Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
File: UJVwBFEY_ttvz2G1lCDIc7cVh78.mft (raw, json)
Hash identifier: 5CaZH9Z8AHJ+iP5SfGqR2IuDXhI8+EgwxA9NHf3TWho=
Subject key identifier: D7:5D:59:F8:7C:0D:72:3A:69:BD:E4:2F:4F:A4:C0:59:65:A2:0E:82
Authority key identifier: 50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
Certificate issuer: /CN=509570045118fedb6fcf61b59420c873b71587bf
Certificate serial: 019659B92C18FC6B0D2187AE8B6BFBB1C0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 19:00:29 +0000
Manifest this update: Mon 21 Apr 2025 19:00:29 +0000
Manifest next update: Tue 22 Apr 2025 19:00:29 +0000
Files and hashes: 1: UJVwBFEY_ttvz2G1lCDIc7cVh78.crl (hash: 1MBPFvHoLKpofK8Z8L1UA1cWQGcGIjiIetFZ8CwFScM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:2c:18:fc:6b:0d:21:87:ae:8b:6b:fb:b1:c0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509570045118fedb6fcf61b59420c873b71587bf
Validity
Not Before: Apr 21 19:00:29 2025 GMT
Not After : Apr 22 19:00:29 2025 GMT
Subject: CN=d75d59f87c0d723a69bde42f4fa4c05965a20e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:c9:0b:7e:9f:49:e5:7d:e6:4d:5d:b9:a0:
f5:4c:73:2c:f0:c4:c5:31:87:1e:04:a6:fd:b0:ce:
92:1a:79:a5:24:91:f8:d3:bd:cc:35:c3:fc:1d:35:
f6:bf:ed:a7:8e:90:cd:27:26:21:30:6c:cd:e7:24:
c2:82:11:36:dd:f0:6a:10:89:8b:79:2e:61:25:9e:
d2:f6:ec:09:b5:cd:fb:c4:09:1f:b4:59:b9:78:d4:
c1:07:b0:b2:a5:39:9a:5d:be:41:5e:a4:37:c7:d8:
1f:49:ec:d3:98:1c:3f:2f:1c:9d:3c:58:c5:e1:98:
a3:24:ee:3a:fd:b1:73:a6:75:0d:3f:d2:82:19:b6:
d4:f4:f2:39:6d:c8:e8:7e:7e:01:f6:1a:d4:0a:77:
ae:89:c1:1c:3b:6a:18:35:a5:2e:6b:c3:0b:3f:23:
c5:c6:1f:5b:dc:a1:75:d2:bf:36:b8:40:06:2f:55:
39:ef:31:29:a5:01:d6:8f:05:aa:bb:71:04:38:7b:
b8:94:62:60:c6:62:f2:de:f2:5e:cc:a4:16:70:77:
ed:fd:d2:0a:d0:f6:bc:4f:62:eb:66:fb:ee:53:39:
33:6a:f5:c7:7c:03:72:66:7d:bf:4f:6c:bb:3f:d2:
10:06:9e:78:da:e2:9d:82:5f:1c:41:55:9e:79:84:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5D:59:F8:7C:0D:72:3A:69:BD:E4:2F:4F:A4:C0:59:65:A2:0E:82
X509v3 Authority Key Identifier:
keyid:50:95:70:04:51:18:FE:DB:6F:CF:61:B5:94:20:C8:73:B7:15:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJVwBFEY_ttvz2G1lCDIc7cVh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cba74-2d6a-4eb1-a973-0b360274a4a5/1/UJVwBFEY_ttvz2G1lCDIc7cVh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ab:32:da:a1:8e:66:ba:9a:32:c0:1d:e1:6a:1a:4e:15:d1:
8a:0f:2a:66:f8:4f:9f:4a:24:77:88:d6:be:c3:75:90:a7:b0:
58:9c:75:ec:10:67:db:1c:71:d6:34:ba:9c:f1:61:b1:76:2c:
2d:a7:d3:98:71:f5:d4:36:6b:04:27:76:82:51:91:2c:a3:d9:
23:ab:56:d8:79:26:e4:04:46:62:3e:10:45:23:48:34:67:24:
b8:78:91:7a:fc:e3:b4:a0:ab:81:35:40:26:1a:74:dd:40:7b:
91:ab:ce:9d:02:50:c3:62:9e:3c:4b:dc:b7:22:b4:82:f0:0a:
08:5f:67:0f:9b:81:ed:a2:47:98:b9:71:b4:b5:ae:72:eb:36:
e6:8c:91:9e:d5:c9:8f:f7:95:2a:5f:ac:37:b5:76:4e:ce:31:
1f:a1:62:61:18:69:16:1a:2d:94:ec:b2:2b:61:1f:82:3e:1d:
e4:c3:b2:40:8d:19:87:1c:83:45:88:0a:bc:43:77:f7:da:6f:
0f:59:ea:ad:29:e2:67:51:6e:87:3f:dc:77:d9:84:a7:6b:86:
b0:65:1e:d9:cd:9c:83:0e:fd:3b:05:72:c6:ca:bd:56:f5:4f:
4f:3d:fb:31:63:ee:65:3f:1c:49:ce:0e:74:0e:bf:72:0d:c3:
b1:93:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:15 2025 by rpki-client