Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
File: 1-K4RxAyWYdJFsaDL5DohK1je_UY.mft (raw, json)
Hash identifier: GKvivBlvLUOhf/XRgcO1VVSx5AQP+qytHMi+inW4/48=
Subject key identifier: AE:96:20:72:16:ED:7D:70:6A:E8:99:24:F9:71:06:87:1D:92:0F:82
Authority key identifier: F8:AE:11:C4:0C:96:61:D2:45:B1:A0:CB:E4:3A:21:2B:58:DE:FD:46
Certificate issuer: /CN=f8ae11c40c9661d245b1a0cbe43a212b58defd46
Certificate serial: 019510C6CB8980E2BC4363FBF63EB2AC3711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K4RxAyWYdJFsaDL5DohK1je_UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
Manifest number: 05F3
Signing time: Sun 16 Feb 2025 22:00:18 +0000
Manifest this update: Sun 16 Feb 2025 22:00:18 +0000
Manifest next update: Mon 17 Feb 2025 22:00:18 +0000
Files and hashes: 1: 1-K4RxAyWYdJFsaDL5DohK1je_UY.crl (hash: SqXRApzFu5iANmUtP8XM/SiK/zL58+qreLEvptp7+Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K4RxAyWYdJFsaDL5DohK1je_UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:cb:89:80:e2:bc:43:63:fb:f6:3e:b2:ac:37:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae11c40c9661d245b1a0cbe43a212b58defd46
Validity
Not Before: Feb 16 22:00:18 2025 GMT
Not After : Feb 17 22:00:18 2025 GMT
Subject: CN=ae96207216ed7d706ae89924f97106871d920f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:83:8c:e0:77:d2:67:2d:2e:46:fe:71:a0:
20:54:9f:4c:44:8d:01:8c:70:16:97:02:2c:42:ad:
f2:d2:7a:89:d0:37:fa:d5:8b:1e:8d:9d:d3:aa:2a:
3e:d1:9d:71:33:80:17:cf:7f:7c:3d:e9:5f:b6:d8:
9c:70:ae:72:0f:58:38:98:86:1d:7a:b2:d1:fa:fd:
cd:1f:7b:c5:d6:e3:d3:96:69:f4:bf:c1:85:6c:c2:
4e:95:4c:8a:7e:73:c2:2a:19:11:e6:9b:8d:15:57:
24:53:69:3e:fe:c8:40:bb:23:25:86:f7:64:6b:95:
33:10:3b:21:a7:b6:c1:82:c9:6d:34:4d:40:8e:26:
d9:e0:a2:84:80:eb:fe:92:89:89:2a:0b:f1:e8:c8:
fd:e2:dd:12:a0:b5:c6:8d:40:8a:65:2f:4c:37:69:
15:e5:35:9d:a1:eb:be:98:96:9d:ee:99:10:d4:d7:
0a:eb:77:4a:0d:e5:83:eb:54:8e:5e:60:d1:a3:b3:
40:58:24:6d:f3:04:34:7d:ac:c2:3c:9c:eb:db:a2:
da:0e:85:12:bf:0a:ab:5e:e7:12:95:d3:2f:16:07:
fb:e8:d9:27:dc:ff:5f:44:32:54:c6:83:df:2e:7e:
40:0f:1a:8f:cf:50:71:3e:03:69:97:e8:b7:5b:39:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:96:20:72:16:ED:7D:70:6A:E8:99:24:F9:71:06:87:1D:92:0F:82
X509v3 Authority Key Identifier:
keyid:F8:AE:11:C4:0C:96:61:D2:45:B1:A0:CB:E4:3A:21:2B:58:DE:FD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K4RxAyWYdJFsaDL5DohK1je_UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/381cd4-41b3-44c9-96cd-340d268e5f62/1/1-K4RxAyWYdJFsaDL5DohK1je_UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a2:a5:11:97:16:7a:dc:e0:e0:be:5f:7e:c7:5d:4d:df:2a:
24:e4:05:5a:4b:34:ad:0d:90:13:18:61:11:75:10:e7:93:51:
7c:c1:c7:fb:10:4b:16:6f:58:57:25:4c:f0:b4:ec:c2:89:da:
5e:95:f0:11:82:c7:92:4f:b2:6d:d5:1b:cf:a5:59:72:c8:fc:
8e:1d:cb:3d:8b:b1:64:55:e7:67:50:46:55:c3:7e:43:0f:9c:
c2:95:1a:a9:1e:a2:c0:03:f5:16:1d:5f:41:3f:be:d0:1b:26:
16:dc:e3:3a:2e:b9:63:b1:67:df:81:73:20:89:6f:bd:c7:bd:
42:df:d9:c3:cf:1d:14:a1:c0:f2:e8:09:c7:f7:8f:e3:ea:a3:
70:60:dd:01:28:65:d0:45:c9:bc:27:d7:df:30:98:60:2b:09:
9e:c4:fd:6b:80:db:08:af:10:0d:ec:d2:f9:a9:31:ca:d1:90:
7b:6f:84:f7:50:49:b0:06:a4:20:f6:9f:3f:d6:cf:f5:33:65:
8e:5a:69:82:49:43:1b:cb:e7:1b:bb:1f:c7:ce:0c:37:ce:56:
0e:f1:1e:c7:d9:18:a3:15:b3:35:98:99:26:09:91:b9:c8:12:
41:84:40:27:37:1e:f3:cb:53:df:ea:97:37:4b:ce:fd:23:30:
39:c8:51:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:34 2025 by rpki-client