Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier: lunX+Fi5SyfIDdW5N2THEG5trXCi3KVpnpPhDkkkX3I=
Subject key identifier: 51:D1:65:D6:40:75:85:00:E8:D3:3B:6B:EA:7B:B2:F0:E4:56:F1:77
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 019511354FE9CB869ECA95C5BD7ED7602830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number: 144B
Signing time: Mon 17 Feb 2025 00:01:01 +0000
Manifest this update: Mon 17 Feb 2025 00:01:01 +0000
Manifest next update: Tue 18 Feb 2025 00:01:01 +0000
Files and hashes: 1: 1-qC_h0BMH68nwZM--m9RrJPfUSU.roa (hash: dGjZPTTJM5HpRM58D6GZPV5SzYmb4kq7Kyp7lE449Zo=)
2: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: P2eqK+r/lUegD0nlBsqqRQ0WN9tgiPuHBKJlcwpRH+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:4f:e9:cb:86:9e:ca:95:c5:bd:7e:d7:60:28:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Feb 17 00:01:01 2025 GMT
Not After : Feb 18 00:01:01 2025 GMT
Subject: CN=51d165d640758500e8d33b6bea7bb2f0e456f177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:7d:1b:d7:f1:51:4a:3f:79:ac:51:be:a5:
5f:a3:1c:cf:94:13:4c:1d:cd:cd:fc:51:f5:ff:30:
e9:4e:a4:16:9c:ce:a8:be:8e:f4:53:69:6c:98:eb:
cc:94:67:48:c3:f2:71:22:b7:15:e3:1a:60:14:0a:
80:b4:4b:35:f6:b1:50:1e:b1:84:81:5f:54:8f:38:
9f:ba:4b:db:18:22:25:c4:86:d2:ba:cb:92:d5:82:
65:78:e2:0e:30:22:d4:df:c7:8b:29:4f:4d:1d:53:
ce:b8:5d:18:5c:64:cf:6c:a1:ac:2f:bf:74:6a:11:
0c:c3:9e:06:5e:7c:f2:f3:68:4e:fc:ca:93:25:07:
ca:b3:28:32:59:fb:7b:5f:2b:c6:f5:0d:1a:c0:99:
86:ae:1c:e5:3d:76:8f:ad:6b:de:85:b4:44:70:5c:
0b:89:ab:21:ae:a4:3a:f1:58:04:f3:1a:94:54:73:
9e:51:f2:ce:eb:05:ef:68:c2:18:2a:9c:42:f9:84:
96:58:d7:56:74:4a:b6:7d:28:b9:d2:b2:2e:c1:4f:
68:92:c5:e0:49:48:9a:31:f7:1e:ea:30:6c:ef:6b:
45:a6:7a:5c:08:4d:0e:42:83:9a:88:45:9f:9f:25:
47:bc:a0:d1:63:c7:04:d2:3c:0f:19:7d:95:6a:97:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D1:65:D6:40:75:85:00:E8:D3:3B:6B:EA:7B:B2:F0:E4:56:F1:77
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cf:d1:5f:69:44:54:cc:20:5e:f6:da:c3:6c:2f:ea:01:d1:
b5:c1:7c:82:25:75:a5:1a:be:ef:85:51:2e:55:ab:8d:8b:e2:
b5:51:0d:c2:8c:f2:30:bb:66:cd:31:7b:d8:5b:62:b7:a9:44:
3f:0f:9c:6b:16:19:a9:25:e2:bf:7d:b0:c5:7b:48:16:c4:65:
bb:42:a6:a7:03:e3:f6:ef:9c:8d:9b:34:c2:b9:0f:08:29:56:
8a:3a:81:e9:cc:33:2b:07:55:da:97:7b:6f:95:46:ef:82:1a:
f2:2a:86:fa:ac:2a:75:57:99:dc:98:d4:1a:07:b2:e4:d1:11:
05:fd:1c:a4:66:2a:54:dd:77:33:46:15:54:e3:df:16:79:4c:
de:d5:e4:6f:09:eb:5a:29:00:b3:2e:b2:f0:2c:9c:a0:8d:44:
da:52:c5:e3:e6:cc:2c:51:dc:16:c3:1d:22:60:40:cc:ff:cd:
f4:ed:f9:cb:3c:f5:2b:08:8f:73:fa:28:54:21:93:84:ea:5a:
f0:f6:24:d8:ed:12:c9:7f:be:17:5a:e3:ee:58:2f:54:bd:f0:
09:08:86:18:95:fe:db:8e:71:a0:f8:b3:dd:44:2e:5a:b1:d6:
1c:31:ad:62:bf:01:5a:5e:a8:1b:46:3f:76:02:fa:98:65:16:
69:2a:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:58 2025 by rpki-client