Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: EP8tHweHvwTzT0OVVls9XUISYh9uL3hSOfVv9SHB8mQ=
Subject key identifier: 21:76:15:88:85:2C:5D:D4:D2:98:45:D9:B6:E4:95:98:A6:B0:0C:1D
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 01964CD9A8A6E94562D968F14BEF8ACADA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 124C
Signing time: Sat 19 Apr 2025 07:00:54 +0000
Manifest this update: Sat 19 Apr 2025 07:00:54 +0000
Manifest next update: Sun 20 Apr 2025 07:00:54 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: E1R+0BqB0gmosf8rMSDk/ASsVkrZ5TBsviF1+fErOY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:a8:a6:e9:45:62:d9:68:f1:4b:ef:8a:ca:da:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: Apr 19 07:00:54 2025 GMT
Not After : Apr 20 07:00:54 2025 GMT
Subject: CN=21761588852c5dd4d29845d9b6e49598a6b00c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:f7:32:da:8c:04:00:be:f0:67:17:36:ae:
6c:54:01:b0:1d:76:7e:29:82:58:f6:22:e1:ae:00:
31:be:0f:8e:0c:65:eb:7e:fa:e8:a0:2e:85:ad:00:
ac:4f:2f:58:2a:25:37:6e:42:25:d3:2f:e1:6b:d6:
14:d7:7c:20:ce:f9:1b:b3:db:60:c1:24:41:06:eb:
97:3b:0d:9d:31:6e:fc:97:60:93:31:3f:42:4e:4b:
a3:ed:7e:15:ec:60:14:ba:5b:64:ba:55:a4:62:5a:
d3:4c:b8:e7:16:f7:1f:63:b9:ba:95:98:96:84:f2:
51:bf:d6:8e:dc:47:d8:58:be:7b:5f:30:ee:68:2e:
25:99:a5:9d:97:90:49:c5:de:61:c9:1c:55:5e:af:
27:8a:98:6e:78:2c:0d:7c:c0:a9:e4:cc:fa:ed:e4:
3c:c0:a2:11:4e:28:5e:8a:0a:36:75:9f:d7:a2:19:
33:d4:ef:00:f8:40:0d:b4:76:24:58:43:10:83:6c:
73:52:33:b2:a6:b4:4c:a3:04:24:5e:d3:bb:ab:1f:
7c:9f:8c:39:1b:1c:d3:29:ff:44:22:b8:b2:4a:4d:
76:81:ec:af:00:1e:a5:67:37:01:e6:42:1e:85:2b:
8a:19:fe:c2:94:e7:7d:c9:c9:ce:0b:50:49:d0:47:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:76:15:88:85:2C:5D:D4:D2:98:45:D9:B6:E4:95:98:A6:B0:0C:1D
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7f:1d:36:37:1b:15:9f:98:62:71:1b:6a:6c:35:b2:7b:a6:
a4:6e:74:13:37:53:35:e7:64:3b:10:e2:d7:c0:cf:bb:a9:60:
ef:f9:fc:f3:ba:f6:fe:9f:aa:bc:16:82:9b:04:8b:38:14:9b:
5e:8a:82:2f:67:20:60:f4:68:7e:b5:34:ff:0d:e8:c5:0e:5f:
2f:11:b9:16:0d:9a:40:ad:e5:0f:27:94:5d:9c:ee:0a:ac:65:
62:5c:93:2f:d9:9e:d7:f9:d4:01:e4:1d:0c:0d:4a:f5:86:63:
f3:bb:4a:be:5a:4e:48:c2:0a:b1:be:39:ba:d8:34:18:8a:91:
62:62:9a:d1:30:67:0d:64:d5:49:84:b0:6d:c4:8c:8c:41:69:
cb:b4:82:74:33:96:d4:9a:2b:d9:56:ad:bd:3f:79:9d:28:88:
83:8c:8f:01:ce:24:2c:62:ff:f7:c8:d0:07:3e:81:e6:a1:e7:
33:04:94:d1:3b:1e:07:2a:54:c9:7d:9f:17:43:95:e4:b2:e5:
1b:1d:90:c1:a7:82:f2:d2:69:77:cf:94:79:b6:a3:d7:e4:b7:
8a:fa:d7:42:cf:48:73:f4:ff:eb:77:ae:94:74:d9:f7:17:23:
8f:ed:ff:08:fc:5c:7e:43:0e:60:97:14:e3:a2:fd:34:62:f4:
14:9f:8a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:42 2025 by rpki-client