Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
File: yWncvDPoAQQ4EpKC03rU6L-EuB8.mft (raw, json)
Hash identifier: p8wF+4zM05pWhIPxhawsHWQYlmRxQGgj075eVUyNjXw=
Subject key identifier: 1B:22:97:5A:8C:DE:B6:D7:3C:A9:27:F4:8D:75:3B:FD:62:94:93:92
Authority key identifier: C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
Certificate issuer: /CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Certificate serial: 0194C42CA65BED96E728257E492FD8B1EFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
Manifest number: 1359
Signing time: Sun 02 Feb 2025 01:00:47 +0000
Manifest this update: Sun 02 Feb 2025 01:00:47 +0000
Manifest next update: Mon 03 Feb 2025 01:00:47 +0000
Files and hashes: 1: FU1o4K68ASMHjxslt5agTXMw1Z4.roa (hash: cFpnMXx4SNy55YthuxgRWkF2I8U6u41jmzS8UiT8Yts=)
2: yWncvDPoAQQ4EpKC03rU6L-EuB8.crl (hash: LxgZ4PtWqiyurTx1ab+P5QFaJERVMCHLh3BO4zjCGMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:a6:5b:ed:96:e7:28:25:7e:49:2f:d8:b1:ef:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c969dcbc33e8010438129282d37ad4e8bf84b81f
Validity
Not Before: Feb 2 01:00:47 2025 GMT
Not After : Feb 3 01:00:47 2025 GMT
Subject: CN=1b22975a8cdeb6d73ca927f48d753bfd62949392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:54:3f:cf:71:b0:06:61:37:d5:3b:16:aa:
74:11:42:3d:34:ea:d8:77:d8:bd:79:66:d7:88:73:
2a:46:72:04:cf:8e:f8:91:35:14:3f:82:62:17:f1:
3e:61:5b:11:5d:3b:99:4a:0c:d3:77:f1:c2:38:24:
3d:d3:85:ef:33:3a:fe:59:6a:08:81:00:04:54:bb:
a3:74:6d:09:fe:51:ea:55:82:f2:6d:26:36:54:2b:
6b:90:89:ed:fa:04:44:e9:60:90:83:57:de:ff:46:
e8:8f:cc:7d:6d:b7:19:76:ed:d7:da:d1:14:08:1f:
5e:86:a5:62:81:65:79:35:f4:46:18:1a:9a:28:97:
9f:b1:e8:73:c8:fb:c4:1c:ef:1d:28:11:28:2e:ec:
b9:ca:b4:d9:76:1f:fa:96:75:86:61:95:38:97:a8:
25:22:45:f7:0f:b4:09:ab:15:49:1e:b6:0d:4f:20:
15:16:fe:fc:fd:e8:b0:e4:0f:27:93:ac:c2:65:cc:
d9:7f:7f:1e:29:3e:31:54:85:48:2f:53:03:4d:62:
16:71:53:5c:3a:38:bc:38:f0:dc:d4:9e:64:63:55:
61:30:46:41:a5:57:4a:d0:f5:34:e9:84:74:3d:a2:
c4:68:a0:6a:fb:f3:57:8b:d4:8b:de:f3:1b:c7:00:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:22:97:5A:8C:DE:B6:D7:3C:A9:27:F4:8D:75:3B:FD:62:94:93:92
X509v3 Authority Key Identifier:
keyid:C9:69:DC:BC:33:E8:01:04:38:12:92:82:D3:7A:D4:E8:BF:84:B8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWncvDPoAQQ4EpKC03rU6L-EuB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/195893-699b-45b4-a03d-0db50bff944a/1/yWncvDPoAQQ4EpKC03rU6L-EuB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:52:00:93:4b:f8:81:3b:5a:17:ef:31:22:8f:41:3f:43:3d:
41:28:9f:16:85:57:15:f4:18:cf:0e:0d:59:f4:e4:23:79:ca:
fd:f3:9c:85:8b:4a:01:31:e5:cb:22:e9:b1:82:7a:29:85:f6:
c5:3a:99:06:8c:50:05:ba:8f:17:ee:3a:a3:d1:a0:71:7c:a4:
b4:91:24:01:55:cc:6d:da:f4:89:34:4f:31:05:69:41:86:04:
04:1a:70:0e:24:62:55:1f:77:cc:33:7e:7c:10:1e:93:d5:ae:
21:60:31:81:eb:c7:d5:f5:9e:8e:95:24:64:d6:99:db:c5:8c:
56:e5:19:03:da:d7:61:7b:fd:f1:ad:42:02:7c:f5:5c:2a:f1:
5a:2a:88:a1:29:89:8b:f9:b4:1c:b8:bd:67:51:35:ce:0d:2a:
9f:2b:88:94:15:45:49:1f:b5:bb:1a:7d:09:8f:0c:30:10:12:
0e:17:64:c7:7e:3d:36:19:fb:e4:a4:33:28:2a:09:76:2b:34:
85:1d:d3:83:60:36:e8:2e:38:ff:d3:1b:d7:06:ad:45:87:b5:
6e:9d:61:66:cd:38:02:4d:c0:ed:d2:c0:26:a8:29:f2:34:87:
31:51:2e:49:02:d1:33:5a:d3:ef:df:07:5c:ee:f7:9e:0f:93:
22:46:0f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:47 2025 by rpki-client