Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
File: Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft (raw, json)
Hash identifier: DlfNq7UrQDYPLxBzsvamVR5sdIHczDcztw/N6WgOL5E=
Subject key identifier: EF:A9:1D:C0:B2:7E:CC:E2:53:09:F8:A2:87:10:39:29:A5:A6:9F:FE
Authority key identifier: 53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C
Certificate issuer: /CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
Certificate serial: 0196572693836FF9127FDFAB4E1D45D8A3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 07:01:07 +0000
Manifest this update: Mon 21 Apr 2025 07:01:07 +0000
Manifest next update: Tue 22 Apr 2025 07:01:07 +0000
Files and hashes: 1: Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl (hash: Lc8DUIr/LcFywCOn1a8LwCEV4NX9bosZ3+LS8wcwmoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:93:83:6f:f9:12:7f:df:ab:4e:1d:45:d8:a3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
Validity
Not Before: Apr 21 07:01:07 2025 GMT
Not After : Apr 22 07:01:07 2025 GMT
Subject: CN=efa91dc0b27ecce25309f8a287103929a5a69ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:c3:75:18:b4:1f:45:ea:df:4a:94:9b:e6:
47:2e:b9:1a:bb:cb:52:59:c0:1a:e7:c2:af:aa:b4:
fa:f4:fb:91:fa:8d:81:03:8f:2e:1d:b4:a7:a6:18:
fc:bb:b4:16:70:00:b3:ee:35:9d:28:79:3e:4a:fd:
bc:c7:a6:e5:82:66:5b:a8:49:d3:e9:5c:52:2b:05:
df:7b:8d:3e:eb:43:dd:61:f3:5b:4a:43:45:22:6e:
32:f8:38:5a:fa:cf:d4:2d:93:7b:d6:77:24:99:fc:
ef:e0:2b:40:bd:d6:9b:47:f1:72:d9:3f:02:96:a4:
1f:e0:02:90:26:2e:35:d8:01:4d:24:81:0c:b4:31:
84:9c:ee:9e:f1:1e:a9:70:fa:4a:56:e7:ee:f4:cc:
a0:35:3c:26:cf:de:d7:35:0e:80:21:b5:41:e0:fb:
40:ce:c3:65:c6:48:01:2a:cc:70:2c:15:be:a8:f9:
42:95:1c:1d:30:a5:3a:9d:a7:84:0b:15:bb:15:d8:
7c:62:a3:19:e9:90:e9:c8:23:6e:fd:93:e5:f0:24:
48:eb:a3:5e:93:13:92:1f:85:0f:c9:26:0e:5b:4d:
b9:0b:06:0c:78:ab:3f:77:93:2d:51:69:c8:e0:f9:
5e:3e:4f:d5:d7:9c:c9:11:e1:0d:e3:ee:6e:18:8c:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A9:1D:C0:B2:7E:CC:E2:53:09:F8:A2:87:10:39:29:A5:A6:9F:FE
X509v3 Authority Key Identifier:
keyid:53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bc:ae:df:99:1b:cf:40:c0:9e:7c:0f:55:58:d1:65:4b:7c:
9d:8c:60:86:05:c6:a1:15:8a:7d:7d:38:a1:82:f0:fb:04:0f:
b8:13:ff:88:d5:9b:7d:0c:1e:2a:17:c8:22:c9:9d:0c:40:93:
d2:22:b3:00:6b:c8:d4:59:83:06:d9:60:e0:5c:1d:24:3e:bf:
76:a9:85:e8:c2:64:7d:08:1d:1b:d4:8e:0d:4c:38:99:7a:5d:
71:8f:77:53:67:f5:f2:0d:5c:ee:f7:b8:34:e0:17:58:06:19:
e5:3b:6f:7d:c3:1f:9a:34:db:11:e4:50:da:b7:15:d6:0b:84:
cc:3a:df:de:b6:12:b2:b4:09:55:19:ba:30:cd:cf:8a:b8:1c:
2e:bc:57:b0:43:39:5c:9c:4c:95:66:90:47:53:38:ac:74:14:
ca:46:05:c8:48:99:9c:ba:ad:52:1a:67:16:ca:5d:f8:ac:58:
06:49:88:65:7d:e1:0c:7c:0e:63:c6:9e:8e:97:8d:b2:39:ea:
26:37:da:82:5f:1d:21:0f:d6:d2:a2:bb:30:6a:17:e4:b5:10:
3f:1a:2e:19:59:5c:82:1f:0a:21:d1:0b:a6:19:76:b4:4b:d5:
dc:48:9b:7e:75:90:58:d8:4e:87:c3:e6:50:25:c0:5e:ca:e8:
dd:95:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:55 2025 by rpki-client