Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json)
Hash identifier: UfSACoBKUy1DjkMT9naNzbnbFC4zyf6bwTIaJ7o5XZc=
Subject key identifier: A4:31:D6:15:10:90:CD:E8:BD:E5:78:B1:2B:63:D7:33:6B:C6:01:17
Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Certificate serial: 0194C3877B2D7B27D9E520446056678B98C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
Manifest number: 13BE
Signing time: Sat 01 Feb 2025 22:00:23 +0000
Manifest this update: Sat 01 Feb 2025 22:00:23 +0000
Manifest next update: Sun 02 Feb 2025 22:00:23 +0000
Files and hashes: 1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: AIuTfW3DFcb6wGHPzFYaSksVqJYf9nwZ3nmULZtFyoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:7b:2d:7b:27:d9:e5:20:44:60:56:67:8b:98:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0
Validity
Not Before: Feb 1 22:00:23 2025 GMT
Not After : Feb 2 22:00:23 2025 GMT
Subject: CN=a431d6151090cde8bde578b12b63d7336bc60117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:79:0a:4c:89:72:71:39:01:33:ac:d0:35:
d0:17:15:46:70:c7:bd:96:98:de:7d:83:21:72:09:
09:7c:8b:ed:50:0d:6c:6f:fe:92:df:b9:10:7e:3a:
9f:5b:59:4b:35:13:e0:9b:f5:ab:38:11:22:81:c1:
91:37:2f:83:cd:bf:45:ff:35:d5:0c:dd:1e:ab:ff:
c9:4c:e5:74:47:08:09:b7:00:6f:8f:fe:43:7b:2f:
80:ab:33:ec:ee:94:2e:b1:51:de:91:35:66:e7:01:
22:b3:dc:a9:e1:05:15:54:b6:6a:82:c5:63:9f:e9:
c4:00:01:81:b4:8c:24:94:62:fe:68:13:e6:ea:db:
cb:ff:17:b7:5e:69:33:93:06:bc:90:ee:62:b7:61:
a8:c2:70:e9:1c:9d:99:88:93:07:2e:d9:44:65:d3:
6d:24:c6:27:95:ba:ad:2a:86:93:a2:7c:b5:8e:98:
ba:8d:80:d6:cc:28:a6:f5:c0:0c:94:d2:fc:bd:ed:
cf:03:c9:4a:cc:29:d9:bf:eb:cf:22:f2:86:2d:a0:
b6:62:83:65:3a:87:e6:ab:89:d0:4d:f3:5f:e8:a3:
9f:a9:3e:2f:53:25:f7:ba:7e:09:08:00:cf:c4:9a:
fb:97:6b:f4:07:fc:cf:8c:5a:82:22:ce:7b:9e:91:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:31:D6:15:10:90:CD:E8:BD:E5:78:B1:2B:63:D7:33:6B:C6:01:17
X509v3 Authority Key Identifier:
keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:69:ef:6b:24:46:69:48:63:6e:d6:c9:55:92:d6:f7:e0:26:
d5:d3:70:31:e3:e6:8e:f5:29:ec:26:f6:5a:ea:44:80:3a:00:
84:b3:9a:18:9c:4b:fb:21:4a:53:49:69:b7:f3:d1:49:73:5d:
da:b4:4d:15:94:6e:22:1a:38:5e:f8:bf:2f:5d:ba:f0:d5:53:
ad:3d:83:39:96:b1:97:70:0a:db:00:da:98:0f:23:5d:21:d4:
a3:18:cf:83:05:ca:83:75:8a:e7:7f:59:e6:2b:c7:ac:19:ac:
10:6c:20:dd:3a:f4:9b:30:01:a0:fc:cd:ab:57:05:d5:50:73:
69:6e:8c:b8:56:6d:d6:f8:75:a3:1b:cf:6f:cf:21:6c:4c:b7:
61:88:d7:8a:a1:a7:66:60:46:72:d8:db:3d:b5:c4:2e:73:4d:
d4:96:3d:e6:41:b1:06:c2:a9:4c:cb:2b:af:a6:38:57:68:83:
4c:34:be:7e:59:20:c8:a0:9f:8c:56:c7:a2:2d:5f:bf:87:71:
a0:f4:02:d7:24:63:f3:4e:3a:73:b1:21:32:e2:f5:92:0c:45:
34:b6:1d:8e:d6:98:aa:31:56:7b:5a:e3:1f:8f:65:03:f5:1a:
5c:b6:72:ef:8e:ce:71:f9:df:40:79:ef:af:b6:5a:4d:9a:53:
50:a8:2f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:38 2025 by rpki-client