Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
File: UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json)
Hash identifier: sYi4hKADBL5BEjgubjNV7IcKo8lznsfsDONgQISmv1o=
Subject key identifier: 62:F9:CD:B6:B3:AA:BC:5D:92:A7:B9:89:4A:76:35:70:17:65:36:2E
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial: 0194C4D1050F4EA1A68D5FA2251725CBD245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
Manifest number: 024B
Signing time: Sun 02 Feb 2025 04:00:20 +0000
Manifest this update: Sun 02 Feb 2025 04:00:20 +0000
Manifest next update: Mon 03 Feb 2025 04:00:20 +0000
Files and hashes: 1: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: /rAu+2Z576dBp2g1oF4JhPLhePiwtfUwid7RUPyKCHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:05:0f:4e:a1:a6:8d:5f:a2:25:17:25:cb:d2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Validity
Not Before: Feb 2 04:00:20 2025 GMT
Not After : Feb 3 04:00:20 2025 GMT
Subject: CN=62f9cdb6b3aabc5d92a7b9894a7635701765362e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:ee:9d:d3:05:f4:0d:db:02:09:5c:6b:d8:
19:51:cd:21:aa:0e:62:2c:63:29:c0:29:b2:99:33:
18:6b:8d:87:17:51:5a:5a:ac:88:54:48:fd:19:eb:
bd:66:34:10:40:ac:2e:72:5f:f4:8b:36:52:44:57:
98:79:5c:82:31:04:43:e9:25:ca:8d:2a:35:da:44:
7b:0d:b1:93:99:15:9e:b6:c3:35:9c:a0:4a:d5:78:
00:7e:8b:10:35:ba:d9:7a:e0:ec:4f:10:ce:58:ae:
4c:aa:3e:4f:54:d6:29:df:ab:02:05:fc:eb:b7:eb:
96:b9:e8:d3:31:ae:7b:de:63:1c:05:1e:86:7d:22:
e9:b6:2b:91:99:4f:0f:cc:d4:96:14:00:fd:36:d4:
d1:b4:f8:71:3a:fb:1c:8c:16:c0:8a:b3:5a:55:6b:
27:2f:a1:f9:1a:0e:87:f9:c5:56:7e:fa:17:f9:06:
a3:e0:6d:7e:2f:ff:e6:81:f2:80:d3:82:26:fb:15:
00:d5:f9:98:7b:50:79:25:af:4c:f0:33:2d:36:3d:
8c:ae:e1:5d:c0:6a:12:4b:dc:3d:57:35:33:62:10:
2b:3e:0f:5c:8b:c9:ca:4a:53:92:4a:68:28:2f:83:
90:ee:4c:ed:bd:06:9c:aa:8b:09:a7:58:b0:5d:dc:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F9:CD:B6:B3:AA:BC:5D:92:A7:B9:89:4A:76:35:70:17:65:36:2E
X509v3 Authority Key Identifier:
keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:df:69:83:50:88:e2:0a:ea:85:72:76:32:72:96:3e:44:55:
17:b1:c9:19:7e:59:0d:70:60:bc:97:72:77:a1:ca:27:93:e6:
24:fd:f0:d7:41:77:11:ae:06:9e:55:d9:c7:78:d7:ba:3e:a9:
f2:e4:dd:2d:52:d5:ff:ec:66:1d:1c:47:be:26:f0:26:bf:3f:
b3:ea:68:67:13:aa:b7:2d:e8:d5:19:65:d8:f3:74:45:c7:62:
a2:4b:67:cf:83:39:56:1d:2b:05:5a:b4:9f:50:9c:f9:0e:e2:
98:a5:ea:97:bb:6d:d1:2d:08:95:82:0e:85:c5:22:bd:d4:da:
88:9b:27:27:51:81:62:75:35:ca:3d:f5:84:fa:81:c9:57:a1:
a4:ad:b1:50:8d:24:c9:4d:8a:71:93:39:81:86:a8:28:3c:d6:
43:2c:89:ab:16:5f:1b:55:69:aa:19:fb:51:5f:a1:73:d1:6e:
5e:85:8c:03:91:31:92:fd:8a:83:04:8f:d5:86:83:be:46:31:
2e:71:99:3a:93:ec:7d:c2:23:b0:d4:a1:85:c3:61:13:ae:d1:
d0:66:37:b7:8d:8c:5b:bb:f6:9f:44:b9:70:8a:97:26:86:ef:
71:e1:cf:e1:13:db:e9:b7:fb:ce:7c:45:d6:1d:4f:ab:70:ff:
39:00:0f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:55:27 2025 by rpki-client