Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File: UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier: ae73BuNnsk8X0uX4La3M1Hu2vjNIX0sqmIEQJa+k620=
Subject key identifier: 81:B0:93:88:68:36:92:0B:DE:5B:EB:1F:62:4F:41:07:2B:7D:A6:9E
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial: 019511D98CEFB149B0F68E6DE2DA2CB18334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number: 1233
Signing time: Mon 17 Feb 2025 03:00:24 +0000
Manifest this update: Mon 17 Feb 2025 03:00:24 +0000
Manifest next update: Tue 18 Feb 2025 03:00:24 +0000
Files and hashes: 1: En0AxaNswsA9xI4lqkSKkt-F7C0.roa (hash: q8FwSEiSjvslMUXDVxvqWzOjw6rMu6h87zO4Dcum1yM=)
2: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: PppaEReeKKnmd8A2Qwg/kjKhIfuCUqeF7pgl8pZGVD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:8c:ef:b1:49:b0:f6:8e:6d:e2:da:2c:b1:83:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Validity
Not Before: Feb 17 03:00:24 2025 GMT
Not After : Feb 18 03:00:24 2025 GMT
Subject: CN=81b093886836920bde5beb1f624f41072b7da69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1c:60:f3:fa:90:2a:0f:b7:a3:8b:f2:fd:37:
11:c1:94:23:73:35:49:37:8c:6a:c7:6a:e2:d9:1e:
43:c2:ab:74:d2:4c:37:b7:f5:66:f5:4a:1c:ba:bc:
87:2c:3d:7a:5b:e3:72:f6:ea:5c:5a:1a:5b:17:d1:
85:25:34:b7:94:f7:fa:78:da:d7:75:66:a8:2a:8c:
4b:6b:5d:49:92:40:da:59:38:98:81:d2:1a:34:8e:
01:88:74:87:e9:07:bb:7c:b4:43:67:d5:60:90:05:
6f:31:52:26:6a:fe:54:6c:89:0d:6d:5e:35:43:39:
05:94:d5:ee:39:4c:15:32:24:9c:57:80:14:7d:a5:
4b:73:4c:ed:c2:8f:31:65:63:11:f9:bc:58:28:a5:
a3:39:a6:c1:dd:b8:58:72:fe:08:25:0c:a6:1d:88:
77:ca:0d:3a:87:67:53:1c:62:55:7b:b0:34:87:b2:
99:c5:e3:84:7a:e4:77:8f:b1:f6:4f:67:37:fe:2b:
ae:15:e1:11:3e:d3:90:0b:42:c7:fb:8b:15:c2:80:
7a:a9:ae:ec:6e:ea:9d:cb:6f:54:82:5b:80:e3:2b:
76:37:ad:31:32:7f:94:d2:05:11:d9:ea:fe:3d:66:
b9:cc:f8:83:40:56:30:78:74:87:e4:05:84:3a:2e:
8f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B0:93:88:68:36:92:0B:DE:5B:EB:1F:62:4F:41:07:2B:7D:A6:9E
X509v3 Authority Key Identifier:
keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:85:e7:14:09:a3:68:a0:d9:7a:59:64:0e:f0:94:5e:98:74:
6c:e7:2d:bd:22:13:f0:46:9a:58:79:5f:6e:66:3f:3f:df:da:
4c:74:ed:36:02:ad:cb:fd:13:33:1e:a7:53:01:d1:03:ee:b8:
80:b8:e8:3b:9b:a4:1e:e4:5b:7a:75:34:35:d1:e3:f4:60:32:
14:cb:7a:b2:20:b0:8a:cc:cb:63:45:f1:19:a3:90:27:ce:ff:
96:2a:cf:eb:50:5f:d7:13:db:69:63:d2:dc:a8:a3:50:9b:95:
88:e1:5f:02:bc:e6:88:cd:0f:d1:ae:e2:b4:be:8d:5d:0d:a7:
be:c1:9a:34:a4:f9:0d:93:a8:3f:f8:96:50:6a:15:6e:01:86:
96:cc:31:a3:76:8c:c5:2f:f7:ba:56:00:2c:b5:46:5c:83:8f:
77:33:06:24:dc:1a:7c:a4:4e:07:ca:0b:2c:57:64:30:29:fd:
1f:6a:5a:b0:17:0b:b3:00:35:08:c4:e5:e6:de:f1:11:a5:7c:
2a:69:d4:82:37:85:21:08:e3:cf:43:7b:dd:fa:b8:96:dd:85:
f3:96:cf:94:74:98:94:19:5e:70:d5:f5:b7:52:1c:f7:05:84:
5e:43:77:71:4d:12:0c:3e:fc:cd:44:f9:d6:4c:78:a7:4a:8f:
cb:e2:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:13 2025 by rpki-client