Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
File: UW2UBk9zhVXozjZaGVfWnnaICcQ.mft (raw, json)
Hash identifier: KqwIHiBRQLvmDZ74hEoszUPAdm7NwKntiLN28KNGZ5o=
Subject key identifier: B8:4B:03:AE:88:B7:39:27:7D:CA:12:C1:7C:91:BF:C7:7C:9D:0D:08
Authority key identifier: 51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
Certificate issuer: /CN=516d94064f738555e8ce365a1957d69e768809c4
Certificate serial: 0196534939FBF741529D402B22F2BFF5D0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
Manifest number: 04DE
Signing time: Sun 20 Apr 2025 13:00:29 +0000
Manifest this update: Sun 20 Apr 2025 13:00:29 +0000
Manifest next update: Mon 21 Apr 2025 13:00:29 +0000
Files and hashes: 1: UW2UBk9zhVXozjZaGVfWnnaICcQ.crl (hash: igahYKXzlrB1aS2qiySKSp167uJ1kGKmBoClOZtARiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:39:fb:f7:41:52:9d:40:2b:22:f2:bf:f5:d0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=516d94064f738555e8ce365a1957d69e768809c4
Validity
Not Before: Apr 20 13:00:29 2025 GMT
Not After : Apr 21 13:00:29 2025 GMT
Subject: CN=b84b03ae88b739277dca12c17c91bfc77c9d0d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:64:6f:e6:4c:df:8a:f5:5b:8b:8b:55:f8:
a1:40:50:87:93:94:16:92:67:b0:64:08:84:85:e2:
da:e9:81:22:61:a7:f6:71:2a:7f:cc:44:3a:92:fe:
bc:b6:84:1d:f1:27:52:bf:0d:e1:28:4c:de:a4:b4:
1f:2a:10:94:97:2b:d4:81:0f:02:7f:07:5e:e0:7a:
ff:a5:ef:87:15:e2:f8:cf:03:10:75:7d:35:65:42:
9e:35:54:42:41:cf:a3:2f:36:0c:42:71:81:8e:bb:
63:21:fb:24:5c:62:10:3f:3b:d9:f5:47:ba:cb:59:
c9:18:fa:62:d3:f8:85:83:12:0d:d6:82:35:59:e8:
bd:5f:c8:8b:fd:ec:e6:cc:34:1a:e7:73:39:18:ca:
ca:9e:46:43:8c:63:45:f0:19:b5:fd:ab:b4:c7:91:
8e:10:ee:bf:3e:4e:53:22:c0:ba:dc:68:5e:b1:ad:
b2:92:84:5f:fd:57:d1:f1:2c:a6:0d:55:20:b0:f6:
f8:d2:76:ff:c6:b1:5e:74:de:98:a7:05:93:cb:af:
bd:10:28:4c:5e:44:d5:bd:1c:44:3b:79:fa:3a:07:
f7:a3:75:28:3f:5e:5c:4d:28:9c:a2:f2:49:a9:02:
1a:e2:02:c6:71:b8:f7:65:10:bb:0a:16:37:49:06:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:03:AE:88:B7:39:27:7D:CA:12:C1:7C:91:BF:C7:7C:9D:0D:08
X509v3 Authority Key Identifier:
keyid:51:6D:94:06:4F:73:85:55:E8:CE:36:5A:19:57:D6:9E:76:88:09:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UW2UBk9zhVXozjZaGVfWnnaICcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b81895-c605-41e2-b283-c0565fa840d4/1/UW2UBk9zhVXozjZaGVfWnnaICcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8f:c2:98:e2:50:5e:d4:0f:34:2a:f0:4e:d6:59:fc:a2:d2:
3d:c5:3b:3c:f0:c4:90:88:f1:b1:98:ab:95:8f:f7:34:94:b3:
a6:fd:4f:b6:2a:bd:92:e2:49:34:d2:2a:32:b6:52:2c:ae:ef:
be:00:69:27:c6:b6:eb:9e:ad:db:b4:e4:4a:ee:4a:04:f4:ad:
d5:22:7d:90:e8:cc:cd:ab:6d:a3:e5:79:b6:ab:d3:fc:b5:0c:
2b:98:2d:16:6b:d0:fc:79:16:b7:ca:aa:bd:5e:0b:f3:58:79:
cc:cb:25:05:89:77:87:41:6c:c6:e7:50:6e:3d:0f:78:f3:ff:
85:a5:ca:78:30:ca:d3:43:2b:9b:c7:b3:b3:5b:84:cf:b9:4f:
8d:e4:32:1b:02:a9:3e:2e:31:c9:74:f2:d8:37:2c:a0:af:7a:
ea:de:04:b2:1a:b0:e7:5a:ce:92:f5:4b:a0:d9:93:2f:43:fc:
8b:e1:7d:ef:66:4e:1a:89:21:78:33:13:fd:37:53:f3:b5:e9:
5f:d3:e2:ea:fb:ec:59:ca:b2:0f:e6:c4:36:c9:7a:74:85:cb:
c9:9d:f4:e8:74:8c:41:76:b9:04:38:f7:c1:31:62:8b:ed:b0:
93:6c:15:3f:1e:48:c6:df:5b:df:8a:b6:1b:69:4f:25:bc:76:
f6:56:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:12 2025 by rpki-client