Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier: OSmAE7XH+cSRBp/RPuKRDn98KHtBj8XtNOqyV6Lsr6I=
Subject key identifier: 4C:4A:3B:90:5B:42:B3:8B:E4:BE:53:23:85:2C:DD:D9:D0:9D:58:A3
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 019510903365C054C82549A4D5F631997EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number: 0D6A
Signing time: Sun 16 Feb 2025 21:00:40 +0000
Manifest this update: Sun 16 Feb 2025 21:00:40 +0000
Manifest next update: Mon 17 Feb 2025 21:00:40 +0000
Files and hashes: 1: MciWb60MRTEKYG7nNsdPObcTdFA.roa (hash: KHNwOaNcZ7u3dM/4d40q21NOgHnTWPbfSPyYUx+Aq9E=)
2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: hnuFoptoINJM48vbD+V+5em+4qDqHIdMmkQ5dgt6+SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:33:65:c0:54:c8:25:49:a4:d5:f6:31:99:7e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Feb 16 21:00:40 2025 GMT
Not After : Feb 17 21:00:40 2025 GMT
Subject: CN=4c4a3b905b42b38be4be5323852cddd9d09d58a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f6:7b:60:5f:7b:59:66:aa:74:63:6f:79:49:
83:87:f3:6e:90:7a:2a:7d:2b:62:c3:d9:15:a1:b2:
48:d9:0a:75:64:90:5c:ef:8d:cf:ea:d1:76:c0:7f:
ee:1a:27:3d:21:38:8d:04:07:47:22:98:1f:09:cd:
01:96:b8:45:ab:5c:fe:18:e2:ee:b1:d5:6e:aa:8a:
1a:a1:ac:58:cb:4e:c4:8f:05:ce:b3:31:2c:8e:a8:
9c:a1:59:52:71:92:22:ae:19:b7:88:79:59:24:8e:
db:5b:93:d7:f2:89:d8:5c:95:08:e3:d0:f1:b2:3b:
2a:a7:8e:d9:fb:a7:3e:04:3b:88:ab:e2:6e:73:08:
f8:d4:0a:76:db:02:14:fd:28:7e:37:9d:b6:a2:1a:
39:c0:6f:34:f8:3a:1c:85:36:51:3e:5b:7e:23:88:
ee:e2:94:13:0c:09:64:d1:95:79:74:8e:6f:e2:19:
23:ad:b9:d8:24:8c:3c:d5:ec:b6:69:36:ce:78:79:
34:36:29:fc:0b:9a:c4:e9:cf:28:b9:89:67:23:9a:
f1:a5:dd:3a:9d:42:6d:80:3b:61:60:e5:46:8f:d3:
fb:ac:5d:fd:79:a1:a1:7c:28:e1:e0:0e:a6:19:12:
cc:99:d0:a2:b3:c7:d3:15:95:ea:f5:b9:2b:6e:09:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:3B:90:5B:42:B3:8B:E4:BE:53:23:85:2C:DD:D9:D0:9D:58:A3
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c9:9c:e2:37:df:f7:87:0c:f6:1d:ed:5c:f1:eb:be:30:9c:
96:31:15:4b:08:79:a3:10:46:32:8a:81:bf:c4:56:5e:5b:ac:
7d:57:e6:b5:b5:c7:18:6a:19:f5:5d:6f:83:03:b5:48:3a:00:
2c:42:e9:ad:5b:33:29:8c:2a:22:8d:f1:49:10:e1:ce:58:e7:
93:bf:19:37:90:b7:98:c9:8a:c7:8c:a5:6a:77:38:65:25:8b:
72:be:9e:1a:2d:e5:98:20:ef:72:f0:15:66:6f:f6:f3:07:61:
f3:25:16:dd:11:2c:d5:14:1d:31:76:e1:32:ad:c2:0a:5d:45:
ec:62:8e:05:75:ed:fb:fc:30:70:c5:98:32:09:aa:ee:7b:bf:
66:ee:d6:b1:11:20:82:75:35:52:f5:89:84:c0:b3:00:c5:45:
3a:6b:75:26:3d:45:0a:13:b6:17:ce:05:36:10:b1:f9:f2:65:
6f:06:61:5a:2a:eb:0f:ea:4f:c3:44:5f:e0:19:07:15:9e:8a:
76:c1:e9:27:7f:64:98:cb:80:43:26:dd:0d:b8:e7:70:33:7c:
8a:c2:ac:55:7c:52:4d:84:eb:61:24:b7:b3:2a:b7:e1:f0:a4:
90:65:46:38:ba:8d:69:42:7f:cf:c7:28:37:78:a8:a1:a2:6f:
c5:d6:dd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:05 2025 by rpki-client