Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
File: Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft (raw, json)
Hash identifier: iq+2GLkzQvO60A7dyhzyBcV7yRTHYdPRi7zb7RRFcbo=
Subject key identifier: 71:66:2B:2D:02:DF:CE:66:FE:4D:11:1C:FD:16:A9:B5:DB:14:7B:85
Authority key identifier: 63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
Certificate issuer: /CN=636b027bfab91aa4719a80efe021246137428bda
Certificate serial: 0194BB291F15E20F72517EB731A4382B9785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
Manifest number: 11C9
Signing time: Fri 31 Jan 2025 07:00:21 +0000
Manifest this update: Fri 31 Jan 2025 07:00:21 +0000
Manifest next update: Sat 01 Feb 2025 07:00:21 +0000
Files and hashes: 1: Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl (hash: 7Cy7xxU+vKQfwZJEzaMkKgF8lE32n1CJgmvd0G1eaWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:1f:15:e2:0f:72:51:7e:b7:31:a4:38:2b:97:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636b027bfab91aa4719a80efe021246137428bda
Validity
Not Before: Jan 31 07:00:21 2025 GMT
Not After : Feb 1 07:00:21 2025 GMT
Subject: CN=71662b2d02dfce66fe4d111cfd16a9b5db147b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:2c:cf:8f:9a:65:00:74:ec:24:9c:cd:65:
e5:64:d2:c2:84:c5:65:b5:82:fc:f6:13:e6:3b:a5:
a5:e9:e8:0b:f9:cf:76:df:b1:45:e0:db:e8:3b:f5:
d8:03:56:f3:d4:41:e5:0f:e1:51:37:da:e5:a5:2b:
d0:0c:a3:63:af:ed:ba:ea:b3:e4:ad:66:13:0c:0f:
da:22:56:04:71:5e:7a:27:d4:b7:cd:56:b3:41:63:
bd:08:92:f1:4e:a8:a6:7f:72:aa:1a:17:da:a1:28:
ca:4c:e4:29:3b:a4:e4:de:f5:f9:2d:87:ac:bb:7e:
2e:6e:23:73:41:12:40:dc:18:0b:77:e1:8d:de:4a:
0f:fa:ea:44:87:52:2e:0c:26:93:aa:2a:5b:50:8c:
49:2a:1c:72:4e:ad:80:78:0f:2e:04:ba:b2:46:c9:
24:36:b6:d2:b0:00:cd:f7:d8:99:ed:70:f4:c0:af:
31:42:60:87:e7:07:1c:ce:c6:a7:d4:30:46:99:1c:
9f:4c:98:c0:01:c4:0b:29:cc:c2:31:62:f0:09:43:
87:53:d2:44:ce:90:77:a4:77:62:9b:b9:51:48:8f:
15:97:3d:7b:2e:c3:82:11:51:7a:dc:de:67:ff:4f:
b9:ea:35:5a:f1:2a:e5:17:5e:9e:2f:b0:56:aa:d2:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:66:2B:2D:02:DF:CE:66:FE:4D:11:1C:FD:16:A9:B5:DB:14:7B:85
X509v3 Authority Key Identifier:
keyid:63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e4:02:ea:61:23:58:ab:6b:f3:d9:a7:d6:56:e5:96:bb:6e:
98:7a:52:3e:5c:d5:0e:48:9c:22:07:25:c5:4f:72:74:55:80:
c8:d2:ed:65:4d:1c:1c:b3:6b:f4:ed:cb:b5:05:38:a0:42:63:
97:69:1b:5b:5e:e7:02:a3:25:ea:27:a5:e1:39:5a:fd:07:6f:
6b:92:c1:c8:10:e5:71:37:ad:f0:24:18:2a:66:96:1d:6a:e4:
39:23:e5:d1:21:d6:ce:6b:78:bd:17:4f:d4:c2:c6:27:b6:c5:
0e:4e:bd:a4:80:13:b8:b8:da:64:53:c2:43:c8:5e:ff:c5:45:
e5:0b:31:8b:1c:3a:32:65:6f:9e:4c:38:ae:ec:cc:a0:ce:45:
0c:ed:b9:2e:bd:4d:25:e8:1c:1e:1d:c2:8c:ca:da:ad:8a:1c:
b1:d9:9f:db:52:13:b0:e3:44:b4:1c:97:6f:b2:ed:e5:98:88:
14:d3:41:9e:50:e4:05:d6:5c:36:81:e5:58:bb:11:46:3c:50:
96:9a:b9:e4:00:e3:8d:79:a0:f4:ed:ce:51:83:e7:f3:a5:f5:
06:55:dd:fc:7e:c2:e4:bd:cb:df:94:70:7c:bc:25:19:23:0e:
fe:cb:78:97:6f:b5:33:e1:0f:4e:5f:ce:c0:d5:de:ba:19:4f:
5e:53:f2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:07 2025 by rpki-client on console-fra.rpki-client.org