Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
File: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft (raw, json)
Hash identifier: caaL8yKjyxLVbgm72gEdzfKaYg2oobbL9RXvQlDX00A=
Subject key identifier: C7:39:B7:61:84:06:A1:A1:B5:FF:C4:48:C0:EA:F0:CC:3F:D9:1F:BE
Authority key identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
Certificate issuer: /CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Certificate serial: 019510C7F6E86B4631FBBD3601E1C504B03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
Manifest number: 13B8
Signing time: Sun 16 Feb 2025 22:01:35 +0000
Manifest this update: Sun 16 Feb 2025 22:01:35 +0000
Manifest next update: Mon 17 Feb 2025 22:01:35 +0000
Files and hashes: 1: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl (hash: T5ab5LbsCSx462P2xAqORseiYngiyHDoAMXSKXfiuEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:f6:e8:6b:46:31:fb:bd:36:01:e1:c5:04:b0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Validity
Not Before: Feb 16 22:01:35 2025 GMT
Not After : Feb 17 22:01:35 2025 GMT
Subject: CN=c739b7618406a1a1b5ffc448c0eaf0cc3fd91fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:b5:f7:35:44:88:64:9a:51:af:ac:dc:70:
a9:1e:a7:31:d0:c2:c2:71:34:c2:1c:76:0e:52:b7:
5b:0e:87:c0:66:b1:02:22:3a:aa:88:9c:a7:65:b7:
a0:32:54:1a:58:e7:c5:b5:49:67:78:75:42:dc:22:
fb:7c:50:f5:e7:67:94:e9:75:d6:2d:73:ce:36:1a:
55:91:e5:a6:74:8d:ec:b6:fd:b3:64:31:83:0d:e1:
cd:c7:9e:9d:52:0f:fe:e6:d9:be:0f:d3:56:96:3f:
04:3a:e5:7c:9c:eb:a7:35:84:04:3c:87:26:9a:93:
e9:c9:75:d5:d8:8a:15:0d:b4:0d:e1:b9:6b:e1:ac:
90:4d:75:02:06:7e:75:22:27:50:df:73:01:28:aa:
98:01:04:0a:2c:bf:ec:40:66:62:f1:9d:8e:bb:e1:
34:7d:e8:5f:23:24:50:02:9a:12:c7:39:aa:11:e3:
e4:6d:a1:5e:85:1d:27:f3:8f:0b:63:34:e8:1a:4b:
93:b3:c6:1d:24:48:72:15:a5:5b:49:e7:e9:32:79:
49:c5:67:44:0f:80:59:d3:22:58:14:bc:d4:9e:38:
25:8a:76:df:21:8d:30:c8:22:72:1c:84:da:87:d6:
8b:6a:fa:6f:04:b1:d0:98:c2:d8:1c:c4:29:b3:0e:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:39:B7:61:84:06:A1:A1:B5:FF:C4:48:C0:EA:F0:CC:3F:D9:1F:BE
X509v3 Authority Key Identifier:
keyid:CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c5:8a:d6:86:ed:76:e2:7f:95:e7:a8:f3:0c:fc:13:54:bf:
89:b8:b4:42:73:42:91:e5:ca:1d:b6:68:d3:8a:c5:fe:32:c8:
2a:9d:94:4c:e9:00:6c:bf:b1:52:dd:ff:1a:05:01:29:f0:41:
2d:6c:44:24:fe:5a:d7:b7:6e:5b:0d:dd:11:75:bc:40:57:11:
70:9d:6a:01:12:ed:0a:0b:c7:6a:ab:66:56:26:88:b1:87:fc:
b3:f6:38:9e:af:a8:a4:c8:f8:ef:d6:41:61:e3:4b:e4:45:91:
a4:3c:e8:8f:8f:99:55:1e:15:36:fd:c3:d3:c2:a0:c4:f8:85:
22:60:cb:82:03:04:1d:f0:08:05:b8:7f:f2:ec:17:f3:91:7c:
2b:4b:89:bd:81:03:0d:37:f1:35:66:3d:a5:13:d9:fd:cd:29:
bc:3d:91:d0:c1:df:10:04:ff:b8:28:90:9f:b5:b1:dd:84:db:
9d:8e:ad:67:28:83:3e:55:e8:a3:a3:93:26:a2:fe:f5:37:38:
76:ce:cb:14:20:19:34:93:66:64:90:eb:af:20:6a:c0:19:1f:
be:f6:37:78:1f:07:4a:67:de:e9:95:5e:5d:9f:55:87:ce:24:
38:b9:07:87:1b:d6:d3:6f:17:f7:65:15:27:14:2a:49:7b:89:
3d:0e:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:20 2025 by rpki-client