Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
File: UVy9vRam6GjplnW8KRgCaMJY8Ps.mft (raw, json)
Hash identifier: tvzBU7nJAA9Y2w51zejr3488PU9EyJ7img5pQ9SDu44=
Subject key identifier: CF:E8:2F:A1:75:0E:C5:6F:4F:ED:0C:9B:FA:AD:54:0A:74:C1:2B:1B
Authority key identifier: 51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
Certificate issuer: /CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Certificate serial: 0196550069B79D72330CE5AAE14A8F9541B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
Manifest number: 0FE9
Signing time: Sun 20 Apr 2025 21:00:12 +0000
Manifest this update: Sun 20 Apr 2025 21:00:12 +0000
Manifest next update: Mon 21 Apr 2025 21:00:12 +0000
Files and hashes: 1: UVy9vRam6GjplnW8KRgCaMJY8Ps.crl (hash: Uu3xMVD+/xKKNyJCFdZFA6heRDmzKnLG0uHHtum1Ls4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:69:b7:9d:72:33:0c:e5:aa:e1:4a:8f:95:41:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515cbdbd16a6e868e99675bc29180268c258f0fb
Validity
Not Before: Apr 20 21:00:12 2025 GMT
Not After : Apr 21 21:00:12 2025 GMT
Subject: CN=cfe82fa1750ec56f4fed0c9bfaad540a74c12b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:6d:03:37:fa:e1:8a:af:82:bd:87:8a:9e:
30:c4:59:5e:5d:1a:af:1e:ee:fe:81:e0:98:fe:15:
9a:77:d2:85:4f:fc:21:79:3c:17:95:8f:c6:68:4d:
50:e9:1f:43:45:1a:9f:1d:14:5e:6b:d9:83:6a:fb:
01:d2:f0:62:ee:8a:a7:31:d8:d2:fc:1e:b4:c2:54:
f2:12:69:32:2c:cf:8a:53:83:a9:7b:77:ab:4c:e0:
b9:66:03:6c:9c:fb:2d:8b:df:08:73:25:7d:62:b4:
e7:c5:af:9b:58:ee:42:33:75:e8:9b:4b:c1:ff:90:
cb:81:e5:b1:1c:f9:1b:84:97:7a:7a:80:62:e5:92:
50:6f:e8:8c:f1:3e:45:8b:d8:c7:05:6c:ce:93:0a:
ad:4b:e1:3a:cf:83:61:b1:f3:84:6b:44:04:d4:6c:
59:c1:e3:6d:d4:0c:7b:e0:e8:32:1f:5d:d7:ec:d0:
b0:51:0c:a9:da:9f:f1:17:24:6a:15:ac:98:b0:96:
3a:e2:ce:91:72:1b:b6:9a:a7:f6:3d:d3:5e:87:41:
fc:0d:a8:57:c8:09:96:68:b5:be:8b:eb:96:a7:2e:
08:8e:8e:f9:4a:3f:25:e0:ed:8f:c2:3c:26:58:35:
23:4d:1f:00:dc:d6:3a:48:18:87:10:43:5f:b0:bd:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E8:2F:A1:75:0E:C5:6F:4F:ED:0C:9B:FA:AD:54:0A:74:C1:2B:1B
X509v3 Authority Key Identifier:
keyid:51:5C:BD:BD:16:A6:E8:68:E9:96:75:BC:29:18:02:68:C2:58:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVy9vRam6GjplnW8KRgCaMJY8Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e104ab-e146-458b-b45f-d3e98e639aca/1/UVy9vRam6GjplnW8KRgCaMJY8Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:53:78:c5:60:cb:55:bd:8e:5b:35:ed:b3:34:94:36:0a:d8:
1a:98:83:32:43:b1:26:29:37:92:af:3d:35:12:2a:f7:15:44:
70:e6:df:e7:b5:eb:9b:c4:95:ca:1f:3b:58:41:b0:a2:d0:e2:
92:d8:2c:f7:cf:57:7c:7d:13:c7:be:c2:a5:53:18:42:9d:ef:
1f:96:45:b1:02:5b:5d:57:dc:1f:8a:59:77:15:bf:81:bb:7d:
72:39:bf:bb:a7:53:23:41:ea:b0:01:4e:5f:f7:bb:69:65:50:
72:ea:e2:0d:57:c5:63:69:73:e0:1d:5b:ec:90:e8:41:ad:c3:
50:1a:0f:62:e6:63:46:94:f3:46:0d:b2:0f:d1:0c:81:fe:d4:
fa:56:9b:c9:19:fa:81:d0:16:77:ec:6f:8b:e4:e6:6c:ae:8f:
02:f0:1a:5c:57:70:90:f4:5c:b6:96:60:1b:c0:a5:46:25:93:
af:fb:66:2c:91:2c:7b:7e:41:94:9b:90:4f:6e:b3:41:39:89:
07:00:fd:d5:37:15:79:ea:5e:59:14:52:0e:fe:ba:bc:18:81:
7a:d5:88:ce:35:9a:54:6b:3c:9c:c5:39:e7:c9:3c:88:df:4e:
67:ee:fa:d5:71:1d:9d:f6:8c:84:35:24:07:2f:42:64:1b:3b:
76:d7:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:39 2025 by rpki-client