Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
File: Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft (raw, json)
Hash identifier: i3sINaAKJqpRfoPtXW8ptOskdS/tHxFH1lebgt7PQv4=
Subject key identifier: 89:FB:C3:B5:8C:37:3A:94:86:24:9E:EC:12:B0:1A:F0:E7:D8:28:32
Authority key identifier: 62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
Certificate issuer: /CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Certificate serial: 0194C3BE9D65C30AA36A4DB4AEA3214D2610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
Manifest number: 0F8D
Signing time: Sat 01 Feb 2025 23:00:36 +0000
Manifest this update: Sat 01 Feb 2025 23:00:36 +0000
Manifest next update: Sun 02 Feb 2025 23:00:36 +0000
Files and hashes: 1: 8AEYtyDng2JrczsuFPGKVviyc9s.roa (hash: bu4yeJwv9MMrj8IdBFvelQwTvzrOnjRhUdtSSS/gVBE=)
2: Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl (hash: MZTeHci71bD9abw32vgxajqr1qBUBqpQYD3fmo/68j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:9d:65:c3:0a:a3:6a:4d:b4:ae:a3:21:4d:26:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Validity
Not Before: Feb 1 23:00:36 2025 GMT
Not After : Feb 2 23:00:36 2025 GMT
Subject: CN=89fbc3b58c373a9486249eec12b01af0e7d82832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:78:22:82:a6:a7:9e:1d:aa:51:14:15:58:
67:e5:30:9a:be:c0:39:0a:ea:f0:73:27:48:92:23:
6a:39:72:00:36:c9:18:cc:89:d6:59:06:28:2a:41:
7f:f5:05:91:d0:31:ca:4c:33:5c:6c:a2:45:4c:cd:
bb:2f:e9:bb:39:60:94:58:78:85:33:a8:95:c0:ed:
fc:1c:e0:a9:59:8f:b9:68:eb:43:58:41:4f:60:7f:
b7:73:64:2c:37:86:07:41:2c:94:ef:1d:f0:db:e3:
96:80:09:c1:4d:c2:30:5d:66:13:70:47:5c:bf:6a:
73:93:2e:4d:2f:c1:b7:65:c5:17:5b:7a:8a:86:5c:
60:5c:13:1b:51:51:98:cf:f8:18:d8:0a:e4:ad:55:
50:93:e1:f3:d3:6d:d6:11:05:d7:d7:a8:3a:1a:c7:
aa:9a:06:f0:f3:06:f3:ba:4c:19:95:cc:8b:75:e0:
7a:30:30:74:e4:4c:af:59:d8:2a:b1:62:f5:d5:0b:
2d:84:46:79:cd:c2:cf:5d:ac:ca:82:ce:24:98:9a:
0a:8e:ff:df:69:5e:4e:d7:09:aa:b8:c8:62:e7:f3:
43:73:4d:1b:27:09:62:a1:4c:b6:8f:97:40:6f:9a:
f9:6f:58:2e:46:82:0d:56:39:66:06:ca:e6:d6:71:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FB:C3:B5:8C:37:3A:94:86:24:9E:EC:12:B0:1A:F0:E7:D8:28:32
X509v3 Authority Key Identifier:
keyid:62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2d:6a:d1:9a:0f:e1:f6:74:96:0a:36:9a:4f:08:0d:cc:97:
c0:8b:09:76:cb:c3:05:9c:56:dc:03:79:f9:db:8a:46:40:8b:
72:83:5b:4e:1d:4a:6d:d6:d6:6f:d0:c7:41:da:89:1a:14:75:
b3:69:29:0f:19:05:f3:21:3d:8f:5a:5e:bc:8a:dc:c1:5a:77:
12:e2:53:ab:8c:30:dc:9b:c4:cc:94:c6:d7:59:7c:39:be:d1:
af:05:6c:4b:0b:67:41:d7:f3:cf:c8:6f:8f:63:72:9b:9d:f8:
1f:7b:60:26:29:1c:30:1c:c6:ec:b9:6a:61:76:90:77:19:81:
d6:d5:8a:8c:90:fe:97:be:79:14:fa:11:6c:dc:5a:63:79:be:
b1:1c:0a:6f:a1:ab:3b:1e:47:69:52:63:b2:a6:81:57:c6:97:
e6:72:54:67:b9:4b:6b:06:26:b3:17:96:71:de:e6:48:94:08:
c3:cf:d6:43:1e:d3:9a:14:b6:8f:79:9e:ae:67:52:5c:12:1f:
d4:be:38:e6:c5:50:4f:44:32:fb:36:b3:eb:83:d3:24:ac:60:
75:b4:24:9d:04:78:01:a6:4d:f8:cf:df:ef:36:ea:96:83:14:
32:ec:0b:b8:38:6a:90:a9:9b:6f:ce:09:26:ac:f0:aa:a3:a9:
a7:1d:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:50:41 2025 by rpki-client