Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
File: YV-738kB6OsOzQ3T9AhcEonP7fc.mft (raw, json)
Hash identifier: r+PE4Metr6x63FejG+/ClSGO4hW0vmz+veSuJPhWeCg=
Subject key identifier: 8D:FF:4C:2B:09:1B:81:A4:99:4B:2C:D6:57:B9:A1:0E:2F:FC:29:74
Authority key identifier: 61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
Certificate issuer: /CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Certificate serial: 0194C49A76008FB627F9EEDF97211F8ACA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 03:00:44 +0000
Manifest this update: Sun 02 Feb 2025 03:00:44 +0000
Manifest next update: Mon 03 Feb 2025 03:00:44 +0000
Files and hashes: 1: YV-738kB6OsOzQ3T9AhcEonP7fc.crl (hash: dCX7FRVESqtLLqI7t1cyhYQ/F0OEwJhRKRBvoVRan2w=)
2: zUm1UcOkH8VnWPvUTxzaQHBNg6s.roa (hash: YZzvXulBT76YYOeLZF1dhxyHao92MWHlpmNInJlWXUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:76:00:8f:b6:27:f9:ee:df:97:21:1f:8a:ca:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Validity
Not Before: Feb 2 03:00:44 2025 GMT
Not After : Feb 3 03:00:44 2025 GMT
Subject: CN=8dff4c2b091b81a4994b2cd657b9a10e2ffc2974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:55:1f:79:f8:95:04:99:ac:08:6c:27:44:
79:d6:49:6b:12:98:cf:75:6c:09:d1:21:88:5d:07:
8d:52:c8:0d:ea:7f:be:4f:c5:c1:73:44:57:b4:09:
b2:34:d4:dc:e6:ac:da:22:e8:2c:e5:6d:43:ac:ed:
f8:24:2d:5d:d6:85:f1:2c:a1:c3:f7:84:9a:aa:0f:
00:44:14:fa:82:41:f3:f8:14:6d:e3:ba:23:2f:83:
71:b5:ec:3a:9f:cd:0b:7f:7d:e2:24:c5:25:c5:f6:
f9:ba:f0:1c:98:45:a0:87:3f:32:d2:6e:b3:69:1c:
58:7b:59:09:3b:e1:3f:de:dc:8d:72:7f:fd:9b:f4:
2b:66:88:3a:c1:67:93:b9:57:e3:81:2a:62:34:6b:
0b:f2:97:32:14:29:49:3b:48:b7:38:2a:10:b7:6f:
07:ab:31:fe:98:bd:1b:ff:95:dc:23:9a:a0:2b:de:
1f:18:f8:ae:5c:35:00:81:ee:f1:26:b6:6b:d2:a2:
03:a2:12:19:92:33:12:05:d8:3e:eb:2c:3c:75:49:
90:fd:f5:c3:cc:43:e5:1d:b2:57:d0:c7:67:65:f6:
af:07:1a:c4:ae:ec:48:ed:71:4b:23:5e:78:00:4b:
52:ca:93:49:03:9b:c4:a7:70:45:bc:12:c9:9d:e6:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FF:4C:2B:09:1B:81:A4:99:4B:2C:D6:57:B9:A1:0E:2F:FC:29:74
X509v3 Authority Key Identifier:
keyid:61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cd:c3:9d:d0:73:b9:26:ff:33:9d:69:12:5b:13:e2:33:6e:
70:23:44:47:84:07:e8:6d:f2:23:b6:68:70:29:1c:4f:8e:be:
84:cf:04:fe:3a:4c:49:84:09:6d:55:a8:f9:ef:0f:b7:6e:5a:
f5:e2:1d:8c:40:0c:d3:cd:db:e5:37:78:03:95:32:57:11:f7:
25:81:3e:17:c3:01:45:21:c2:f2:7e:84:6e:6d:16:d3:3f:a0:
28:8a:5f:a9:06:8a:37:f9:6e:09:3a:d7:a9:46:0a:e9:15:17:
df:ed:4b:3c:42:aa:3c:f7:55:35:d6:6d:ce:cb:64:39:ae:1a:
53:02:2b:de:e0:15:bd:76:4c:6a:0d:8d:2d:20:ab:f8:ed:c6:
20:a1:f1:4a:2e:cb:c2:7b:cc:2b:8d:aa:ba:82:ef:e5:5c:27:
73:ef:9e:92:86:e8:71:d2:b7:72:d8:7c:aa:21:e5:08:f5:03:
4a:7e:71:de:e9:72:85:67:35:ad:31:eb:98:3a:54:a5:77:30:
72:f5:10:ca:86:1a:45:2d:e1:89:f9:e7:e1:cb:fd:44:e0:c2:
45:56:7e:ba:54:5a:d9:3a:9b:42:9b:7a:e1:03:f0:8b:78:0f:
2a:4e:66:f8:2d:d8:4b:11:42:22:a7:55:37:0d:35:5d:6d:cd:
fb:0a:fc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:42:00 2025 by rpki-client