Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
File: Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json)
Hash identifier: vkui87/W4hSBPFY+uQii4WNpDa8D5KCMQajdyZvXcUE=
Subject key identifier: 9B:21:03:38:03:AD:13:2D:6C:64:F5:B9:EC:ED:89:3D:ED:5C:08:CA
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Certificate issuer: /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial: 01958BBBBD32DE8383B9E401EE3FB07DEFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
Manifest number: 136B
Signing time: Wed 12 Mar 2025 19:01:31 +0000
Manifest this update: Wed 12 Mar 2025 19:01:31 +0000
Manifest next update: Thu 13 Mar 2025 19:01:31 +0000
Files and hashes: 1: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: 9ncZ0WrRV7krijkxsuEtiiYZYpIMuFMNq7m4YsYpQw0=)
2: kWgx2Wjql2LYt0QNUa7UD3E-ZNs.roa (hash: NPB7ZX6Td6/rM0WpZJID5mJD7qpTT41mPi5DDVNwg5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:bd:32:de:83:83:b9:e4:01:ee:3f:b0:7d:ef:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Validity
Not Before: Mar 12 19:01:31 2025 GMT
Not After : Mar 13 19:01:31 2025 GMT
Subject: CN=9b21033803ad132d6c64f5b9eced893ded5c08ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:1b:15:35:e4:03:b8:6d:a2:c9:53:df:0a:
26:52:bf:77:1f:0d:db:98:e3:f1:c0:d0:96:f2:a2:
78:c6:8e:10:16:f0:10:b1:71:31:90:e6:94:7b:bf:
47:c7:fb:32:48:ed:69:7b:ce:0c:1f:03:4b:59:19:
e3:4e:40:ef:56:a6:d1:b4:a9:d4:31:54:46:e4:6f:
60:49:bd:a8:6d:cb:32:99:6a:cf:3d:22:58:d8:39:
66:1b:08:47:4b:11:1a:b3:b4:a0:56:26:d4:19:2e:
5f:45:79:6f:c8:ab:f5:71:f8:f2:59:75:9b:aa:f6:
7b:5f:31:b8:2c:a3:d9:84:ad:87:71:e7:d7:f4:9c:
d7:7d:a9:7a:f6:63:96:b6:2c:80:53:5f:d2:cf:da:
35:32:96:ed:d0:a8:ad:22:9c:a7:91:f9:3d:54:ce:
13:06:b6:e5:c4:19:66:54:30:12:a8:07:ce:6d:d0:
f5:7a:72:c6:49:80:0a:47:11:b0:7b:38:77:58:d6:
5d:5d:b7:fe:e3:31:03:cc:42:47:49:95:7c:9b:77:
fb:86:60:77:98:e6:f6:59:fe:1f:7a:3d:3c:62:b0:
71:1e:bc:09:4f:34:b6:06:6d:f4:20:9a:b6:e3:9a:
c8:a8:d8:57:86:e9:21:1b:87:bb:5c:d9:2a:36:1c:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:21:03:38:03:AD:13:2D:6C:64:F5:B9:EC:ED:89:3D:ED:5C:08:CA
X509v3 Authority Key Identifier:
keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:52:af:ed:e0:f5:4d:1e:2b:6a:6b:03:98:7b:9b:5c:a2:a4:
50:70:9d:ba:72:1e:41:7d:57:87:5f:fa:56:a7:e4:fa:5f:4f:
5a:eb:a8:ca:a5:ba:d6:de:a7:13:cf:9f:09:af:cd:57:df:28:
b9:9b:99:72:3f:8c:20:50:b4:46:43:14:44:19:dd:94:8c:1b:
16:a5:c9:f2:51:47:0f:44:8e:2d:80:43:3e:97:b2:af:e5:ae:
25:c2:ee:70:cd:eb:ca:bd:de:1b:b8:9a:61:c5:8d:f2:4b:aa:
81:5b:6d:e6:34:5c:dc:66:81:c6:2a:62:06:34:31:b6:44:ec:
db:5c:92:ac:41:e6:f4:09:2f:ab:7e:92:d8:0a:9d:7c:b0:08:
e6:ab:a1:ae:d6:06:af:11:5a:ff:aa:89:58:ac:bb:14:53:cf:
e2:47:8f:d9:0c:c5:d5:a9:fe:54:fb:8e:91:f5:69:1e:a7:ae:
9e:ac:45:00:2f:5a:ce:ff:56:42:70:66:7d:0f:be:d4:b1:36:
6b:3a:58:7d:85:c7:35:98:5b:be:e9:c3:2a:9f:53:12:30:72:
dc:9a:ca:e5:1a:8e:2f:8f:27:80:cf:0d:95:8e:dc:b9:f9:92:
0b:fb:48:ee:c9:a4:9d:2e:6e:6d:48:ab:26:43:22:c5:e9:d2:
07:1e:ad:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:36 2025 by rpki-client