Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier: QK7FHaJGZR8onb7zBSO4L8UKpmD0jLIfV0GhySS2zcI=
Subject key identifier: 8C:58:EA:CB:AA:F8:CC:55:FE:76:0C:18:88:61:A3:B6:81:F5:61:0C
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial: 0194C3F61BC01AC48226E980AE279D5B39A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number: 0B
Signing time: Sun 02 Feb 2025 00:01:13 +0000
Manifest this update: Sun 02 Feb 2025 00:01:13 +0000
Manifest next update: Mon 03 Feb 2025 00:01:13 +0000
Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: O1PW0FMYYx+LqzG84ReaFB+9USAxXKuOKdjGpQaG7yg=)
2: kFX-uYTQe-hNv7R7b32AFNfIUMM.roa (hash: dfEaZcwO+Rs/PwwE6piUHmyj/TNPDDXLzEVdyeyS3Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:1b:c0:1a:c4:82:26:e9:80:ae:27:9d:5b:39:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
Validity
Not Before: Feb 2 00:01:13 2025 GMT
Not After : Feb 3 00:01:13 2025 GMT
Subject: CN=8c58eacbaaf8cc55fe760c188861a3b681f5610c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:d8:83:90:12:a4:e8:5e:ab:8e:74:5b:c7:
aa:6d:97:37:e2:ea:77:25:11:f1:13:2a:6c:c7:c3:
37:e0:8e:bb:90:0d:c5:55:4f:37:8c:43:5c:a1:75:
f3:b3:54:04:fa:73:77:51:25:4e:e5:4e:6f:01:1b:
a9:9f:40:65:20:23:52:e0:d3:53:1a:a5:c6:aa:f0:
d5:62:56:54:35:7e:c4:a3:06:a8:ae:1c:92:68:94:
4b:f1:86:37:f8:b5:84:71:ae:5c:12:32:ed:10:53:
4c:56:63:3a:e3:5b:26:0e:db:a3:b4:f8:ea:fb:f5:
c1:f1:81:cd:26:24:3a:3d:04:36:3a:22:27:94:cd:
a0:e0:3e:c6:b6:47:56:b9:91:79:01:4f:51:4c:ae:
e5:a3:0b:a6:3e:ef:13:35:50:c4:23:c2:99:6d:8c:
32:86:32:b1:06:e5:41:49:da:84:d1:84:65:62:95:
fb:e5:dc:83:23:e9:54:6b:db:35:c5:4f:27:8e:64:
81:2d:d1:a9:d0:87:db:3a:95:ea:e9:89:49:5f:ef:
7f:83:4a:e8:4b:fe:b8:20:f1:0e:66:ac:bc:f8:fc:
e5:67:1e:66:6d:fc:68:4e:d3:45:5c:24:67:0f:58:
1a:53:be:15:f4:1d:fc:ec:e7:4e:3c:08:9d:79:e0:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:58:EA:CB:AA:F8:CC:55:FE:76:0C:18:88:61:A3:B6:81:F5:61:0C
X509v3 Authority Key Identifier:
keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:13:61:27:20:09:e2:84:ed:5e:a8:81:37:40:af:d6:b6:fd:
51:da:1b:c3:77:1a:7d:82:7f:cc:a7:3b:d8:71:6b:07:2f:c1:
5c:c1:6f:1b:58:b0:71:d7:63:cf:3c:f5:32:8b:af:d7:57:45:
5a:01:bd:03:bd:92:80:8b:e1:2c:42:00:bf:5b:76:bc:78:bf:
b6:f3:5b:9b:60:d8:75:8d:b2:e0:a7:ec:4c:de:87:e8:93:3e:
7e:5f:47:14:97:d5:8e:ba:99:15:8e:3e:8c:46:d9:8f:e0:69:
63:8c:a6:b5:8f:38:83:48:8c:02:e5:cb:98:43:74:c1:a5:32:
b4:a4:e0:37:72:ef:85:70:41:00:23:66:79:ce:fe:4f:ca:0b:
73:dc:02:1d:59:c6:b8:8a:d7:2a:2d:75:f4:3f:1d:ba:81:04:
ec:74:4f:16:70:25:2c:fc:ae:d0:6a:6f:52:b7:d2:78:16:4f:
ee:93:40:c7:5a:7d:90:9d:b4:4b:13:53:ef:be:7a:27:b9:ca:
3a:5e:63:18:aa:06:b6:fb:e1:17:1d:fa:64:a3:49:f4:15:84:
99:51:69:12:e0:a9:8b:15:cb:0e:0a:12:68:65:9e:56:38:ea:
9e:fe:2f:a5:31:05:40:6a:c8:59:58:5d:c7:7e:0c:0d:5a:4c:
9e:2b:41:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:27 2025 by rpki-client