Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: XZgLTtIuuw74vRlSu/UvSvjFLeR87X4qIQB23kivqkU=
Subject key identifier: 76:1C:39:0B:EE:62:C5:A5:B5:C9:26:8D:71:57:38:EE:F1:BB:95:3D
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 0194C4636C938DE85C974C430FD4C8E5F541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 07C1
Signing time: Sun 02 Feb 2025 02:00:37 +0000
Manifest this update: Sun 02 Feb 2025 02:00:37 +0000
Manifest next update: Mon 03 Feb 2025 02:00:37 +0000
Files and hashes: 1: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: JwMgdxrBN4/NYS0aicjXW+gWBrA35spKS+kGYl4agRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:6c:93:8d:e8:5c:97:4c:43:0f:d4:c8:e5:f5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Feb 2 02:00:37 2025 GMT
Not After : Feb 3 02:00:37 2025 GMT
Subject: CN=761c390bee62c5a5b5c9268d715738eef1bb953d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:4d:1f:dd:43:9f:87:ef:4a:3b:f8:c3:77:
84:5f:de:03:7e:80:10:ca:34:fa:7c:b6:38:85:ff:
5e:f8:d5:d0:e7:63:09:a4:cb:8e:bc:1d:c6:35:61:
73:37:78:15:34:97:6b:4f:41:82:6c:fd:57:d7:2e:
aa:44:40:06:ea:e9:f9:59:7d:4f:77:23:0b:30:ef:
c9:a3:08:e0:7a:49:a2:3e:da:87:27:4b:08:84:66:
34:c5:b3:20:06:bd:e6:a6:13:87:9e:7c:fb:0a:46:
aa:16:c2:08:ba:e4:bb:4c:3a:58:73:41:8c:63:61:
b1:3a:6e:6d:81:b8:84:fd:e4:58:4d:1f:e4:ff:4c:
44:ac:d7:16:90:4e:e2:43:76:80:d0:1b:87:33:8f:
3f:fd:57:72:7d:e2:1a:06:2c:6e:bf:6a:17:07:21:
ad:78:8f:9a:75:22:23:d2:9b:4b:75:34:92:a9:9a:
6f:2d:19:40:ab:ef:0c:d0:a1:e4:a2:a8:42:8d:ac:
62:05:37:f6:d5:84:70:a1:59:31:b0:1e:4c:17:5f:
9d:b4:5f:c9:1d:66:7d:39:4c:e6:f9:3c:bd:51:af:
38:7b:1f:da:ce:1c:e0:08:59:86:98:33:2a:81:bf:
14:d0:a9:69:19:54:89:d8:f0:82:02:22:d4:e1:68:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:39:0B:EE:62:C5:A5:B5:C9:26:8D:71:57:38:EE:F1:BB:95:3D
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:41:f1:67:e6:d9:1b:df:2f:a6:21:78:e4:6c:08:84:4c:d6:
17:e6:61:48:e4:54:72:19:2e:0c:6e:a8:3a:8f:9d:45:f3:30:
4b:81:01:bf:c1:85:78:87:24:ab:ff:82:8e:cd:84:93:50:be:
2e:a0:90:be:11:a7:e1:fc:35:a5:92:e0:e3:17:b6:ab:3e:ab:
15:cb:1c:81:76:a5:63:15:a0:42:02:5b:af:48:c0:94:64:09:
32:ea:48:a7:d1:75:04:50:37:e8:92:67:68:da:28:35:16:53:
9d:23:28:ba:cd:9d:97:00:24:b4:f5:5f:03:73:5c:94:34:5a:
88:87:8b:56:a8:3d:1a:d9:bc:03:44:03:57:7d:dd:71:df:72:
e5:40:28:b4:1f:bb:b9:64:2b:6e:62:aa:7e:b1:f6:8b:21:b4:
ec:88:09:7b:b8:6c:48:38:8a:23:a2:d7:ce:4e:c2:f5:98:74:
c1:74:39:13:fd:1e:0f:83:91:11:cb:89:82:12:19:5c:a7:15:
f2:56:15:1b:d1:cf:a0:be:97:d8:18:12:7e:74:96:cf:92:8d:
bf:5e:5f:31:54:84:84:bc:52:de:8f:0a:4b:09:07:65:c1:bf:
af:74:6f:57:c7:db:18:3f:6a:58:20:76:57:a1:44:38:bd:88:
5d:0d:6b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:08 2025 by rpki-client