Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
File: 0uTP5_R_UkZFRa27C7xNM0eKrrI.mft (raw, json)
Hash identifier: uffB20DRpC0XRlf4RP54FJpwx0Moklm1M9abWGxrm+g=
Subject key identifier: E7:F2:40:4F:EA:87:9A:B0:F5:31:23:17:95:1D:3B:14:21:B8:EF:F7
Authority key identifier: D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
Certificate issuer: /CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Certificate serial: 0194C4D0DF413EEBD1DC82F3F727A426821C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
Manifest number: 08
Signing time: Sun 02 Feb 2025 04:00:10 +0000
Manifest this update: Sun 02 Feb 2025 04:00:10 +0000
Manifest next update: Mon 03 Feb 2025 04:00:10 +0000
Files and hashes: 1: 0uTP5_R_UkZFRa27C7xNM0eKrrI.crl (hash: m4ZRRM+b7fNdo6MAp4wAL2yHyTVHTMqqbywdDSj1hbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:df:41:3e:eb:d1:dc:82:f3:f7:27:a4:26:82:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e4cfe7f47f52464545adbb0bbc4d33478aaeb2
Validity
Not Before: Feb 2 04:00:10 2025 GMT
Not After : Feb 3 04:00:10 2025 GMT
Subject: CN=e7f2404fea879ab0f5312317951d3b1421b8eff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:42:33:e9:b5:1a:be:d3:2f:bb:57:e6:9e:
de:03:c9:ec:d6:9b:f5:00:77:37:8b:b1:cd:b9:0c:
e3:46:9d:d1:22:2b:01:b3:7f:77:d8:73:7f:66:ee:
27:12:a4:49:22:9c:7b:9d:ec:5b:8b:d1:ac:b7:08:
ee:a5:9c:26:1c:da:16:93:d3:7b:11:32:3d:18:4c:
1b:04:d6:0c:10:68:2c:7b:bc:2b:ff:7c:12:2e:84:
33:1d:2d:16:7a:04:61:98:fb:fd:4c:da:ce:16:fe:
d6:ad:db:aa:77:55:74:d5:61:a5:73:c1:c3:30:0b:
50:8c:7a:41:e7:4d:27:36:b1:bf:9b:88:32:0c:7d:
38:d8:8e:95:60:a2:6b:a1:6d:7c:9c:a4:e2:f2:39:
61:72:a4:62:5a:ba:07:a4:29:b2:6f:12:84:99:e0:
8b:e8:83:e6:13:fe:11:97:0c:a3:c7:b5:ef:94:b1:
ca:e4:e5:bd:e1:27:e7:69:c2:dd:e8:29:9f:89:eb:
a9:59:8f:11:0a:35:09:35:4c:d2:61:34:b1:dc:9f:
48:be:e6:5e:b1:52:d7:52:5c:b3:ed:41:cb:e9:78:
34:26:98:7b:74:31:4e:a1:26:4e:da:63:d8:eb:fc:
8b:16:fb:ab:52:48:bb:6b:03:13:48:9e:8f:72:e3:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F2:40:4F:EA:87:9A:B0:F5:31:23:17:95:1D:3B:14:21:B8:EF:F7
X509v3 Authority Key Identifier:
keyid:D2:E4:CF:E7:F4:7F:52:46:45:45:AD:BB:0B:BC:4D:33:47:8A:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uTP5_R_UkZFRa27C7xNM0eKrrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0f1ed3-63ba-423b-b9c3-8f231f7317b9/1/0uTP5_R_UkZFRa27C7xNM0eKrrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:92:db:eb:c6:e7:e5:dd:1f:8a:7f:73:da:04:a6:36:fa:29:
2c:f8:db:87:00:20:ad:5c:68:40:13:2c:a7:e3:4e:7e:b0:3e:
c4:a6:d5:8d:b5:cd:3f:0d:13:6c:7e:09:12:ca:f4:3f:94:1b:
77:0d:92:fe:d4:12:93:72:d7:33:cf:8c:6a:93:48:77:0b:6e:
b3:1b:f0:94:5b:5e:7e:e0:6a:ef:ba:37:84:97:7e:4d:43:ce:
bd:fe:ed:30:76:b5:16:0f:c4:06:d8:2d:03:60:cf:86:bb:d3:
76:99:6b:ad:3d:da:c3:27:c6:51:25:6c:92:dd:b3:6d:9d:c9:
e4:3e:d9:ae:8c:6c:d3:a8:3d:88:1d:a1:e3:da:b7:7b:a6:79:
20:84:27:c0:15:0f:78:be:a6:7d:60:94:e9:e1:bc:b0:d0:24:
e1:ec:67:3b:c8:05:0b:d3:39:61:25:dc:b4:0b:88:b3:e5:ea:
bf:da:b2:bc:e6:a2:ab:ef:a0:fe:75:4e:20:d2:af:cd:4f:93:
2e:85:39:2b:a0:01:37:04:94:b5:d9:c0:04:f5:d6:83:e6:75:
67:96:b3:dd:a8:98:b2:a3:57:57:6d:2d:06:dd:2b:8e:4a:bc:
b7:94:f4:70:9b:2c:7f:cc:a0:26:8a:67:4a:92:38:ac:83:9b:
91:f1:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:47 2025 by rpki-client