Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
File: UB7eLUfXfhQKl78pidqCpYdzyMA.mft (raw, json)
Hash identifier: PNye6E8bPk1rmQ+/RgFkUmgqgozRyQoJbU0xaVbaEag=
Subject key identifier: 0A:34:E1:94:B0:96:15:E8:A9:E0:13:B8:E6:B4:AD:BC:03:D0:FB:83
Authority key identifier: 50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
Certificate issuer: /CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Certificate serial: 0196534A3EB4C3980DE41BF7FD532A342EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
Manifest number: 0BE2
Signing time: Sun 20 Apr 2025 13:01:36 +0000
Manifest this update: Sun 20 Apr 2025 13:01:36 +0000
Manifest next update: Mon 21 Apr 2025 13:01:36 +0000
Files and hashes: 1: UB7eLUfXfhQKl78pidqCpYdzyMA.crl (hash: R/6pbpV9DFrqGBzWFAfvCgIj0NFAJKLs3RpSt9PBLhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:3e:b4:c3:98:0d:e4:1b:f7:fd:53:2a:34:2e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Validity
Not Before: Apr 20 13:01:36 2025 GMT
Not After : Apr 21 13:01:36 2025 GMT
Subject: CN=0a34e194b09615e8a9e013b8e6b4adbc03d0fb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:2b:8c:01:2d:bf:97:c6:62:20:1a:c9:09:
f0:c6:0d:be:1b:2c:20:c5:d7:9a:a2:4b:59:39:ec:
9d:d5:d9:ad:d9:5e:5a:86:29:46:b8:95:af:02:d2:
7e:46:94:eb:2d:bd:1a:37:6e:96:cb:c6:4b:90:10:
c1:2f:67:d5:e8:f1:17:64:7c:9a:fc:4f:3d:f3:4f:
31:f4:23:70:43:fd:a2:0d:f9:46:7a:cb:a9:3b:e5:
94:ed:80:ad:4d:45:c0:ba:ee:63:19:ce:bd:4e:3e:
c4:15:05:12:61:5e:6d:3b:9c:25:4a:b3:14:eb:09:
61:4a:5a:af:6a:37:e8:46:e6:00:22:a0:ff:bf:54:
19:dc:33:f2:ad:a6:c0:65:bb:cb:cc:33:3d:67:54:
4b:3c:1b:6a:19:f7:eb:56:9b:8d:0f:33:42:40:04:
5e:db:d5:eb:a3:47:78:67:e6:6c:f8:ba:3b:c5:80:
eb:b9:6f:fb:38:41:74:b9:eb:35:20:b0:b9:89:59:
79:c1:cf:28:ef:50:9a:f6:06:6e:e4:ae:4d:0e:01:
38:f3:88:63:ef:a5:b9:07:5d:1d:ec:a3:69:8d:3f:
f6:df:8c:62:15:d4:81:1b:6a:57:dc:e6:43:9a:8c:
2c:90:44:1c:ee:dd:3c:db:75:2c:b0:9b:ae:43:32:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:34:E1:94:B0:96:15:E8:A9:E0:13:B8:E6:B4:AD:BC:03:D0:FB:83
X509v3 Authority Key Identifier:
keyid:50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:49:a4:d9:44:1b:17:1e:fc:76:b5:5b:07:56:ea:eb:e8:89:
b2:5d:f0:b6:18:d6:cc:03:19:02:46:e0:38:ef:24:5b:82:b8:
32:c0:b4:d7:07:03:fb:3f:39:e1:6a:e4:52:46:0a:71:6a:32:
cb:23:aa:b5:5d:0c:35:b1:3f:85:83:b9:d1:20:81:40:2b:9e:
04:10:f3:a1:6f:ed:0c:1d:63:e3:6c:e5:e0:06:a1:38:f7:4f:
74:0d:ef:5b:5d:ef:03:4b:93:bd:a3:23:9d:25:44:47:a0:fa:
66:27:d0:cf:58:9c:37:dc:e7:ef:34:ec:82:ba:3d:a1:e5:21:
63:20:59:a8:03:47:95:4e:ba:15:20:10:f4:98:5d:4c:41:1f:
25:05:ee:07:ec:cb:26:6e:b0:f2:5d:b4:34:9c:a3:51:b2:08:
8f:46:57:69:5e:c3:07:25:66:d8:d9:b8:92:69:86:13:d8:4a:
51:df:0f:3b:c2:4e:da:cc:5e:63:4e:1a:6c:db:dc:a5:ac:78:
1f:53:5c:b5:95:55:14:33:9f:e2:fa:af:5d:f2:64:73:9d:71:
80:0a:6c:b1:0f:70:84:13:2e:0c:48:cd:4f:e5:32:36:f7:46:
be:80:60:d5:ca:68:34:fa:85:a4:fc:e1:af:62:e0:78:5a:d2:
9e:88:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:16:04 2025 by rpki-client