Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
File: yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json)
Hash identifier: aCJ+CumLWZDeMG1+k5522EPzns3vIFNblG+kmEcLpLk=
Subject key identifier: 23:75:45:8E:24:9B:AF:BC:EE:87:C0:9A:44:CB:BF:B7:AE:AC:EC:91
Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
Certificate issuer: /CN=cb268b529393018d4bc9fc54073030a03d929721
Certificate serial: 0194C4D0F20C07FE5D6BF6C84B04DBB1D6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
Manifest number: 10C3
Signing time: Sun 02 Feb 2025 04:00:15 +0000
Manifest this update: Sun 02 Feb 2025 04:00:15 +0000
Manifest next update: Mon 03 Feb 2025 04:00:15 +0000
Files and hashes: 1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: YgySbsr/yjP+nxg63YPFzzT0Y4Hv8+oNSe1bnHUukQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:f2:0c:07:fe:5d:6b:f6:c8:4b:04:db:b1:d6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721
Validity
Not Before: Feb 2 04:00:15 2025 GMT
Not After : Feb 3 04:00:15 2025 GMT
Subject: CN=2375458e249bafbcee87c09a44cbbfb7aeacec91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:f1:92:8a:bc:d7:d0:25:76:5e:2b:85:d4:
d6:83:57:48:96:cf:c1:bc:6f:26:b0:58:51:c6:be:
95:cc:47:03:d1:c1:58:80:fd:a5:f8:51:3a:d5:c5:
92:7e:67:81:da:1a:0b:d3:86:40:37:5e:19:9f:5d:
64:4f:1a:9f:39:c8:d3:00:91:8f:80:ee:21:5b:87:
e2:25:29:63:0c:e1:06:9a:fa:96:3f:37:70:07:ac:
39:0d:e0:b8:50:75:35:2c:78:fd:0d:4f:67:6f:35:
5b:88:b9:1f:4d:a3:16:f8:9c:2d:62:dc:3d:65:4b:
23:38:23:b2:a9:cb:86:64:12:9b:c0:2a:96:06:21:
bb:ae:04:2f:cc:57:b8:33:08:0a:0a:cd:5a:02:96:
a6:81:01:39:0d:7c:a5:ae:35:53:86:1d:79:2c:dc:
1a:44:88:9b:29:8f:df:d9:5d:0d:df:76:99:41:17:
67:06:e8:dc:f7:b9:c9:a9:78:df:b4:c5:72:89:b6:
c5:a0:c8:0e:d1:54:95:39:ce:41:8b:cb:50:41:cb:
35:df:56:41:e0:bc:33:87:df:d9:76:7c:06:88:c9:
e3:16:5e:9f:dc:24:29:08:d7:40:c8:7c:6c:c9:11:
2b:d0:0e:45:52:5a:8e:ce:7f:d2:71:71:82:7c:6e:
c5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:75:45:8E:24:9B:AF:BC:EE:87:C0:9A:44:CB:BF:B7:AE:AC:EC:91
X509v3 Authority Key Identifier:
keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cd:dc:5f:0b:e7:cd:23:ad:d2:fe:75:17:70:36:9d:17:c5:
ab:32:74:12:6e:b0:80:6e:98:12:7a:50:b8:26:37:07:45:0b:
23:3d:0a:14:95:5b:c8:51:9c:8e:0f:71:93:f4:62:91:3c:b7:
ed:2f:1f:15:26:e5:05:4c:73:31:e3:bf:50:b7:61:8b:0e:c4:
98:34:76:07:57:8a:36:77:b3:1d:a9:c0:74:ca:a5:37:6c:a7:
65:08:e9:cf:0f:99:bd:f4:a0:70:b6:1a:60:63:89:ba:46:27:
3b:da:35:d9:a0:38:f8:54:3e:90:a7:4f:2f:1f:11:51:43:4a:
ef:db:d2:df:01:1b:0c:39:73:46:7d:3f:2e:68:f4:17:45:b2:
95:7d:17:4e:03:4b:80:ed:27:33:8b:31:8c:f7:5c:4c:15:64:
c1:eb:1e:fe:fd:28:3b:04:33:15:a8:4b:ca:70:84:1d:75:3b:
fc:f7:97:86:9c:08:79:5d:62:57:b6:a2:10:59:df:f2:9a:f4:
e8:15:7a:a2:1d:a1:51:4c:85:e4:49:4d:e3:8b:2f:c4:36:f3:
eb:24:33:da:64:26:1b:34:a6:4b:af:17:64:a1:4a:6e:a7:88:
02:87:3c:42:2e:e4:8d:8b:ee:c8:10:db:d4:f6:93:09:68:98:
58:d0:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:55 2025 by rpki-client