Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
File: Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json)
Hash identifier: WgXtHpE7qTHNsX7IEKtAAcycv5xs+wh43yL9SzizZAY=
Subject key identifier: 08:9D:D8:E1:4F:D6:35:5A:7C:09:DD:E9:22:F9:9B:92:36:99:D7:6A
Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Certificate issuer: /CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Certificate serial: 019645C5397388E6CD9BC156F9C9A84315B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
Manifest number: 0DA9
Signing time: Thu 17 Apr 2025 22:01:15 +0000
Manifest this update: Thu 17 Apr 2025 22:01:15 +0000
Manifest next update: Fri 18 Apr 2025 22:01:15 +0000
Files and hashes: 1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: 8K17gRUJfHRZTeEPOK2xjrWmDwzSmvXC+K7RuA0hei8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:39:73:88:e6:cd:9b:c1:56:f9:c9:a8:43:15:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Validity
Not Before: Apr 17 22:01:15 2025 GMT
Not After : Apr 18 22:01:15 2025 GMT
Subject: CN=089dd8e14fd6355a7c09dde922f99b923699d76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:c0:f9:d8:07:fb:79:aa:54:2e:1d:b7:36:
32:03:b7:15:3d:e4:93:63:f4:9a:a6:48:50:a4:00:
2e:e7:0b:6a:f2:98:00:f3:be:8c:c6:33:27:63:46:
31:5d:e4:08:dc:60:61:5f:d1:01:2e:e5:39:f2:2b:
dd:18:36:3a:a2:49:24:3e:b2:d0:b3:54:39:06:45:
8d:9a:df:19:07:53:e9:41:6b:8c:7e:b6:7c:d7:42:
0f:ba:b6:2b:70:ef:d1:c2:f6:4e:42:c6:98:a7:73:
33:b3:c1:86:a6:8e:b2:4b:62:09:35:e7:49:c9:d8:
f2:1e:73:7e:40:a6:88:d6:64:e0:46:74:c5:09:29:
78:36:66:ce:81:63:56:93:8d:d3:7d:b1:a5:6c:ff:
f1:20:88:d7:65:2a:85:2c:ba:c7:52:0b:a5:29:15:
6b:16:36:d1:2b:6e:26:ed:9c:9b:a3:c0:17:5d:73:
d6:66:4d:5d:f3:15:46:c2:64:35:4a:fd:a6:56:29:
5a:b0:65:fb:97:04:76:28:bc:0c:20:34:ee:40:94:
84:2a:ad:8d:70:6f:a0:c7:74:b1:ed:e3:f9:17:57:
2f:3b:c2:02:5c:53:c3:c7:df:90:40:ac:4d:4b:1f:
35:ca:2a:ef:72:21:24:50:8b:d0:4b:0e:1e:5e:8d:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:D8:E1:4F:D6:35:5A:7C:09:DD:E9:22:F9:9B:92:36:99:D7:6A
X509v3 Authority Key Identifier:
keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fe:76:bf:4b:71:2f:b8:d0:04:f1:a0:ca:6e:4c:86:ba:e7:
dd:5b:30:47:9b:f5:ea:18:93:f8:79:99:21:55:77:06:4f:06:
a4:2d:c9:d5:39:32:52:c7:0a:ac:25:f6:4a:bc:cf:1f:e9:72:
f0:b9:ec:ce:d4:96:3b:dc:cb:72:13:99:da:37:b6:98:55:c4:
2d:9d:e4:0e:8b:0b:5b:99:d0:08:91:34:c1:4c:c1:e2:d3:d4:
0e:26:6f:8b:11:ff:91:23:a2:8f:d3:57:b0:3c:2b:5c:16:46:
a2:9c:53:0c:66:26:77:e5:ab:b0:39:1d:63:69:a2:70:6c:6f:
be:a0:ca:0b:19:c8:a7:9d:40:9b:d6:62:d7:7f:77:f3:68:2a:
64:b1:1b:d5:3c:21:f9:47:cf:51:a2:80:a3:c1:b9:29:53:40:
f3:29:d5:e8:17:09:e6:e6:46:8a:01:a0:af:da:ad:75:71:d8:
84:3d:5f:82:63:3a:21:67:27:7f:56:c2:34:71:ca:2b:dd:24:
5d:07:2f:b0:63:ee:16:53:69:03:bd:30:82:e8:28:f0:44:12:
a3:13:8f:7a:cc:93:0c:1d:1e:7c:36:fb:a2:a9:a2:f8:af:d3:
e7:cb:63:2f:ec:25:e2:5d:0c:a2:90:5b:5d:55:34:4c:fb:c9:
f3:75:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:04:35 2025 by rpki-client