Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier: p9K+6tv9ywENJDnp6IOOFoayk35zZy61eZ5VlZc/IQg=
Subject key identifier: 52:5C:0B:50:DC:0C:C8:22:9D:49:06:DC:5F:3D:E8:46:AA:81:4B:42
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 0194C42C4F59BF2799E3B0CA48134061FE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number: 0B63
Signing time: Sun 02 Feb 2025 01:00:25 +0000
Manifest this update: Sun 02 Feb 2025 01:00:25 +0000
Manifest next update: Mon 03 Feb 2025 01:00:25 +0000
Files and hashes: 1: nbnIAVJNAnZgU5AVCE_qus_GC7w.roa (hash: kRfWet6eSf4dnBlKBrx1NbKgX3QvN7s8AHAHv5b5NzM=)
2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: FuYp/4kUFbssCm3nd+Tq3cUr7nuobPiN+UxOVTIObbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:4f:59:bf:27:99:e3:b0:ca:48:13:40:61:fe:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Feb 2 01:00:25 2025 GMT
Not After : Feb 3 01:00:25 2025 GMT
Subject: CN=525c0b50dc0cc8229d4906dc5f3de846aa814b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:4a:55:c4:aa:9b:25:3c:95:13:3a:e5:19:
fe:33:e5:f2:6c:ba:fa:79:fd:35:06:90:15:d8:f2:
b5:fd:77:21:92:56:82:db:8f:4a:db:71:bc:e6:c3:
4b:b9:9a:08:80:ea:db:ed:ee:aa:ed:9a:dd:12:cc:
c2:55:dd:df:42:85:79:96:c0:df:6e:0d:60:f0:9c:
27:90:72:32:8e:8e:d5:79:46:a0:45:97:de:e1:4d:
48:30:61:3d:4a:d2:99:da:0f:f7:36:cd:9f:18:2a:
1f:87:0c:2a:92:49:64:6e:bc:0c:26:9d:48:b8:7a:
6c:49:7f:4b:82:0c:a6:14:ad:dd:33:9a:c7:fa:6f:
f8:c3:48:53:3d:33:4a:f0:88:06:40:ea:16:bb:9b:
ee:00:ec:31:53:03:c5:4e:24:ae:90:8c:c1:a2:fd:
57:ca:23:4f:8e:c4:73:8d:4e:47:24:28:2a:b0:96:
d5:49:e8:d5:ef:34:cc:46:38:30:ba:89:d2:79:93:
55:a3:fc:30:d6:39:88:7f:7e:d0:6a:3d:41:0f:29:
ec:81:42:bd:3f:19:7e:83:24:f3:da:27:1e:d8:ad:
0b:5e:62:85:76:f2:08:26:29:53:56:d1:54:2a:0b:
32:f9:8f:c7:00:ba:f8:60:88:44:2e:c3:67:07:51:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5C:0B:50:DC:0C:C8:22:9D:49:06:DC:5F:3D:E8:46:AA:81:4B:42
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:22:2f:6f:31:c6:90:cd:6d:5c:78:f3:39:8a:80:d4:40:da:
e1:70:93:fe:94:40:5e:fe:cb:f7:95:4f:07:9b:67:a4:10:1a:
6f:b5:ef:44:90:8c:bb:fd:9b:ea:ca:9b:88:aa:78:66:53:15:
ef:dc:35:b9:ed:78:0f:e8:41:50:25:ed:e8:f5:22:80:7d:18:
94:99:f8:da:18:d4:b3:fb:29:6e:2c:25:7d:23:99:23:0a:fd:
ce:47:83:c3:ee:d0:77:48:2a:76:bf:44:a8:6d:41:b1:55:26:
79:46:3a:19:ed:a0:6d:e6:70:70:cb:4f:74:e7:0b:d4:51:83:
97:82:18:f9:00:53:51:5b:89:35:8b:7c:c2:25:1a:48:fb:96:
cf:d8:a7:9f:13:12:34:ec:f9:d5:28:e8:ae:f9:ac:3c:6e:45:
c1:9f:15:35:db:6e:7e:2f:1f:07:de:21:70:e9:0f:0c:fd:88:
70:6c:08:ea:27:bb:aa:cc:92:f9:36:29:25:80:8f:69:e8:80:
09:00:2f:a3:6c:d7:4f:4a:bb:d7:c2:a3:6a:f1:6b:f3:c8:d1:
01:6a:e0:2e:eb:d6:28:f0:c9:6e:99:6c:12:4d:c3:da:d3:08:
26:8d:d7:bc:ee:f1:0a:17:b4:c2:36:93:50:a9:65:70:c3:5f:
81:7f:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:23 2025 by rpki-client