Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: Lv4hXlz4LAMj/egVhfDuORurIiG1sE5XV0ixEtwb47E=
Subject key identifier: 6C:BC:3F:E8:55:ED:2E:B4:70:D4:BC:18:F9:F1:21:E7:AF:50:14:68
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 0194C3BE71EF9643D461120C73E5A20AFADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 52
Signing time: Sat 01 Feb 2025 23:00:25 +0000
Manifest this update: Sat 01 Feb 2025 23:00:25 +0000
Manifest next update: Sun 02 Feb 2025 23:00:25 +0000
Files and hashes: 1: dykPFnRrky6lGH1dWuJxp5L8J-o.roa (hash: Kd0AtYONErQFdVH78z2WFvNWXL9jJi4HQ4ImHw/+cX4=)
2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: 4Y2I61xActRPyCqB7n730Bpu5L7mm+MjFA/g9mXvlr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:71:ef:96:43:d4:61:12:0c:73:e5:a2:0a:fa:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Feb 1 23:00:25 2025 GMT
Not After : Feb 2 23:00:25 2025 GMT
Subject: CN=6cbc3fe855ed2eb470d4bc18f9f121e7af501468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:2c:1d:c8:05:64:87:1d:04:19:55:b4:26:
e4:bf:0f:72:df:2a:8c:e5:20:52:38:7a:55:d8:54:
de:15:37:fb:d1:87:af:c2:f3:a0:3a:a2:e5:3d:00:
b4:49:5e:18:08:e9:b2:0e:9c:aa:a5:19:30:7e:26:
76:d9:90:01:b2:96:d3:ec:a2:9a:5a:6a:f7:4b:df:
2c:81:cb:f0:4e:dc:0e:eb:fd:e3:15:95:47:69:86:
07:78:de:5d:6a:aa:e8:12:5d:39:ce:62:af:7b:87:
62:da:61:cd:c5:41:35:61:0f:ce:6b:d4:e6:f5:5e:
24:85:38:fa:dd:bb:a6:2a:af:12:1a:72:1f:40:79:
0a:ae:f2:11:68:81:10:b0:21:6e:8f:bf:bb:ce:92:
93:f6:ff:75:29:7d:ac:39:2e:e7:b0:68:a9:8a:ae:
bf:c7:b9:77:d1:12:ff:83:d2:d8:b0:26:89:e7:6d:
ce:61:e6:08:1e:89:dc:f5:d5:f8:62:e6:60:69:2f:
b6:a6:e0:7a:ca:80:b7:5d:d9:d0:1b:f9:e4:f7:a4:
86:ef:f5:d1:97:51:74:bc:03:06:1a:dd:06:2d:c2:
ce:63:0c:ea:ef:fc:1c:60:50:44:35:b5:77:ea:56:
37:e8:d2:e5:46:5d:67:ae:d8:63:33:91:ce:53:cc:
85:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:3F:E8:55:ED:2E:B4:70:D4:BC:18:F9:F1:21:E7:AF:50:14:68
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b8:27:c3:6e:55:73:61:38:91:95:9a:ef:92:be:bf:06:d9:
32:d5:49:65:9c:4d:ba:0c:a7:bc:c1:e4:47:97:af:60:35:e5:
d0:f6:22:d1:c4:99:f2:ea:ae:1c:43:0d:8b:8a:72:01:ec:b5:
b5:9c:a3:1d:48:bb:60:9e:e0:d8:29:8d:41:4e:50:3d:3f:1b:
fb:ef:c7:d7:a9:95:93:b5:61:ae:8b:35:b7:57:99:d7:ae:e3:
19:d1:d7:20:e3:6a:57:90:7b:c5:2e:cc:2c:a4:45:a4:0c:7a:
51:6e:21:62:a3:77:09:61:cb:2f:5f:5a:86:31:3a:37:b8:7a:
2b:38:bb:1b:05:64:47:5c:c8:2d:7a:e5:e7:ff:e3:26:9e:8d:
ac:1d:b8:c5:9b:e1:53:48:49:8c:65:3f:64:76:7f:fa:a5:52:
19:fc:56:31:fa:a9:4f:89:3d:66:5d:e1:83:d7:0b:ec:cd:5c:
18:b3:c3:00:37:2e:7f:2d:d7:34:e1:5f:57:f1:61:2a:32:03:
e9:af:bb:d5:19:8e:ed:ea:5e:de:71:8b:ce:f3:48:85:54:62:
fd:4e:1f:fe:13:7e:49:8b:4d:e0:82:16:60:ad:c5:7f:7c:80:
22:88:45:e2:bf:e2:d3:79:5a:66:df:a5:ab:d5:78:28:00:3c:
df:91:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:08 2025 by rpki-client