GMT
Subject: CN=f3d0c9a50a7790281e3ae24564947eff4b1a87e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:86:8e:39:88:3d:16:1b:a0:cd:9d:2d:04:
5e:72:b4:5e:18:ae:1c:c7:ef:ca:e5:49:45:db:51:
a5:0e:d1:23:86:d3:55:a3:59:a6:e2:6d:ff:10:25:
2a:12:a8:56:3b:1d:47:97:09:c5:c4:cb:8f:f9:89:
72:3e:51:c6:e6:ee:21:1b:4c:56:35:4b:d2:d9:ff:
8c:c3:cf:a6:d6:98:b6:0f:8a:7b:e3:03:14:6f:93:
49:94:08:5b:23:f6:aa:be:54:8e:42:1d:64:72:18:
f7:67:5d:ae:21:39:f5:f4:f3:69:82:9c:07:3d:82:
6e:d4:c9:8b:29:9e:05:af:1c:4f:3a:cd:5c:f6:bc:
e0:67:90:e6:0f:65:7e:ea:0b:b7:b6:e8:a2:8b:52:
7a:2b:2f:7a:e2:38:a1:9b:fa:5c:8b:ed:0b:0f:da:
7c:94:d5:03:19:78:80:bc:fd:0f:39:c6:2e:7b:ab:
f3:20:0d:63:52:29:25:3e:a9:4b:9a:c7:93:72:92:
b2:2f:04:0e:7c:3f:60:48:c9:ed:51:2c:97:23:e3:
24:10:5b:92:66:80:15:1b:db:d2:ce:42:14:8f:ab:
d7:89:e3:34:9a:f9:61:dd:57:74:0a:0d:55:21:20:
22:68:b1:be:a5:18:8a:66:79:52:a5:ec:0f:a8:de:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D0:C9:A5:0A:77:90:28:1E:3A:E2:45:64:94:7E:FF:4B:1A:87:E1
X509v3 Authority Key Identifier:
keyid:62:83:61:39:0E:D4:E0:66:22:EB:6B:28:36:D7:67:F7:5F:08:73:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoNhOQ7U4GYi62soNtdn918Ic2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30f8a1-99d2-441a-9e17-5a9ff3a9c51e/1/YoNhOQ7U4GYi62soNtdn918Ic2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:aa:a2:d8:fd:75:63:08:66:32:03:8e:68:28:63:e6:6d:04:
26:a4:ef:5f:58:66:22:e1:af:8d:b4:11:65:1b:3a:26:bd:82:
be:0c:a7:20:eb:37:e4:b3:02:e0:75:65:9d:6a:b1:43:a5:c2:
6c:53:31:ae:e3:b6:bb:09:09:1a:5c:2a:e8:34:d3:a5:6b:82:
0c:1d:bc:6a:c5:ce:b7:49:50:4d:9d:0a:54:00:c0:bf:41:3d:
57:a6:95:cd:6b:f1:6d:60:f2:4d:db:54:1b:48:9e:9f:5b:1f:
ed:da:35:4c:e3:43:cb:98:0e:1a:b0:6b:82:19:e5:2c:88:9e:
76:0a:da:16:a5:b2:14:ca:a8:51:1d:15:db:bc:32:bc:ec:de:
60:87:84:70:ee:36:c1:e4:1c:a8:57:16:55:01:36:a6:e3:25:
8b:5f:88:d3:b7:e4:bd:cc:59:9e:30:94:e5:ec:db:31:cf:b0:
66:31:74:9c:c0:90:c0:5c:7a:87:ea:b7:78:05:79:2f:dc:81:
8a:fc:4e:9f:29:64:6f:6b:cc:a6:77:32:0c:ca:ca:a1:ab:30:
ff:19:40:12:cc:30:ef:3b:eb:cc:92:39:d8:73:86:cc:41:06:
62:74:76:50:ec:2d:66:a2:6c:d5:78:0c:f8:f9:43:a6:10:96:
8e:11:5e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:45 2025 by rpki-client