Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: mUET1Cnp3a34yZDUp4+ec8oQNJEpryUYiEATJkPO9zk=
Subject key identifier: B2:ED:A6:1E:75:97:87:21:4C:55:BC:53:A0:14:C7:9A:69:5A:04:74
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 0194C463659383001B7867839146D4ECB427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 0D4E
Signing time: Sun 02 Feb 2025 02:00:35 +0000
Manifest this update: Sun 02 Feb 2025 02:00:35 +0000
Manifest next update: Mon 03 Feb 2025 02:00:35 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: TIVUxgoRKSWHNokFLfAPP2Xhs2gTg7nl5cRV5fxI60U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:65:93:83:00:1b:78:67:83:91:46:d4:ec:b4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Feb 2 02:00:35 2025 GMT
Not After : Feb 3 02:00:35 2025 GMT
Subject: CN=b2eda61e759787214c55bc53a014c79a695a0474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9d:c2:37:21:60:4c:a7:c5:ea:00:67:43:71:
97:b6:da:0e:b2:19:36:da:a4:0e:16:4a:46:fc:ec:
c3:46:5e:1c:01:e3:6c:f3:c8:89:1b:7e:60:84:2a:
45:85:3d:00:bf:3c:08:2c:59:7d:7a:82:4b:e2:58:
71:30:8f:91:2b:6a:9c:98:1c:29:e8:d3:a0:09:71:
a0:50:58:01:2b:2e:66:29:0b:ae:38:6f:d0:f0:9a:
9c:55:3b:20:07:0c:fe:a4:6f:45:27:d2:5e:5d:37:
3b:7c:89:58:34:ea:27:91:71:93:3a:82:76:7a:c7:
9a:c8:63:7e:d7:57:eb:04:54:51:b2:86:00:0d:1a:
08:8a:bb:67:2f:f9:6b:06:98:57:a9:2c:b7:99:70:
1d:8e:b1:00:ed:03:56:55:f8:f0:c1:18:b9:ee:aa:
48:2b:76:e4:45:06:5f:ab:ce:c3:ce:04:1f:59:39:
73:9f:ac:af:17:ea:9c:1a:11:c5:bb:61:be:5f:4e:
a0:1f:8b:1d:3b:95:b4:9e:ca:b9:a4:99:cb:dd:f2:
04:34:f5:95:43:29:0c:f2:85:74:e2:4c:be:35:4c:
c1:d1:39:8b:18:77:43:73:b3:5d:d3:9e:36:f8:7c:
f9:c2:0a:04:6d:aa:4f:6c:9b:c2:75:cd:87:4f:42:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:ED:A6:1E:75:97:87:21:4C:55:BC:53:A0:14:C7:9A:69:5A:04:74
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1b:89:6d:6b:47:5a:41:f6:03:36:03:86:08:57:78:d5:d5:
dd:90:09:25:53:5b:22:63:3a:53:f9:80:46:95:96:4a:ff:da:
43:4a:94:0e:db:b8:7e:d6:0f:86:9d:58:99:b7:be:12:43:74:
f0:d6:dd:24:1e:2e:4c:e1:63:1c:a3:c7:1d:f1:29:60:ca:9c:
12:02:32:41:02:c9:af:03:e1:8b:c3:a1:2c:88:c1:77:f8:5a:
3d:88:03:1c:80:52:1e:b8:8b:d7:1a:a3:c5:9d:c9:5a:1b:3d:
af:99:51:cb:97:de:e3:9f:49:eb:06:d3:25:38:66:19:40:7f:
94:56:d6:08:39:9a:88:b6:49:91:e4:f5:de:f1:9d:9e:14:bf:
ad:ee:2e:02:13:8f:e1:5c:f0:49:45:5d:14:04:6b:2d:c7:b1:
c3:7e:e7:88:dd:11:25:dc:12:35:ba:59:fb:70:7d:d7:81:02:
4c:8f:96:79:63:eb:c0:a2:f1:6b:7b:8d:01:97:7f:f9:9e:2e:
49:93:3e:17:cc:64:bc:fb:c5:d3:2e:cc:8e:3b:bb:fb:95:22:
d6:7d:b6:c1:4c:ff:8e:1f:ab:7f:a2:d6:a9:c2:f7:61:09:78:
5e:2e:67:d8:f3:e8:af:f3:cd:66:e0:0a:17:8a:e5:37:f1:38:
23:6a:b1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:26 2025 by rpki-client