Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
File: UNp8iuAVDrjJRte_HgXAQt32o9Q.mft (raw, json)
Hash identifier: /wcTwUmDaSM5gcYYMnthumWBCkd2w7bOzdeAH2TPsXU=
Subject key identifier: 6C:53:56:14:77:A1:A5:0B:4A:CD:6A:E6:12:23:12:5D:FA:03:08:62
Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
Certificate issuer: /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Certificate serial: 0194C350D415D80AAAEE46D9D5E8E7B5FD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
Manifest number: 06C8
Signing time: Sat 01 Feb 2025 21:00:41 +0000
Manifest this update: Sat 01 Feb 2025 21:00:41 +0000
Manifest next update: Sun 02 Feb 2025 21:00:41 +0000
Files and hashes: 1: TRZ-bXVpGuPzmHQA948WyQR5KOg.roa (hash: DS5TFuJAWuJAhwbXFziYJwVjw+lHGW5/W63yt+OmaIw=)
2: UNp8iuAVDrjJRte_HgXAQt32o9Q.crl (hash: blrPLtMFa8bE68gF3kO8U6uRJC6MyxJlajKniZIjjL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:d4:15:d8:0a:aa:ee:46:d9:d5:e8:e7:b5:fd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Validity
Not Before: Feb 1 21:00:41 2025 GMT
Not After : Feb 2 21:00:41 2025 GMT
Subject: CN=6c53561477a1a50b4acd6ae61223125dfa030862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5c:5d:08:cf:71:7c:3b:aa:54:9c:df:f2:28:
73:af:47:b7:6e:7d:3d:ac:93:f6:ac:1e:f6:ec:3b:
3b:53:65:7e:69:61:1e:97:55:7f:19:ca:45:08:19:
8e:fa:bc:2c:de:98:b4:1b:92:10:71:98:55:90:cd:
34:d4:82:ad:44:db:da:f8:31:8a:09:d4:69:e2:d5:
01:d9:d0:ee:a9:7b:f1:e9:de:2d:ab:4b:ae:02:94:
60:29:4d:59:2f:67:e9:99:ed:3a:8d:ef:d4:b7:62:
21:5f:8d:aa:33:68:93:d6:05:d6:85:ba:32:49:0a:
c4:e0:e5:e8:b0:dc:17:24:e1:0d:be:84:2c:5b:b4:
a7:5e:dc:b8:75:d8:5d:33:35:3a:8d:7c:ae:90:28:
48:1e:1e:fe:cd:8d:a6:b7:f3:46:92:64:f8:3e:f1:
4b:1b:cb:dc:29:b5:40:7c:f4:c7:95:88:4e:69:65:
64:d6:13:05:45:20:64:47:01:a6:48:f0:f5:0b:8b:
7a:c9:98:eb:b6:b5:c8:1f:91:0f:ff:ca:45:5a:5f:
5c:6f:36:52:fd:5e:98:46:71:98:09:9c:a8:50:9d:
42:5f:09:41:65:b2:c6:2e:5e:c5:64:45:f7:ae:77:
20:ab:04:a3:02:33:c0:54:90:26:80:a4:8c:c5:85:
0b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:53:56:14:77:A1:A5:0B:4A:CD:6A:E6:12:23:12:5D:FA:03:08:62
X509v3 Authority Key Identifier:
keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ef:bb:c4:3c:ef:fd:4a:bd:88:cd:74:90:f2:9c:85:c3:0c:
00:56:3e:ab:a4:5f:2d:c7:3b:d7:3c:c3:42:f1:b0:74:7a:62:
bd:09:a6:42:97:6e:0c:89:24:7b:75:cd:27:36:cf:12:c9:8f:
1d:c0:03:85:61:c4:75:6a:a6:4a:03:55:8a:a6:6b:cc:14:cb:
30:01:73:1f:2e:27:a4:04:92:95:13:28:87:be:65:2f:64:7f:
6e:4c:73:9e:aa:dd:99:fa:89:c2:22:4f:9b:74:82:ea:f4:c0:
48:4e:d0:ef:de:af:79:bb:b8:4d:e6:ca:c2:32:8c:0c:a4:bf:
e6:7e:11:63:df:99:7b:35:a5:a2:72:72:d3:46:8d:2c:b3:28:
b3:6f:fe:8e:95:01:54:97:04:90:f8:fc:7a:cd:d3:a9:2b:5d:
e8:c8:1d:45:11:e4:c4:a6:49:d1:6d:09:ff:78:55:07:25:ff:
0e:1e:11:ed:35:e3:1a:fe:1f:41:79:9e:a4:65:12:0a:d4:bd:
ee:ec:e9:42:2f:fc:5a:d7:3a:b0:eb:72:b6:d0:4d:0b:5c:de:
06:9b:29:14:57:01:bd:5a:c3:ed:c7:2e:8e:b5:40:97:ee:8e:
f4:e0:e2:b4:7c:e3:df:c3:59:66:0c:28:c3:23:ed:54:69:6b:
58:63:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:43 2025 by rpki-client