Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
File: UB7eLUfXfhQKl78pidqCpYdzyMA.mft (raw, json)
Hash identifier: Bmv2lwEefqkFXnKNx7oldv0k7jCYITEjeTHQNqKMPjw=
Subject key identifier: F4:D8:7C:17:A9:1A:2A:60:50:79:AA:90:E5:D9:D0:52:EC:FC:E0:01
Authority key identifier: 50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
Certificate issuer: /CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Certificate serial: 019510C73FC7DE0205F82A6CA5E666C051F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
Manifest number: 0B3B
Signing time: Sun 16 Feb 2025 22:00:48 +0000
Manifest this update: Sun 16 Feb 2025 22:00:48 +0000
Manifest next update: Mon 17 Feb 2025 22:00:48 +0000
Files and hashes: 1: UB7eLUfXfhQKl78pidqCpYdzyMA.crl (hash: zwfDNhoaqKn/s30cHHv3PvpLs9xnVyabNSv0Uj5/jos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:3f:c7:de:02:05:f8:2a:6c:a5:e6:66:c0:51:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Validity
Not Before: Feb 16 22:00:48 2025 GMT
Not After : Feb 17 22:00:48 2025 GMT
Subject: CN=f4d87c17a91a2a605079aa90e5d9d052ecfce001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:05:27:67:2d:ed:e0:02:7e:76:f6:87:ea:0f:
da:a4:01:e1:84:d5:bd:2c:23:67:68:ea:53:47:aa:
7d:ea:3b:8f:77:1d:10:6c:9f:b9:ef:2b:1b:bb:93:
77:84:e0:e0:92:6c:a8:27:f6:e2:1e:8f:fb:22:aa:
f9:ed:42:f1:85:ff:63:a2:48:77:ac:77:16:24:5e:
31:7d:d7:3e:97:01:e9:cc:af:34:5e:8e:3a:93:b0:
9d:fb:e8:d3:06:a4:a8:eb:9d:53:92:af:ba:00:23:
44:db:64:04:5f:51:3a:50:e9:53:e2:f9:17:bf:42:
c6:a8:77:0e:00:0a:fe:88:a8:03:6f:2b:54:42:ed:
19:cb:ce:73:2c:08:ba:ad:35:a2:83:a9:46:4f:a9:
d7:ec:ca:4a:24:41:3a:76:eb:10:71:a5:fb:60:41:
b3:b2:2d:7a:09:95:d4:16:c3:10:7f:c5:27:d5:8c:
ec:99:dc:9f:bb:83:3d:14:71:e2:84:fb:09:1a:3a:
99:24:8f:20:30:f1:14:8e:0f:e4:b8:eb:f6:74:ff:
ea:94:a1:2b:f6:b1:47:b7:45:f2:5e:66:f7:3b:62:
66:63:6e:ba:f4:65:2d:63:41:de:b8:a9:2f:40:95:
05:88:49:00:03:d5:cd:05:a3:67:ef:a0:a2:65:a6:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D8:7C:17:A9:1A:2A:60:50:79:AA:90:E5:D9:D0:52:EC:FC:E0:01
X509v3 Authority Key Identifier:
keyid:50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a6:9a:f3:c3:20:e2:8a:c5:48:1b:fd:4c:13:66:b8:ee:1b:
13:0a:2b:7f:87:d8:3e:fe:7a:b5:b1:a3:5b:a9:9a:25:28:52:
8b:92:b8:ff:33:ef:b8:39:ac:00:ff:3c:18:7f:86:17:20:18:
ef:06:44:12:e3:17:27:4e:6a:24:be:92:1a:57:64:8d:1f:bb:
b3:bd:bc:7d:2a:aa:50:63:6c:53:ae:ba:a6:ab:5b:1a:8a:0d:
5b:0a:c3:c7:cb:a4:9b:b2:91:6c:24:ba:cc:ef:b3:de:bc:3f:
57:bd:7d:7d:d6:5d:a9:18:73:6e:7b:08:ac:29:f3:b7:57:14:
a3:de:0a:8b:15:2c:83:df:de:eb:3f:46:81:75:ed:b5:87:86:
9e:be:3a:d3:78:28:0a:57:2e:13:2a:2e:41:8b:e4:36:e9:ec:
28:9f:da:87:8d:6b:f4:05:86:80:7b:67:84:2a:92:71:8e:fc:
72:f2:04:83:0b:b6:15:47:b7:6f:e6:4c:db:96:52:66:81:4a:
5d:e9:12:11:53:2b:35:86:60:2b:b0:c3:b8:0f:23:b5:cf:0e:
f9:a9:e5:32:e4:29:ef:07:47:5f:99:2c:9b:f1:dd:24:82:e8:
a1:c7:0a:8d:6e:eb:14:e8:a3:a1:97:a6:a8:e9:60:13:79:17:
c8:6e:60:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:04 2025 by rpki-client