Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
File: YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft (raw, json)
Hash identifier: 9luOW6WtKnOwzX6INfr0cgr8JReg1eAJQx1MD1tC8Yo=
Subject key identifier: 57:10:29:BA:15:95:93:A3:12:61:E0:F4:02:33:D5:7A:C5:F4:9E:31
Authority key identifier: 60:FB:55:E9:AE:26:32:CE:DE:FD:B5:55:99:52:1C:55:B8:D0:B1:21
Certificate issuer: /CN=60fb55e9ae2632cedefdb55599521c55b8d0b121
Certificate serial: 0194C3F5EF2BF41871BCCD2A0E33731769E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
Manifest number: 05A7
Signing time: Sun 02 Feb 2025 00:01:02 +0000
Manifest this update: Sun 02 Feb 2025 00:01:02 +0000
Manifest next update: Mon 03 Feb 2025 00:01:02 +0000
Files and hashes: 1: YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl (hash: Ua8PCc9SjwUEAnuCj0TOAB98yDDpF4Sh/Nk4SviR7VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:ef:2b:f4:18:71:bc:cd:2a:0e:33:73:17:69:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fb55e9ae2632cedefdb55599521c55b8d0b121
Validity
Not Before: Feb 2 00:01:02 2025 GMT
Not After : Feb 3 00:01:02 2025 GMT
Subject: CN=571029ba159593a31261e0f40233d57ac5f49e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:37:4d:41:de:e3:28:f3:9c:7f:88:c1:26:
5e:ac:5c:4c:4e:7c:b0:99:10:d3:73:8a:c8:49:3f:
90:37:fe:50:a4:b4:69:ed:d9:07:27:fd:dd:2a:9b:
29:94:30:42:ad:9a:8e:0c:4e:df:e9:da:70:11:1c:
4b:a5:22:5c:81:a5:6b:60:8f:82:5a:b9:ec:36:f2:
c7:8d:29:67:37:90:2a:17:92:17:39:99:84:f2:7d:
6f:48:79:f8:74:41:a4:66:af:f3:15:ac:0f:ba:3d:
b6:03:88:d1:e4:0f:3e:c8:0e:78:12:b1:9a:56:3f:
89:03:f7:eb:1d:a4:f1:71:d0:9d:3b:ee:ef:bd:04:
aa:56:05:3b:3f:36:cc:86:f0:de:db:ec:56:e1:29:
79:61:d6:ed:c2:b6:63:82:8f:ad:f5:6c:13:4c:fc:
2a:d1:8e:35:19:fd:74:cf:8d:e9:c7:63:78:03:13:
4a:95:91:07:13:d0:fd:e7:8b:ec:a1:1c:0f:d3:2d:
c9:e7:96:2c:f4:14:98:b3:59:d3:9f:e5:35:73:7c:
ab:28:94:08:d3:22:ff:6d:fb:34:9f:14:58:5c:b8:
80:a4:3e:b1:13:5c:41:38:75:a5:db:24:db:2f:08:
3b:d4:27:7b:6a:48:be:29:8b:aa:61:c9:20:9a:6d:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:10:29:BA:15:95:93:A3:12:61:E0:F4:02:33:D5:7A:C5:F4:9E:31
X509v3 Authority Key Identifier:
keyid:60:FB:55:E9:AE:26:32:CE:DE:FD:B5:55:99:52:1C:55:B8:D0:B1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3c:ea:fc:6f:e5:69:ce:e2:03:ee:41:50:7c:2c:9e:78:f2:
34:df:cb:6a:73:50:ed:7d:95:00:57:5a:dd:98:75:75:25:7b:
f1:f2:8d:e4:c0:e2:17:f3:33:73:00:03:63:d8:77:75:64:38:
78:9e:90:b8:d3:8a:ae:53:ba:b6:b1:4e:32:f8:d4:58:d5:c4:
ff:3b:bc:74:48:5e:be:ce:03:a8:d6:5d:9d:24:e9:f6:5f:58:
1e:ac:fa:4e:d1:0d:7c:3e:f6:5c:88:26:88:0e:d3:e8:94:de:
6b:ed:f4:ea:a4:e0:d2:40:32:78:c9:dc:54:71:dd:ba:1c:03:
5d:44:b4:99:4b:5a:50:f0:35:0e:19:12:e8:5b:51:43:0b:e0:
08:cf:98:26:e6:05:a4:07:0a:17:b5:6c:fa:ba:cb:f3:a8:a6:
ab:0b:8b:60:f2:97:09:12:eb:00:4f:19:10:83:db:c2:87:4b:
a0:60:60:9b:70:51:e5:93:44:41:53:02:99:c2:e9:0a:aa:ab:
29:3d:d3:18:df:9f:05:43:23:85:7d:76:1e:62:32:31:55:74:
3e:a1:2c:db:e7:37:79:d7:72:db:5e:c2:45:3b:e2:9b:14:05:
3a:ec:96:f4:b8:c0:4a:62:a5:ae:33:4f:f4:de:f6:00:d9:6e:
6f:e8:af:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:27 2025 by rpki-client