Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
File: Un0m8LBCyUz2f2JeXY5i4qKudVI.mft (raw, json)
Hash identifier: aK1FgrAKbwN6r0pNGBLug6NEFncNgGRArOzCYaQ2iQY=
Subject key identifier: 88:79:3A:7E:6B:EF:0B:5D:ED:07:54:C4:6D:06:AD:C6:9D:D9:E4:49
Authority key identifier: 52:7D:26:F0:B0:42:C9:4C:F6:7F:62:5E:5D:8E:62:E2:A2:AE:75:52
Certificate issuer: /CN=527d26f0b042c94cf67f625e5d8e62e2a2ae7552
Certificate serial: 01958C972EA5D2AB026701989DE88369AFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
Manifest number: 0460
Signing time: Wed 12 Mar 2025 23:01:12 +0000
Manifest this update: Wed 12 Mar 2025 23:01:12 +0000
Manifest next update: Thu 13 Mar 2025 23:01:12 +0000
Files and hashes: 1: Un0m8LBCyUz2f2JeXY5i4qKudVI.crl (hash: e7LdSppjHQGz6H4WigCVs/qt2OaUqTlvCaN/n9UVUzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:2e:a5:d2:ab:02:67:01:98:9d:e8:83:69:af:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527d26f0b042c94cf67f625e5d8e62e2a2ae7552
Validity
Not Before: Mar 12 23:01:12 2025 GMT
Not After : Mar 13 23:01:12 2025 GMT
Subject: CN=88793a7e6bef0b5ded0754c46d06adc69dd9e449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:29:7e:96:6d:30:a9:89:97:48:fc:db:8c:
53:f5:54:17:ba:7a:39:23:b3:45:b2:d8:fe:c9:b0:
f1:5f:67:28:1b:8c:b1:67:cf:9a:96:56:34:74:56:
99:be:3e:fe:1f:ef:5a:2c:99:d4:9f:48:c5:12:9d:
4c:c1:03:f2:ae:5b:a3:b3:00:17:21:b3:61:42:f4:
4d:eb:03:fa:c4:6e:52:01:d6:18:27:07:09:86:7f:
fc:9d:6f:dd:c8:95:c0:25:61:ae:93:0f:31:1b:68:
bf:1f:6c:0c:b5:80:ac:a1:96:47:af:b2:53:5c:85:
4f:be:90:54:2c:b7:80:87:97:ff:9e:5e:17:83:38:
6f:d7:46:b1:34:b5:58:97:8c:ac:0a:1b:bd:0f:7b:
55:15:c5:59:76:b4:cc:82:e5:93:f0:4b:7e:65:6f:
c4:15:0b:6a:ce:8c:12:bc:f0:87:40:b5:c4:43:d8:
e2:17:5b:bb:20:61:e5:f2:b2:60:aa:a6:1a:87:2f:
f2:54:d0:60:2d:5a:72:73:e2:2b:19:38:d2:bc:d4:
63:27:1b:d5:1f:83:84:b7:23:00:de:32:f6:95:ba:
e8:57:bc:37:df:5a:b6:25:c9:8c:33:a3:31:e3:66:
3c:71:fd:bd:2f:b7:8d:8d:08:8f:57:70:48:37:dd:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:79:3A:7E:6B:EF:0B:5D:ED:07:54:C4:6D:06:AD:C6:9D:D9:E4:49
X509v3 Authority Key Identifier:
keyid:52:7D:26:F0:B0:42:C9:4C:F6:7F:62:5E:5D:8E:62:E2:A2:AE:75:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Un0m8LBCyUz2f2JeXY5i4qKudVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/bd335a-a55c-4555-a247-39961662353a/1/Un0m8LBCyUz2f2JeXY5i4qKudVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:43:d8:b1:e9:dc:1f:57:1c:90:be:e9:4d:a4:7d:d8:05:ea:
5f:97:4b:f7:74:3a:e6:03:41:23:1b:8f:49:6b:dc:5c:73:29:
14:7d:be:68:16:1e:a8:b1:1c:6e:7b:a3:91:6e:bf:f8:6c:76:
ba:e8:7c:11:04:c8:d5:dd:69:86:d0:24:5b:71:6f:18:a9:03:
1b:5e:10:f0:ec:ea:cf:69:1b:f4:c1:dc:a2:de:15:34:b3:b5:
eb:32:20:2f:ff:66:e2:cf:5c:12:4d:4a:d0:67:70:36:43:e9:
26:56:67:d2:38:bd:c5:3d:c6:3e:e7:24:bd:bb:cf:7f:e5:64:
fe:0c:2f:ab:76:b5:08:fc:a9:63:b8:3a:a3:df:e2:37:1e:7b:
2b:0d:d3:d7:0e:23:9f:ef:7c:85:41:b6:f9:68:c7:45:6b:7f:
c8:a4:d1:d4:0f:62:09:23:20:c7:9e:03:6a:c9:d3:ae:ed:55:
39:1d:4a:61:3d:ec:c1:82:1c:39:24:e3:47:cd:81:81:45:cd:
93:8f:83:cd:9c:24:7e:db:84:b2:97:46:7f:ac:4e:da:3a:2d:
55:0a:76:cf:b6:6a:4d:aa:6f:68:e9:b3:33:60:3f:32:4b:c9:
4b:51:01:d0:f1:04:52:97:23:b2:9e:34:94:41:36:95:9e:95:
9c:0f:92:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:08 2025 by rpki-client