Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
File: uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json)
Hash identifier: b4MHjUkMITANuQf4bKk2xpX2u6Bsf3UBCUqBETGh9hQ=
Subject key identifier: B0:CA:0D:CA:4D:B6:E9:BF:7C:9A:48:EA:14:41:E0:0B:2C:88:6A:48
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial: 0194C350E74EE19CF65236CBC43E4D64DCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
Manifest number: 0155
Signing time: Sat 01 Feb 2025 21:00:46 +0000
Manifest this update: Sat 01 Feb 2025 21:00:46 +0000
Manifest next update: Sun 02 Feb 2025 21:00:46 +0000
Files and hashes: 1: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: BbNOyrJgEdGodmsAb/CS32kPPerfPjJnW54/4sg7I8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:e7:4e:e1:9c:f6:52:36:cb:c4:3e:4d:64:dc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Validity
Not Before: Feb 1 21:00:46 2025 GMT
Not After : Feb 2 21:00:46 2025 GMT
Subject: CN=b0ca0dca4db6e9bf7c9a48ea1441e00b2c886a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:37:e1:2d:5f:a3:0e:5e:95:dd:a1:97:4f:80:
49:c4:80:4e:7e:25:d4:08:6a:52:5c:d1:ec:de:b7:
15:eb:cd:7d:32:02:ee:a4:dc:5f:c4:97:82:34:bc:
0c:96:be:5e:d7:b5:8e:92:aa:8c:55:95:9f:7a:7d:
37:93:a2:4d:85:08:a0:5c:7d:f3:27:72:03:46:e2:
e3:c1:fe:88:ce:9b:b1:34:b3:aa:53:fe:f1:d1:be:
96:31:f0:ac:57:24:dc:e5:98:5d:f9:60:65:e6:99:
fb:44:c5:af:b0:ab:8d:74:fe:c9:31:2d:fe:af:96:
7c:28:af:b1:f5:8a:d4:5c:05:a8:4e:70:54:24:1c:
c9:49:bc:94:90:62:00:e7:89:c0:ff:04:90:15:c4:
6e:23:09:43:6c:42:e2:56:b8:f9:9a:89:0a:f2:7e:
59:6a:1c:6a:99:ef:d5:5b:8e:97:3c:4c:cb:78:df:
f7:1e:76:dc:73:98:fe:9e:75:bc:da:d9:4b:3e:74:
0c:1f:3b:bf:79:26:e3:97:7f:7d:ba:2e:7e:95:d6:
28:44:1e:ee:40:49:e0:2a:f4:f0:75:44:68:ce:c5:
e0:c2:c9:b5:ce:41:5e:78:e3:21:15:20:11:52:76:
d2:54:49:a3:7d:75:37:1a:3b:16:e4:7e:00:c2:86:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CA:0D:CA:4D:B6:E9:BF:7C:9A:48:EA:14:41:E0:0B:2C:88:6A:48
X509v3 Authority Key Identifier:
keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:be:c5:8f:e3:ee:31:d2:e9:3c:1c:6f:0b:52:bb:28:a1:55:
97:52:f6:68:90:7f:9f:66:c5:71:73:4b:16:59:64:bf:f6:27:
97:86:c8:34:48:27:2e:a5:bd:f9:f1:58:83:03:67:8e:7e:c5:
e2:a3:0a:fc:21:cf:d2:62:93:a3:d7:3e:71:45:c5:4e:69:b0:
71:5e:89:2c:22:e4:87:3e:6a:b1:6d:7d:5a:77:67:3b:b6:35:
29:5e:6e:46:eb:26:78:ac:4b:d8:26:b3:a0:56:6b:7c:88:a8:
e0:64:c1:6a:f5:e4:ae:94:d3:16:48:88:c4:47:46:77:9c:9e:
73:17:0f:6e:10:63:c5:dd:e4:0c:12:5c:58:e2:fe:20:f1:50:
61:4e:4c:c9:30:ff:70:71:39:80:ec:ef:d5:a3:f0:5a:5c:d2:
bb:23:0b:c2:11:f5:15:c8:44:15:ea:cf:b2:92:07:be:03:bf:
48:1f:f1:db:74:be:ea:19:92:a8:ef:ff:e3:cd:25:98:06:c7:
a9:56:cd:89:36:96:32:7e:21:13:4a:bc:3e:32:15:34:27:65:
4c:86:cd:76:13:e4:f6:a9:88:31:b6:b7:13:c2:a4:6a:48:09:
9a:4d:89:08:ff:ab:a4:eb:c5:d0:bd:f9:a8:f6:d8:ae:66:e5:
a4:63:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:23 2025 by rpki-client