Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json)
Hash identifier: D5W8KiZo3Sx7qdDKh4+yde8A0P653P0Euf3H6sihkIM=
Subject key identifier: 0B:00:01:16:75:FD:80:FD:97:8E:C3:3E:3F:B8:C6:23:0B:8F:5B:81
Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Certificate serial: 0194C3873FDE63BC7BEB7AF22D0CA9EA8939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
Manifest number: 0E6E
Signing time: Sat 01 Feb 2025 22:00:08 +0000
Manifest this update: Sat 01 Feb 2025 22:00:08 +0000
Manifest next update: Sun 02 Feb 2025 22:00:08 +0000
Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: O+GJrDYcUEi5NpAL7hJR6OSHnPs48QyUw8p1FBMRZFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:3f:de:63:bc:7b:eb:7a:f2:2d:0c:a9:ea:89:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9
Validity
Not Before: Feb 1 22:00:08 2025 GMT
Not After : Feb 2 22:00:08 2025 GMT
Subject: CN=0b00011675fd80fd978ec33e3fb8c6230b8f5b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:54:b1:34:28:2f:16:90:45:b4:dc:60:d3:b2:
f7:de:48:06:4e:ad:96:9e:94:d1:da:47:40:46:fe:
97:80:ed:20:6d:44:a1:6f:d8:e3:2f:33:8f:11:84:
af:79:d6:f4:0b:14:4d:c6:67:61:bd:ae:a6:21:77:
b0:c5:7b:2b:d5:50:52:fc:19:99:46:8e:61:5b:04:
6d:d4:5f:c7:44:4e:0a:dc:16:5e:05:3d:17:10:5e:
b9:3e:8c:17:5a:84:ba:54:08:53:c2:39:fe:1a:b2:
88:3a:08:1c:74:a5:92:82:9f:cc:5d:15:bf:d1:e0:
0b:b1:47:15:2c:87:d3:e4:83:2d:cd:b0:7a:96:99:
83:92:2f:c5:f8:f5:a3:47:39:c3:ad:a5:64:3b:b5:
a1:d6:2f:9b:5e:32:48:6f:4e:f2:c7:ec:e4:af:a1:
83:3c:cc:86:51:f9:34:07:f2:76:96:b8:97:cd:3d:
78:3f:6e:73:39:31:8f:18:66:68:d5:7f:fd:09:d3:
bc:9f:15:de:2b:bf:34:16:53:ca:4b:03:e5:12:18:
e1:77:b5:62:d1:69:96:c1:e1:fc:34:8f:29:64:66:
1c:89:0e:93:0c:d6:3c:eb:69:e4:60:b7:d0:c7:56:
29:21:1d:06:f8:8d:4f:b7:25:61:71:f4:90:de:f0:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:00:01:16:75:FD:80:FD:97:8E:C3:3E:3F:B8:C6:23:0B:8F:5B:81
X509v3 Authority Key Identifier:
keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0c:5b:3e:0c:a7:49:15:01:38:f1:b9:25:4e:cb:66:71:80:
26:3d:e2:c4:1b:4a:c7:07:6a:dd:d6:02:70:cf:fd:81:9c:b5:
23:d5:ea:b8:6f:cb:83:d0:24:af:8a:ac:c1:f9:ff:7e:2b:2a:
d6:da:e5:44:5a:02:fb:1d:0b:7c:c6:76:3e:6b:77:2a:13:4c:
50:76:5c:7c:18:c0:e3:a9:63:be:b8:74:32:77:ad:2c:eb:be:
fa:03:c3:e3:40:a8:28:eb:71:2e:8c:2c:d5:d2:95:9b:9e:24:
32:21:bb:e0:20:4f:40:e7:b0:98:0b:df:49:5a:ef:ea:38:47:
5d:c7:84:52:d8:db:dd:60:d5:a4:6a:25:db:76:69:ca:06:b8:
8b:21:3a:a2:ff:5a:15:4e:c2:7d:8a:0e:ac:e9:97:b7:57:3c:
a0:83:6d:eb:c1:46:05:2e:0f:78:12:53:61:63:bc:2a:59:f9:
51:de:eb:f5:58:6e:82:21:74:57:32:7e:2d:fe:dd:7b:11:17:
de:c1:52:b7:62:50:c5:0b:63:fd:24:ac:c7:c3:28:f8:78:53:
00:a4:17:42:07:67:1a:86:57:20:82:e5:cc:a7:df:31:4b:99:
aa:33:cc:95:ee:02:a3:51:a3:15:44:e7:cf:a4:1f:88:57:55:
d9:1a:07:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDhz/eY7x763ryLQyp6ok5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZjg0Y2JhNzc0YTljMjFhMjk4NjZkNDhlNWRjZjA3NTlj
ZDRhYTkwHhcNMjUwMjAxMjIwMDA4WhcNMjUwMjAyMjIwMDA4WjAzMTEwLwYDVQQD
EygwYjAwMDExNjc1ZmQ4MGZkOTc4ZWMzM2UzZmI4YzYyMzBiOGY1YjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlSxNCgvFpBFtNxg07L33kgGTq2W
npTR2kdARv6XgO0gbUShb9jjLzOPEYSvedb0CxRNxmdhva6mIXewxXsr1VBS/BmZ
Ro5hWwRt1F/HRE4K3BZeBT0XEF65PowXWoS6VAhTwjn+GrKIOggcdKWSgp/MXRW/
0eALsUcVLIfT5IMtzbB6lpmDki/F+PWjRznDraVkO7Wh1i+bXjJIb07yx+zkr6GD
PMyGUfk0B/J2lriXzT14P25zOTGPGGZo1X/9CdO8nxXeK780FlPKSwPlEhjhd7Vi
0WmWweH8NI8pZGYciQ6TDNY862nkYLfQx1YpIR0G+I1PtyVhcfSQ3vDM3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsAARZ1/YD9l47DPj+4xiMLj1uBMB8GA1UdIwQY
MBaAFGD4TLp3Spwhophm1I5dzwdZzUqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYt
ZWI3YWE2MmYzNTZiLzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYtZWI3YWE2MmYzNTZi
LzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQxbPgyn
SRUBOPG5JU7LZnGAJj3ixBtKxwdq3dYCcM/9gZy1I9XquG/Lg9Akr4qswfn/fisq
1trlRFoC+x0LfMZ2Pmt3KhNMUHZcfBjA46ljvrh0MnetLOu++gPD40CoKOtxLows
1dKVm54kMiG74CBPQOewmAvfSVrv6jhHXceEUtjb3WDVpGol23Zpyga4iyE6ov9a
FU7CfYoOrOmXt1c8oINt68FGBS4PeBJTYWO8Kln5Ud7r9VhugiF0VzJ+Lf7dexEX
3sFSt2JQxQtj/SSsx8Mo+HhTAKQXQgdnGoZXIILlzKffMUuZqjPMle4Co1GjFUTn
z6QfiFdV2RoH1g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:56 2025 by rpki-client