Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
File: YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft (raw, json)
Hash identifier: tBrW8iHDpLArMS4uUDzvPZjtBtgB9DhgqCpbfBAvPZc=
Subject key identifier: D4:DB:32:C0:AF:CA:73:72:9F:C9:E7:5C:E7:98:4E:80:26:FC:F4:24
Authority key identifier: 60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
Certificate issuer: /CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Certificate serial: 019510C6DAC17F40A91878F4A7DA1A3DAEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
Manifest number: 081B
Signing time: Sun 16 Feb 2025 22:00:22 +0000
Manifest this update: Sun 16 Feb 2025 22:00:22 +0000
Manifest next update: Mon 17 Feb 2025 22:00:22 +0000
Files and hashes: 1: YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl (hash: fBnH+e9BoRfuu1pqd3LZdb0lIMatYUn8ZObHHesCcwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:da:c1:7f:40:a9:18:78:f4:a7:da:1a:3d:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6007aa24bb353a4fa40b3430d1c29266cfac2689
Validity
Not Before: Feb 16 22:00:22 2025 GMT
Not After : Feb 17 22:00:22 2025 GMT
Subject: CN=d4db32c0afca73729fc9e75ce7984e8026fcf424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:ee:78:3b:ca:37:ea:16:ac:40:eb:c2:ee:
66:4e:4b:6a:c5:9e:80:1f:af:06:7c:f3:c4:2d:ac:
6f:bd:b3:e8:8a:85:3c:bf:95:36:4d:1d:8d:fd:64:
ff:54:99:0a:bb:17:07:52:63:fc:40:cf:a1:d4:ec:
be:e4:a7:5e:a5:30:42:43:0e:5d:15:01:1c:df:3d:
93:dc:af:5d:bc:e5:2a:8e:a3:ca:d9:b3:ac:cf:8d:
22:90:12:ef:0d:ae:9c:53:c6:51:1a:3b:ff:dd:22:
6d:f2:8e:1f:e0:ad:45:ff:81:8d:53:9a:a8:8e:d5:
b6:ba:9c:3a:a3:5a:9c:d1:00:c8:32:d0:8f:1c:98:
d8:0d:11:52:05:4a:c2:8c:ca:dc:1e:aa:50:16:08:
43:21:f5:2e:d5:9b:c4:4c:e7:86:77:77:95:80:a3:
bd:ea:44:a9:d1:bb:18:36:f5:70:43:9d:5d:10:ee:
47:f1:7c:b0:c7:52:d7:2f:f4:f2:47:1c:ff:45:df:
ba:ea:30:f7:f1:09:37:a1:44:2f:cb:c8:6b:23:c7:
77:36:cb:a6:55:ef:68:50:55:8e:f5:68:c3:ea:14:
04:9b:59:77:7e:16:aa:ca:6e:98:bc:0e:ad:f5:d4:
45:b6:ba:e3:56:fa:38:e6:4b:75:7e:c8:2f:8c:60:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DB:32:C0:AF:CA:73:72:9F:C9:E7:5C:E7:98:4E:80:26:FC:F4:24
X509v3 Authority Key Identifier:
keyid:60:07:AA:24:BB:35:3A:4F:A4:0B:34:30:D1:C2:92:66:CF:AC:26:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAeqJLs1Ok-kCzQw0cKSZs-sJok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e863-f2b7-4e84-834b-5b450e454523/1/YAeqJLs1Ok-kCzQw0cKSZs-sJok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:c4:c0:1e:16:cc:a4:4d:0b:bc:fb:0f:0e:ce:d1:2d:a0:bd:
94:e2:ee:47:95:93:d0:6e:8d:c1:51:bf:40:24:fe:90:1f:71:
5b:80:d6:37:7d:46:e8:44:cc:7e:e2:67:72:7a:ff:a0:88:5c:
82:86:04:a2:21:c5:62:3d:44:d9:b8:66:86:0c:bd:98:6a:2d:
d5:3f:d6:95:7f:b5:6c:9c:9c:5b:45:e9:1f:18:de:33:e7:7b:
fd:7d:4c:cd:10:11:3f:58:38:aa:1b:2d:5c:e5:7d:44:ca:51:
ca:94:15:9c:91:4e:a9:ef:46:09:56:25:1b:fd:88:91:2e:31:
6d:57:4b:c6:c8:f4:20:e4:b7:c8:bf:85:37:05:3b:d2:f0:91:
a6:80:db:6c:cc:5e:2d:d2:bf:ba:6c:7a:10:9b:e9:ae:fe:96:
d3:6c:a4:9c:bf:62:d5:23:b4:b2:ba:54:38:75:c0:a4:39:21:
45:a4:34:8a:ab:4d:ba:44:6c:94:4e:1f:d3:ca:89:c0:e5:ba:
e1:b6:2f:a7:fe:06:d5:17:7a:0c:7b:af:04:31:bc:06:d7:bb:
fb:fa:10:87:f5:97:d9:f4:43:8e:9b:4e:5e:67:09:20:92:cf:
14:1b:7e:da:15:1d:fc:20:94:dd:cb:bd:9b:66:68:5c:f9:9a:
d5:fd:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:48 2025 by rpki-client