Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
File: yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json)
Hash identifier: leX0x8NOnOl3lNCloIR8PqiFfaOKpiM2jGv2gkhTKAQ=
Subject key identifier: 7D:97:8B:49:05:CF:9B:87:5E:A1:D3:75:2C:0F:5B:1E:92:E7:F3:D3
Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
Certificate issuer: /CN=c9571799bda893a1860b4a616c56278af5ec92c5
Certificate serial: 0194C4D0F59A69413A3BF0EC36C2F584F972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
Manifest number: 0933
Signing time: Sun 02 Feb 2025 04:00:16 +0000
Manifest this update: Sun 02 Feb 2025 04:00:16 +0000
Manifest next update: Mon 03 Feb 2025 04:00:16 +0000
Files and hashes: 1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: uLJr5iSHGzNvBY72RGbXrtCUG6xyDMwoV0sUbHq2nmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:f5:9a:69:41:3a:3b:f0:ec:36:c2:f5:84:f9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5
Validity
Not Before: Feb 2 04:00:16 2025 GMT
Not After : Feb 3 04:00:16 2025 GMT
Subject: CN=7d978b4905cf9b875ea1d3752c0f5b1e92e7f3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:59:66:25:16:c1:ce:bd:9e:ad:36:99:1c:
58:66:1f:48:cb:c3:dd:cc:16:b0:ac:ae:73:0e:2a:
c4:68:e4:f4:f2:7e:ed:16:0f:09:96:71:94:18:d5:
1e:cf:88:9c:d4:8a:b7:7d:94:3a:6b:de:44:19:a3:
d6:c6:f4:28:bd:10:fb:f8:c2:a9:98:bf:04:ef:47:
01:98:79:2f:b5:74:0c:54:0d:b0:77:ef:fc:02:b4:
bd:98:60:77:ff:1b:74:b4:38:7f:83:07:1e:87:b0:
1d:0c:63:e0:a7:8e:fa:d2:f1:73:9b:00:6e:41:b0:
ee:7b:e7:ad:0e:c1:51:b2:fe:19:aa:d1:91:95:0c:
23:eb:65:e9:fa:69:1a:eb:e9:2f:fe:44:5d:f0:f4:
40:11:54:38:61:a6:28:7b:0d:e7:cc:f0:68:11:8c:
a4:6d:ec:f7:66:8a:b3:6a:ff:67:68:2d:65:45:33:
58:7f:5d:61:54:29:23:63:03:b8:4d:ec:95:2b:cd:
5c:b1:a1:d7:af:a3:c1:c6:90:12:06:f9:b7:63:aa:
7d:e7:e2:45:78:97:6c:89:84:bf:82:2c:ea:00:bb:
3d:25:a4:f4:f0:c7:5f:0c:0e:41:fb:19:d8:4a:db:
74:ca:f8:99:62:e8:42:52:f0:f8:4e:b1:f3:bd:16:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:97:8B:49:05:CF:9B:87:5E:A1:D3:75:2C:0F:5B:1E:92:E7:F3:D3
X509v3 Authority Key Identifier:
keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e5:d3:98:65:66:fd:81:d6:c8:42:62:97:94:29:db:2a:5f:
44:df:99:c3:bd:d3:d5:cf:5f:cc:99:91:5c:c6:91:dc:20:1c:
8b:61:d2:5b:4b:db:d7:07:79:83:dc:96:02:e0:1f:4f:74:34:
d9:23:f3:f9:ae:de:e6:e8:96:cb:de:f9:cb:04:57:5e:3c:87:
b5:c0:03:66:b0:06:1d:b0:c0:ce:b7:6e:b5:54:b9:95:0a:65:
c7:71:46:66:bf:5b:c5:88:62:2d:18:e4:b4:97:cf:b0:d1:d5:
e2:98:e3:de:c1:d3:39:37:21:b5:09:d9:0e:a3:10:82:f0:98:
14:d6:78:19:8f:d1:bb:c0:6f:38:21:cc:55:da:81:ff:90:66:
20:5b:34:9b:4b:06:d7:29:aa:16:1a:81:a9:12:0e:ec:a8:5e:
8c:b1:63:cd:8e:bd:c4:48:0b:43:08:b7:91:7e:68:ca:b5:cf:
ad:ef:fb:82:04:57:91:3a:52:8f:7f:a9:00:a5:11:39:9a:7d:
3d:2e:3d:75:7a:82:0d:b0:ba:f6:0e:9d:98:7d:41:b7:82:28:
24:9c:2f:8a:73:69:8f:c9:03:52:ae:1e:68:a7:7f:0e:c8:20:
61:89:c6:f1:89:30:32:b5:88:2c:46:b6:07:25:19:4e:ef:19:
5f:fb:aa:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0PWaaUE6O/DsNsL1hPlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NTcxNzk5YmRhODkzYTE4NjBiNGE2MTZjNTYyNzhhZjVl
YzkyYzUwHhcNMjUwMjAyMDQwMDE2WhcNMjUwMjAzMDQwMDE2WjAzMTEwLwYDVQQD
Eyg3ZDk3OGI0OTA1Y2Y5Yjg3NWVhMWQzNzUyYzBmNWIxZTkyZTdmM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIdZZiUWwc69nq02mRxYZh9Iy8Pd
zBawrK5zDirEaOT08n7tFg8JlnGUGNUez4ic1Iq3fZQ6a95EGaPWxvQovRD7+MKp
mL8E70cBmHkvtXQMVA2wd+/8ArS9mGB3/xt0tDh/gwceh7AdDGPgp4760vFzmwBu
QbDue+etDsFRsv4ZqtGRlQwj62Xp+mka6+kv/kRd8PRAEVQ4YaYoew3nzPBoEYyk
bez3Zoqzav9naC1lRTNYf11hVCkjYwO4TeyVK81csaHXr6PBxpASBvm3Y6p95+JF
eJdsiYS/gizqALs9JaT08MdfDA5B+xnYStt0yviZYuhCUvD4TrHzvRb57QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2Xi0kFz5uHXqHTdSwPWx6S5/PTMB8GA1UdIwQY
MBaAFMlXF5m9qJOhhgtKYWxWJ4r17JLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOGVmODctY2Y1NS00YjVkLTk4MjEt
MDM3NDZkN2JkMjk0LzEveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wOGVmODctY2Y1NS00YjVkLTk4MjEtMDM3NDZkN2JkMjk0
LzEveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeXTmGVm
/YHWyEJil5Qp2ypfRN+Zw73T1c9fzJmRXMaR3CAci2HSW0vb1wd5g9yWAuAfT3Q0
2SPz+a7e5uiWy975ywRXXjyHtcADZrAGHbDAzrdutVS5lQplx3FGZr9bxYhiLRjk
tJfPsNHV4pjj3sHTOTchtQnZDqMQgvCYFNZ4GY/Ru8BvOCHMVdqB/5BmIFs0m0sG
1ymqFhqBqRIO7KhejLFjzY69xEgLQwi3kX5oyrXPre/7ggRXkTpSj3+pAKUROZp9
PS49dXqCDbC69g6dmH1Bt4IoJJwvinNpj8kDUq4eaKd/DsggYYnG8YkwMrWILEa2
ByUZTu8ZX/uqOg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:58 2025 by rpki-client