Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
File: JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft (raw, json)
Hash identifier: XO7HVwPcHdqnB8Yf8MxR7QHg/+GmiuKgof38Qh9T6VA=
Subject key identifier: 67:7D:A2:A3:C3:C9:A0:8E:DC:30:F4:88:0E:D5:42:D5:D7:55:47:84
Authority key identifier: 25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
Certificate issuer: /CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Certificate serial: 0194BB29858E1D0579FCC95B7CF5514F0152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
Manifest number: 0520
Signing time: Fri 31 Jan 2025 07:00:47 +0000
Manifest this update: Fri 31 Jan 2025 07:00:47 +0000
Manifest next update: Sat 01 Feb 2025 07:00:47 +0000
Files and hashes: 1: JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl (hash: c+rGc8JVMvHtuYyzu42ZUmunBp+rt4od8a8+MvLUAMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:85:8e:1d:05:79:fc:c9:5b:7c:f5:51:4f:01:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Validity
Not Before: Jan 31 07:00:47 2025 GMT
Not After : Feb 1 07:00:47 2025 GMT
Subject: CN=677da2a3c3c9a08edc30f4880ed542d5d7554784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:6e:63:36:c7:93:64:6a:36:f7:ab:6e:07:
df:44:72:8f:ab:ec:64:f7:9c:72:99:66:e4:10:8f:
05:c6:0d:39:aa:1e:bc:af:ee:d8:2e:00:32:b1:77:
20:e1:b0:8f:72:52:ba:d7:8c:26:d6:35:5c:cc:1d:
db:79:87:1e:21:27:ee:5c:c1:c5:b0:58:39:99:6b:
35:a3:aa:9f:d7:a0:2f:5e:ca:0b:17:a1:b9:14:59:
bc:d9:89:5c:2d:79:dc:12:7c:96:36:70:fb:3d:48:
29:fc:d4:dc:33:dc:22:ae:78:92:38:a3:0b:85:7b:
aa:d6:ab:c3:0d:68:40:02:df:7f:16:95:6f:9d:d0:
fd:a4:1b:81:a8:10:04:a6:32:49:1a:33:23:10:b0:
20:10:83:90:06:0a:9d:d9:8a:14:2c:da:1d:59:f2:
1e:0b:7b:c3:d7:68:2d:50:be:19:17:2e:c3:51:da:
94:12:5e:c9:e0:d9:e5:c6:19:1d:62:78:fe:ee:56:
a1:7b:1f:b9:f1:c7:d9:97:bb:5a:b4:bf:b7:6f:68:
14:49:f2:84:6b:4e:1d:e3:b3:ec:04:97:b3:ef:4a:
c2:b8:af:e5:6c:16:05:6b:f6:9f:25:49:e7:06:e1:
00:e5:5a:d4:4b:1f:5b:d9:a5:00:be:ed:e4:62:fb:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7D:A2:A3:C3:C9:A0:8E:DC:30:F4:88:0E:D5:42:D5:D7:55:47:84
X509v3 Authority Key Identifier:
keyid:25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0e:4e:2b:a8:f7:c3:eb:56:0f:19:96:76:ee:e0:1d:59:c1:
8a:13:cb:3f:db:0b:9c:5a:3e:77:3d:66:04:37:7f:87:0f:a7:
92:10:57:70:23:1a:a3:5e:63:5b:b6:06:e1:d6:ff:b0:50:d3:
a5:cb:9d:82:1a:9b:0d:79:7a:de:4c:ca:75:07:89:9e:88:67:
f4:96:af:b6:50:9b:68:3d:fc:3e:4f:2e:97:3b:09:8b:c2:d5:
4e:67:5b:0a:33:95:15:a9:3f:3b:46:4b:3f:00:58:b5:f8:0a:
60:eb:15:8d:23:58:f2:84:62:34:62:bd:55:0f:37:df:e6:99:
74:17:5a:62:5a:7a:17:00:4a:82:50:96:b6:52:6c:01:52:3b:
34:aa:1a:7c:ef:6c:63:5c:03:db:6e:3f:91:0f:9e:40:d2:b7:
88:e4:b2:6e:b1:a1:1e:c5:13:97:d8:70:a7:4d:e8:5a:7d:d0:
ef:9e:88:b1:c8:d9:df:78:55:90:ef:44:2f:60:f7:c0:9c:32:
91:24:7b:62:b1:35:d7:2b:10:d7:87:b7:8f:57:68:ce:06:6b:
2c:a1:6b:ea:97:17:ce:0f:01:6e:bf:ce:ca:cd:28:63:36:07:
d0:d8:51:84:d6:95:94:d2:40:a1:ce:3a:8c:cd:29:67:92:c3:
9a:6b:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:09 2025 by rpki-client on console-fra.rpki-client.org