Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
File: Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft (raw, json)
Hash identifier: C9CBM2V+lul2RHdEwgSpm5HqXP+HvaUFVQq9LqHy1Og=
Subject key identifier: 49:39:9A:DF:0E:CD:DA:AE:73:A2:54:E1:33:B4:EB:F8:4B:8C:D4:92
Authority key identifier: 62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4
Certificate issuer: /CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
Certificate serial: 019510C7EB15BBD54AC2FCAC6FBEAF4C2B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
Manifest number: 102F
Signing time: Sun 16 Feb 2025 22:01:31 +0000
Manifest this update: Sun 16 Feb 2025 22:01:31 +0000
Manifest next update: Mon 17 Feb 2025 22:01:31 +0000
Files and hashes: 1: Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl (hash: 1BA3tpqzsgpICtVGyFuZIBmkgN3H+PMXc/D63EhvB2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:eb:15:bb:d5:4a:c2:fc:ac:6f:be:af:4c:2b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
Validity
Not Before: Feb 16 22:01:31 2025 GMT
Not After : Feb 17 22:01:31 2025 GMT
Subject: CN=49399adf0ecddaae73a254e133b4ebf84b8cd492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:23:96:ca:41:5f:53:00:11:dc:7b:82:5d:
b1:5d:72:be:91:df:aa:9a:9c:b5:ec:75:4e:9a:eb:
71:e0:b0:66:0a:d4:af:b7:fa:39:5c:67:39:60:5c:
e9:02:ff:27:e7:88:a7:80:19:00:fa:6e:00:c1:2c:
53:d2:df:87:16:84:17:f7:91:45:4d:76:45:e4:35:
78:ff:e1:3b:d8:96:06:e1:62:67:6b:f4:70:fe:bb:
98:36:fa:03:dd:b2:9e:1e:87:bf:c9:59:04:16:b6:
2d:23:55:4c:ee:63:13:9b:0d:a8:72:a5:5f:16:f1:
1f:fb:2b:dd:58:e7:15:ae:94:0d:c6:b7:dc:4e:07:
59:1d:63:3f:2b:72:28:1f:26:7e:9e:da:33:e1:35:
8c:73:5e:ac:aa:75:fd:86:19:96:6d:0c:c4:81:bd:
be:29:a6:cd:aa:90:b5:6a:fc:48:58:06:a8:cb:3b:
59:53:24:b3:2f:55:d0:74:09:d1:cf:ae:dd:eb:41:
c5:44:c2:4b:d4:cf:46:75:52:93:dd:63:18:6f:9f:
31:92:a3:1e:a1:66:bf:9c:47:b4:5d:d7:2a:c4:f5:
5b:a6:5b:90:29:56:1a:29:72:df:a2:cf:98:83:9e:
c1:bb:3a:32:71:7b:43:d9:f3:45:ae:18:94:6e:a9:
6d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:39:9A:DF:0E:CD:DA:AE:73:A2:54:E1:33:B4:EB:F8:4B:8C:D4:92
X509v3 Authority Key Identifier:
keyid:62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:96:bf:4a:fd:3d:3c:81:07:5a:68:44:46:d6:03:dc:3b:76:
31:bc:56:06:38:fa:29:4d:75:df:7d:8a:2b:bf:9e:86:0f:ae:
dc:83:d3:39:86:7c:85:40:68:03:4c:39:62:fa:fb:e5:af:fa:
a8:17:dd:ed:0e:95:ad:b0:7f:c7:74:ca:a0:e3:90:b8:07:13:
05:c9:1e:87:0d:02:63:ce:ac:e8:8f:76:66:84:1d:61:a4:3e:
03:7a:69:bf:9e:13:ef:f1:6e:94:e6:e3:7a:9a:83:49:2e:61:
a8:8e:5c:ed:aa:e8:ac:7a:be:6b:49:1d:93:85:0b:6e:18:c3:
21:7d:c3:f9:97:3b:1f:10:4b:7f:e5:d6:12:2d:c2:c9:15:85:
db:73:2a:7b:65:17:e0:3d:69:41:b3:75:b2:dc:67:1e:1e:91:
ee:95:fa:f2:85:ad:ca:e1:df:7e:75:3a:6d:6d:6e:46:3e:25:
cc:fe:5a:fc:30:91:23:b1:90:53:5a:74:b5:25:8f:37:2a:bf:
bf:bb:a2:92:de:5f:83:89:5b:43:01:e2:02:14:d4:8d:fe:ed:
6a:6c:b1:bf:53:29:b6:cf:26:1c:20:88:21:11:8f:18:82:83:
49:8a:36:80:d1:e0:d6:6d:97:1e:8e:66:00:5c:c7:a0:be:a6:
88:14:c5:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx+sVu9VKwvysb76vTCtwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGE3ZjI1MDdmY2FkYmVjZDNkMmI2Mjk4ZTcwZjVkNGJm
ZTA0YjQwHhcNMjUwMjE2MjIwMTMxWhcNMjUwMjE3MjIwMTMxWjAzMTEwLwYDVQQD
Eyg0OTM5OWFkZjBlY2RkYWFlNzNhMjU0ZTEzM2I0ZWJmODRiOGNkNDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGcjlspBX1MAEdx7gl2xXXK+kd+q
mpy17HVOmutx4LBmCtSvt/o5XGc5YFzpAv8n54ingBkA+m4AwSxT0t+HFoQX95FF
TXZF5DV4/+E72JYG4WJna/Rw/ruYNvoD3bKeHoe/yVkEFrYtI1VM7mMTmw2ocqVf
FvEf+yvdWOcVrpQNxrfcTgdZHWM/K3IoHyZ+ntoz4TWMc16sqnX9hhmWbQzEgb2+
KabNqpC1avxIWAaoyztZUySzL1XQdAnRz67d60HFRMJL1M9GdVKT3WMYb58xkqMe
oWa/nEe0XdcqxPVbpluQKVYaKXLfos+Yg57BuzoycXtD2fNFrhiUbqltbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk5mt8Ozdquc6JU4TO06/hLjNSSMB8GA1UdIwQY
MBaAFGJKfyUH/K2+zT0rYpjnD11L/gS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtwX0pRZjhyYjdOUFN0aW1PY1BYVXYtQkxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yNzBlMWEtMDg5YS00MDkwLThhOWIt
YzgyMmM4MzhkZmU5LzEvWWtwX0pRZjhyYjdOUFN0aW1PY1BYVXYtQkxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yNzBlMWEtMDg5YS00MDkwLThhOWItYzgyMmM4MzhkZmU5
LzEvWWtwX0pRZjhyYjdOUFN0aW1PY1BYVXYtQkxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpa/Sv09
PIEHWmhERtYD3Dt2MbxWBjj6KU11332KK7+ehg+u3IPTOYZ8hUBoA0w5Yvr75a/6
qBfd7Q6VrbB/x3TKoOOQuAcTBckehw0CY86s6I92ZoQdYaQ+A3ppv54T7/FulObj
epqDSS5hqI5c7arorHq+a0kdk4ULbhjDIX3D+Zc7HxBLf+XWEi3CyRWF23Mqe2UX
4D1pQbN1stxnHh6R7pX68oWtyuHffnU6bW1uRj4lzP5a/DCRI7GQU1p0tSWPNyq/
v7uikt5fg4lbQwHiAhTUjf7tamyxv1Mpts8mHCCIIRGPGIKDSYo2gNHg1m2XHo5m
AFzHoL6miBTFrA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:44 2025 by rpki-client