Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
File: ULhDqNkbFYJOYOLNaJpvRR4lal4.mft (raw, json)
Hash identifier: CQgtC+pDgPoOUkdfOgww+ngehfubkwqvwK6J7hkrVHo=
Subject key identifier: 4D:EA:2E:2A:66:75:3D:3E:CA:79:C8:C5:1B:25:B2:98:AD:13:42:6D
Authority key identifier: 50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
Certificate issuer: /CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Certificate serial: 019647452540B3BDBE07E75FE1D8304D7F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
Manifest number: 0268
Signing time: Fri 18 Apr 2025 05:00:35 +0000
Manifest this update: Fri 18 Apr 2025 05:00:35 +0000
Manifest next update: Sat 19 Apr 2025 05:00:35 +0000
Files and hashes: 1: ULhDqNkbFYJOYOLNaJpvRR4lal4.crl (hash: U+AZyMKoSX1Jyu782d38PJCf52pqQ94t7AKWcTVJVfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:45:25:40:b3:bd:be:07:e7:5f:e1:d8:30:4d:7f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b843a8d91b15824e60e2cd689a6f451e256a5e
Validity
Not Before: Apr 18 05:00:35 2025 GMT
Not After : Apr 19 05:00:35 2025 GMT
Subject: CN=4dea2e2a66753d3eca79c8c51b25b298ad13426d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:f8:7d:7e:3f:32:d2:c7:95:32:4d:11:1d:
3c:1d:af:a5:01:8f:a5:aa:c0:49:79:5f:c9:49:9b:
93:71:d8:c9:33:ae:43:05:ee:39:1d:66:13:7c:3c:
35:ab:74:d7:cf:d3:73:0d:ab:3a:91:96:84:5a:66:
0c:da:32:92:ac:f2:fd:76:14:db:f1:f3:eb:56:d7:
e5:a5:63:89:4e:df:68:27:f6:b0:9a:ff:53:ee:8c:
73:f3:b6:3b:aa:dc:76:14:08:20:2c:47:ec:63:e1:
da:f2:60:56:3e:ba:42:8a:54:55:91:b1:eb:6d:fa:
30:43:9a:43:c4:61:13:7e:ac:1e:f6:1b:c8:89:68:
a6:88:f6:b8:4f:8b:26:2e:ac:99:66:39:6e:ab:c7:
cb:5a:21:e6:dd:63:9b:42:24:90:6e:28:90:0b:77:
8b:76:58:69:3e:db:c3:b7:4c:ae:43:ae:f6:9e:14:
00:d4:88:c0:91:6f:b1:13:7e:86:03:f5:d0:48:9d:
72:89:41:8b:91:62:d9:b0:ec:d7:d7:78:4e:50:cb:
49:aa:63:65:6e:3b:18:3c:9e:b2:f7:d5:1b:9b:c6:
0f:0b:9f:2b:10:33:84:5e:75:84:7a:db:61:bc:9e:
d8:c3:40:f2:b2:30:fc:eb:0c:15:3e:2a:7b:fd:1d:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EA:2E:2A:66:75:3D:3E:CA:79:C8:C5:1B:25:B2:98:AD:13:42:6D
X509v3 Authority Key Identifier:
keyid:50:B8:43:A8:D9:1B:15:82:4E:60:E2:CD:68:9A:6F:45:1E:25:6A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULhDqNkbFYJOYOLNaJpvRR4lal4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0fe7a3-6fce-42b6-8a18-251867bdc13f/1/ULhDqNkbFYJOYOLNaJpvRR4lal4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c3:59:1d:ab:19:d1:59:b0:99:46:c9:00:7c:2e:89:a3:24:
c8:40:bf:cb:45:01:ef:96:db:bb:aa:52:3e:e4:9d:84:67:94:
3b:4b:1a:62:cb:99:d0:fa:16:5d:b4:0d:ca:25:b6:be:c1:30:
a5:ba:74:94:bd:e5:af:62:b8:62:c2:f4:e0:b4:f7:e8:dc:fa:
eb:47:9a:f9:7e:e1:9a:45:20:0f:6d:c2:88:b9:c8:fd:9e:11:
89:80:d5:92:f5:4e:e3:78:e2:c9:98:e2:dc:c0:fb:8c:69:7e:
5a:4f:71:df:0c:2d:9f:4b:47:03:ef:b1:aa:a3:5c:f7:43:50:
85:f5:26:81:c2:ab:55:1d:26:b0:5f:68:73:30:b8:98:7e:03:
da:6d:d5:a1:29:79:23:74:4d:20:1e:c3:07:7e:3c:17:9f:83:
54:de:5d:5c:5d:54:d1:de:13:52:4f:49:32:1f:cb:bf:a7:75:
01:cc:02:28:dd:2e:b6:f5:de:41:2c:b3:34:93:ba:70:de:ea:
e7:67:ed:6a:22:4d:01:1e:66:9e:60:3d:bc:e9:69:f8:a8:1b:
54:97:1f:c6:d2:3c:9e:c8:aa:47:04:b8:28:33:a9:6d:8d:94:
9d:48:5f:f4:d6:f3:e1:3d:e6:0f:98:b4:ae:8e:8b:7c:c1:4f:
0f:d9:43:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:33 2025 by rpki-client