Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier: 33GLfnmp/mEes9O2AOlojcRA8GW9vSm+IMF9IWX20cU=
Subject key identifier: 0C:C4:E6:88:DB:A5:74:C1:6C:B5:1A:1E:AE:1D:D8:8B:30:A9:8B:F8
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial: 0194C3F60AB9350B36717A6D954E467DB2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number: 086D
Signing time: Sun 02 Feb 2025 00:01:08 +0000
Manifest this update: Sun 02 Feb 2025 00:01:08 +0000
Manifest next update: Mon 03 Feb 2025 00:01:08 +0000
Files and hashes: 1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=)
2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: twu4gfRWOXEve79l5nfJnNlR6DVdJcdrw1pL2Up0N2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:0a:b9:35:0b:36:71:7a:6d:95:4e:46:7d:b2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Validity
Not Before: Feb 2 00:01:08 2025 GMT
Not After : Feb 3 00:01:08 2025 GMT
Subject: CN=0cc4e688dba574c16cb51a1eae1dd88b30a98bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:03:3d:1a:68:f1:bc:88:dd:de:14:5b:88:
30:39:a9:3b:4d:76:7c:ef:b2:f2:42:55:db:aa:da:
c5:9d:29:24:26:21:ee:a2:6a:e3:63:81:b1:b5:10:
ed:c1:be:d5:03:a3:f8:ab:5c:dd:a4:62:de:22:87:
eb:51:17:49:e9:6b:f4:ad:35:27:57:cd:36:04:bf:
d4:98:2e:93:19:ae:b3:b2:0a:9c:a2:09:b7:83:9d:
e9:0a:ec:b2:c7:5b:ff:79:0d:20:56:cf:ad:3a:9c:
b3:de:da:1a:47:6b:74:84:f0:4c:68:de:14:eb:30:
7c:b9:da:52:26:98:3d:77:15:61:9f:4c:68:19:c3:
de:37:ca:87:14:1d:cc:79:55:02:02:b5:b4:ab:12:
9d:04:c5:a0:67:f6:0d:a9:d6:9e:72:0b:c6:90:9f:
a1:cd:c5:52:5f:46:f8:c5:6a:a0:4a:f1:36:a9:42:
9b:ef:c6:32:92:a2:bb:73:b4:07:21:53:79:d4:a5:
55:54:42:47:24:4d:4c:1f:89:58:0f:a4:27:e8:95:
36:c2:c2:90:02:7c:ec:bd:88:74:e3:13:9b:96:ab:
f2:d9:69:3d:0e:32:fe:3a:2f:57:cd:5c:ab:20:a0:
e4:9d:40:1d:89:21:06:2f:42:55:7c:be:7e:9e:b2:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C4:E6:88:DB:A5:74:C1:6C:B5:1A:1E:AE:1D:D8:8B:30:A9:8B:F8
X509v3 Authority Key Identifier:
keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:25:c4:6a:bd:3e:ff:c8:1f:f6:e6:9e:d1:2e:08:46:50:e7:
de:c0:ed:88:89:3c:67:f7:7e:dc:17:cf:7f:5a:b4:c1:b8:27:
bb:50:a0:ec:61:af:af:09:4d:09:82:52:31:58:3d:68:d3:ea:
63:6d:f5:ed:b6:93:b5:ac:7d:33:5e:16:03:89:8c:24:18:a8:
85:f6:26:21:a7:52:28:72:df:70:c8:36:cc:bc:2c:25:25:eb:
91:0c:ca:9f:e3:73:44:74:b1:c1:47:ca:99:07:d6:0c:69:eb:
a0:95:19:55:68:ed:e8:0f:f9:2e:e7:87:6c:d0:54:87:a3:f8:
49:72:13:48:6a:65:99:ec:c7:ef:95:eb:63:69:6b:fd:0d:91:
30:56:78:f3:b7:af:b3:4b:06:68:ee:14:14:61:d2:d8:7c:34:
62:2e:31:25:d0:ec:22:d2:68:a7:89:61:0c:37:85:cf:91:04:
32:ca:32:0b:dc:f2:4e:35:af:e5:75:fc:62:fb:54:4a:cc:28:
c0:e0:56:70:12:e7:97:43:fe:1b:4a:05:c9:45:f4:19:8f:8a:
81:d5:f2:e3:92:03:c9:15:ca:39:51:24:2a:ba:9c:8e:9b:ec:
97:ba:1b:cf:0f:48:39:64:57:25:bd:3d:0b:ca:74:1d:7b:1e:
6f:9c:7a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:23 2025 by rpki-client