Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
File: Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json)
Hash identifier: zA9UhEBlgaaL3sarFDM7T5UsL5q6lp+AZneLgLYim98=
Subject key identifier: 6E:D2:D4:72:E0:AC:80:12:9C:E4:0B:2E:21:75:D8:12:A7:25:4F:6A
Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
Certificate issuer: /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Certificate serial: 01965B0395750346F8889F765B9DD5EA1D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
Manifest number: 0BE6
Signing time: Tue 22 Apr 2025 01:01:23 +0000
Manifest this update: Tue 22 Apr 2025 01:01:23 +0000
Manifest next update: Wed 23 Apr 2025 01:01:23 +0000
Files and hashes: 1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: Xw9bAe3IsgwY2XJUe6iFJAtym8tU6Bkg8BnhRcuLhqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:95:75:03:46:f8:88:9f:76:5b:9d:d5:ea:1d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Validity
Not Before: Apr 22 01:01:23 2025 GMT
Not After : Apr 23 01:01:23 2025 GMT
Subject: CN=6ed2d472e0ac80129ce40b2e2175d812a7254f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:75:4a:e7:02:88:42:82:bc:ce:97:5d:af:
8a:c9:a5:c9:cf:c3:24:90:5a:68:db:05:9c:78:e5:
7e:3e:63:43:14:ff:03:5e:a5:9a:ea:b7:b3:7b:b3:
32:08:f1:a2:a3:39:ac:e9:aa:ca:bd:19:9a:01:64:
b4:d4:57:fb:72:4c:96:05:f0:62:e5:53:03:49:2c:
9d:ee:02:cd:47:eb:fe:0a:ed:32:6b:57:76:8e:82:
cd:54:4c:30:fe:35:40:f8:17:09:9d:c9:f6:dd:45:
00:5b:fb:36:f5:6d:b9:b6:6b:26:52:b5:71:3d:61:
12:d4:e8:87:50:d2:62:0d:0f:88:01:a8:9c:8e:c8:
ee:01:82:63:f9:86:44:59:00:6f:f1:23:04:67:e2:
64:39:08:d5:e6:13:12:c8:fe:39:04:c0:7f:14:b5:
ed:fc:42:91:d6:36:08:38:5c:ca:a1:63:c3:78:f0:
81:9c:f8:b4:3b:01:a0:71:e8:79:7b:24:a5:e7:4d:
6b:67:f8:46:30:ee:ad:1d:7e:85:f4:24:75:12:a6:
30:86:49:5c:53:54:6b:69:8d:0b:31:01:1f:08:92:
84:2f:2a:5c:14:66:9d:b9:dc:7e:e0:67:0b:b7:60:
2a:3b:c2:c9:b7:42:63:73:70:f6:31:e3:e4:75:a4:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D2:D4:72:E0:AC:80:12:9C:E4:0B:2E:21:75:D8:12:A7:25:4F:6A
X509v3 Authority Key Identifier:
keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f4:39:65:c8:82:ea:0b:96:85:46:5e:be:9b:c1:e7:5b:51:
20:68:8f:91:9a:8b:e3:b2:ec:1d:d2:b1:e8:02:5b:c0:f3:6f:
5d:70:b7:7f:09:33:47:78:5e:6e:06:4c:88:28:84:ba:a1:43:
15:a3:0e:be:c9:3a:7c:a2:d9:42:88:e3:bc:f5:35:bc:c4:32:
b8:fd:cb:2f:77:7b:34:e5:24:38:28:32:4d:25:d5:a8:b9:43:
7e:f3:3a:94:6e:d1:e9:4c:e7:4f:77:3b:a8:02:fa:df:bc:04:
d9:4e:8a:f1:55:c3:3a:81:b3:d7:0d:f9:5b:73:84:ca:fc:da:
55:23:2d:4d:4e:53:27:e4:ae:1c:68:a7:91:88:79:27:50:80:
9b:1d:34:78:ee:52:cc:ae:8f:1c:46:65:ab:6c:96:ee:ca:8a:
11:fd:10:79:1c:6b:29:26:02:1f:84:79:f3:74:95:a3:56:dc:
19:32:19:27:1d:9d:d8:2f:3f:7e:1e:3f:25:bf:e6:2f:9e:6b:
cd:49:c0:fc:21:64:e9:eb:05:4a:97:c8:d9:ca:e1:9e:e9:f7:
83:44:eb:ee:3a:4c:8b:12:1d:17:00:67:19:56:81:56:28:ce:
42:07:68:85:ce:1c:d9:07:7a:d1:2f:09:ed:ce:39:61:97:f0:
fb:9e:8b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:58 2025 by rpki-client