Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
File: 1-K4RxAyWYdJFsaDL5DohK1je_UY.mft (raw, json)
Hash identifier: GP0Hky+OdyTvz4Z1mDbV3uZHdcqkQWZdMNUsznGaFRw=
Subject key identifier: 30:8F:D8:67:2C:7E:CA:F1:09:8B:2A:03:8C:AB:AB:9D:2C:08:98:BC
Authority key identifier: F8:AE:11:C4:0C:96:61:D2:45:B1:A0:CB:E4:3A:21:2B:58:DE:FD:46
Certificate issuer: /CN=f8ae11c40c9661d245b1a0cbe43a212b58defd46
Certificate serial: 019659146C50732FDF9C7C804F5EA88BA95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K4RxAyWYdJFsaDL5DohK1je_UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
Manifest number: 069D
Signing time: Mon 21 Apr 2025 16:00:32 +0000
Manifest this update: Mon 21 Apr 2025 16:00:32 +0000
Manifest next update: Tue 22 Apr 2025 16:00:32 +0000
Files and hashes: 1: 1-K4RxAyWYdJFsaDL5DohK1je_UY.crl (hash: PikFg7V2BcclDi9V8Qfy1/bR1xu6zo3zVO7dmbeu/LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K4RxAyWYdJFsaDL5DohK1je_UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:6c:50:73:2f:df:9c:7c:80:4f:5e:a8:8b:a9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae11c40c9661d245b1a0cbe43a212b58defd46
Validity
Not Before: Apr 21 16:00:32 2025 GMT
Not After : Apr 22 16:00:32 2025 GMT
Subject: CN=308fd8672c7ecaf1098b2a038cabab9d2c0898bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:0f:8a:c7:53:f2:4f:19:36:27:90:8b:3c:
ca:b9:4e:af:64:44:23:a7:ed:2e:ec:bf:a7:a9:d7:
11:90:f9:1c:74:99:6e:24:a5:f3:c6:ae:0b:83:1f:
98:13:26:04:20:89:ac:dd:03:78:f9:be:34:a7:73:
e0:1a:ed:45:b6:1e:53:df:d9:64:1d:71:aa:27:6e:
da:3c:19:21:1a:86:8e:77:53:04:da:f6:0b:d1:46:
c7:18:2d:80:f9:30:e6:f0:ac:c7:ab:b1:37:3a:22:
f4:7b:33:4f:38:3d:93:ed:0c:f7:94:c6:09:50:80:
33:75:13:02:3f:68:fd:f4:bf:ad:be:d1:ba:e9:c1:
98:b3:af:9f:1b:ec:41:5b:89:14:cb:59:78:6a:e1:
40:3a:3a:fa:63:42:70:ae:d4:35:84:09:9f:f4:c0:
eb:1c:fb:46:d6:91:bd:c0:8b:53:8d:93:32:35:14:
6b:f4:f4:ec:80:05:91:00:de:b7:95:71:23:3d:d7:
39:75:85:16:3e:cc:28:77:87:09:2a:1b:1b:d2:9d:
91:ca:ac:cc:38:7d:84:f9:b2:62:73:2b:1a:74:36:
e4:26:68:db:67:4e:17:df:3c:78:11:12:25:72:17:
82:f3:76:db:12:cd:46:b1:6f:06:b7:26:bd:56:56:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8F:D8:67:2C:7E:CA:F1:09:8B:2A:03:8C:AB:AB:9D:2C:08:98:BC
X509v3 Authority Key Identifier:
keyid:F8:AE:11:C4:0C:96:61:D2:45:B1:A0:CB:E4:3A:21:2B:58:DE:FD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K4RxAyWYdJFsaDL5DohK1je_UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7c:28:f3:91:39:0f:a6:3a:11:00:15:e0:c9:9c:f0:c4:2e:
7d:21:90:0b:77:fd:a1:13:aa:83:1b:0e:ed:41:3c:91:55:ec:
d2:e4:e2:3b:75:b5:1f:4b:54:79:35:14:85:0c:47:f0:45:e5:
5e:5f:13:50:ed:52:84:47:10:cd:b5:8e:28:4e:03:27:a8:90:
4e:60:59:4a:76:81:f9:2e:60:c4:b2:ce:ed:84:a8:0a:c8:01:
46:83:d6:8d:d4:dc:a9:5e:57:f5:a3:2d:71:10:32:c4:22:06:
33:14:a3:e4:7c:66:f8:0c:ff:65:69:ef:db:20:83:c7:fb:9e:
60:27:d9:84:01:e6:0d:be:f7:66:ab:11:2e:0c:a9:7f:2f:94:
ee:6d:a6:89:1c:8f:08:94:dc:9e:ce:16:4c:00:5a:25:c1:45:
07:56:ea:46:51:d7:d7:de:74:9d:20:29:18:af:e0:39:d1:6c:
0b:9d:25:11:60:d1:b3:5d:0d:fb:5c:52:d5:c9:7b:3e:72:6b:
a0:33:31:f0:60:e0:86:fd:c8:24:9c:e8:08:65:41:9e:bd:52:
45:27:a7:ff:10:91:c9:79:ea:a4:0f:78:b0:36:48:d4:7c:c5:
62:0b:dc:0e:fd:58:8d:0b:e6:3f:f1:12:a7:1a:e5:0c:8d:d5:
f4:53:a9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:11:29 2025 by rpki-client