Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
File: YhuOSG7srmEk3hBJT9OROe1KN8s.mft (raw, json)
Hash identifier: m3oR5Bheff2GR4pFTn3IRCeNg5A8GueMwA/tTbkqUjo=
Subject key identifier: 73:3B:CC:76:1B:1D:C6:A0:37:2E:A3:EA:5D:78:B2:6F:A3:F5:CB:86
Authority key identifier: 62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
Certificate issuer: /CN=621b8e486eecae6124de10494fd39139ed4a37cb
Certificate serial: 019510FDCEEA1F4F78E88C2E17619CAD172F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 23:00:23 +0000
Manifest this update: Sun 16 Feb 2025 23:00:23 +0000
Manifest next update: Mon 17 Feb 2025 23:00:23 +0000
Files and hashes: 1: YhuOSG7srmEk3hBJT9OROe1KN8s.crl (hash: o0PHlczJsfoM3Vy4OQq502dQ1BNuEwHOeKaPlbKl7k8=)
2: eKGme1_RE2Cve029wfoTPnjkx8E.roa (hash: 7e5ken09Fa398flHkK+xPpARVfWAIKVd53mQhTUCt6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ce:ea:1f:4f:78:e8:8c:2e:17:61:9c:ad:17:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621b8e486eecae6124de10494fd39139ed4a37cb
Validity
Not Before: Feb 16 23:00:23 2025 GMT
Not After : Feb 17 23:00:23 2025 GMT
Subject: CN=733bcc761b1dc6a0372ea3ea5d78b26fa3f5cb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:88:65:30:4e:5e:a5:48:ab:20:68:5b:74:
2b:33:68:07:06:c2:e6:3b:ad:21:9d:3b:6c:9f:4a:
35:ac:e3:87:af:6a:68:96:9c:6c:c2:11:e0:fe:48:
d4:dd:2a:02:bf:da:9f:ac:12:f3:01:52:5e:4d:e6:
80:43:fb:a4:0d:2b:c0:ed:b4:d9:5b:d3:33:33:02:
8e:ed:35:fa:49:a4:fe:43:7f:49:fe:17:06:23:35:
1f:c5:85:e7:68:14:7c:fd:73:28:49:ab:3e:1d:0a:
fc:5e:c9:6f:b5:4f:e4:12:99:a7:bd:54:27:48:6b:
83:d8:b9:72:e7:2d:59:76:cc:50:4f:f0:9e:eb:1d:
4b:37:c9:08:e0:bc:e2:57:cb:39:66:d2:ac:71:e3:
36:23:36:6a:6f:c0:09:29:7a:0b:9a:7f:5c:fc:25:
55:11:b7:d4:39:29:48:39:e7:3b:dd:a2:8a:ca:fa:
08:59:70:8d:38:6b:96:8c:48:e4:68:c8:f9:fc:f7:
33:5e:a9:b3:d2:70:31:d3:c2:7c:33:9e:52:a4:20:
17:36:62:90:e1:7b:e8:6b:59:02:77:44:6b:cf:e2:
1c:c4:de:ec:77:b4:2b:ef:da:3f:b6:dd:86:8f:7d:
29:0c:23:2a:40:0b:44:06:e5:9e:1d:7a:1a:7d:89:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3B:CC:76:1B:1D:C6:A0:37:2E:A3:EA:5D:78:B2:6F:A3:F5:CB:86
X509v3 Authority Key Identifier:
keyid:62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:44:e9:79:de:36:0f:1b:40:d4:8e:c0:0e:d9:87:f9:02:3c:
fe:c6:f4:90:1d:56:91:c5:76:23:cb:3d:3d:db:8f:ef:7c:be:
4f:65:e1:e8:73:fe:c6:8c:9b:11:56:fc:f1:8f:e9:73:89:a7:
70:c6:45:21:ad:36:df:2f:8b:c5:70:b1:05:9e:35:34:db:d6:
a6:10:f8:fb:0d:61:03:c9:a4:60:38:0d:78:e4:5b:05:48:ae:
d8:b2:ef:56:e9:84:41:ca:1f:39:af:13:97:d7:79:0f:63:be:
2c:10:fb:80:7c:a9:b0:13:f3:23:a4:42:06:15:ab:45:f8:52:
a4:09:ed:87:de:ec:2e:3e:c8:fc:41:76:55:a2:e8:79:98:1b:
34:17:5b:93:25:e0:25:8d:30:85:c2:00:e7:2a:14:8b:2d:86:
4c:f1:9e:b2:f2:78:00:f1:3b:52:13:c9:f4:ee:85:21:25:23:
3f:0f:7c:ed:b4:c5:af:59:bc:1b:39:cc:2b:31:71:72:87:ef:
d7:ef:65:35:c4:39:0d:2e:2c:eb:f8:b7:21:b4:9c:08:94:24:
e5:3d:e5:39:58:9d:26:10:c0:28:93:17:6b:88:76:fa:55:dd:
c4:f0:a1:e0:66:7f:b4:a3:18:15:f0:b0:a2:14:2f:b2:ca:e9:
29:ff:cd:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/c7qH0946IwuF2GcrRcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMWI4ZTQ4NmVlY2FlNjEyNGRlMTA0OTRmZDM5MTM5ZWQ0
YTM3Y2IwHhcNMjUwMjE2MjMwMDIzWhcNMjUwMjE3MjMwMDIzWjAzMTEwLwYDVQQD
Eyg3MzNiY2M3NjFiMWRjNmEwMzcyZWEzZWE1ZDc4YjI2ZmEzZjVjYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW2IZTBOXqVIqyBoW3QrM2gHBsLm
O60hnTtsn0o1rOOHr2polpxswhHg/kjU3SoCv9qfrBLzAVJeTeaAQ/ukDSvA7bTZ
W9MzMwKO7TX6SaT+Q39J/hcGIzUfxYXnaBR8/XMoSas+HQr8XslvtU/kEpmnvVQn
SGuD2Lly5y1ZdsxQT/Ce6x1LN8kI4LziV8s5ZtKsceM2IzZqb8AJKXoLmn9c/CVV
EbfUOSlIOec73aKKyvoIWXCNOGuWjEjkaMj5/PczXqmz0nAx08J8M55SpCAXNmKQ
4Xvoa1kCd0Rrz+IcxN7sd7Qr79o/tt2Gj30pDCMqQAtEBuWeHXoafYkzQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHM7zHYbHcagNy6j6l14sm+j9cuGMB8GA1UdIwQY
MBaAFGIbjkhu7K5hJN4QSU/TkTntSjfLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWh1T1NHN3NybUVrM2hCSlQ5T1JPZTFLTjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81NDIxM2QtYzNlZC00ZDY3LWI5YmYt
N2JhMTM2ZjUxZWY5LzEvWWh1T1NHN3NybUVrM2hCSlQ5T1JPZTFLTjhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81NDIxM2QtYzNlZC00ZDY3LWI5YmYtN2JhMTM2ZjUxZWY5
LzEvWWh1T1NHN3NybUVrM2hCSlQ5T1JPZTFLTjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0Tped42
DxtA1I7ADtmH+QI8/sb0kB1WkcV2I8s9PduP73y+T2Xh6HP+xoybEVb88Y/pc4mn
cMZFIa023y+LxXCxBZ41NNvWphD4+w1hA8mkYDgNeORbBUiu2LLvVumEQcofOa8T
l9d5D2O+LBD7gHypsBPzI6RCBhWrRfhSpAnth97sLj7I/EF2VaLoeZgbNBdbkyXg
JY0whcIA5yoUiy2GTPGesvJ4APE7UhPJ9O6FISUjPw987bTFr1m8GznMKzFxcofv
1+9lNcQ5DS4s6/i3IbScCJQk5T3lOVidJhDAKJMXa4h2+lXdxPCh4GZ/tKMYFfCw
ohQvssrpKf/NHA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:12 2025 by rpki-client