Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: VIqLgE1O69wyJ0UXir7Gj52AZYSwnNiiVf752p9Iaj0=
Subject key identifier: 61:8C:73:12:27:E8:B5:81:D2:1B:2A:B8:69:7B:56:89:6E:C3:E7:B5
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 0195124714C16B06728A1A515CA437218BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 05:00:03 +0000
Manifest this update: Mon 17 Feb 2025 05:00:03 +0000
Manifest next update: Tue 18 Feb 2025 05:00:03 +0000
Files and hashes: 1: QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa (hash: h1eiwnIox6CJN2eOBBfQEHdpOKWR/C6Oxeaya2ntIbQ=)
2: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: 8JGRKdeWjxz4CEE8kSan/qRmY1u9uAiKkm3lqTARl7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:14:c1:6b:06:72:8a:1a:51:5c:a4:37:21:8b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Feb 17 05:00:03 2025 GMT
Not After : Feb 18 05:00:03 2025 GMT
Subject: CN=618c731227e8b581d21b2ab8697b56896ec3e7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:b8:48:5a:ab:d1:46:3e:33:9a:14:5f:a4:
3f:cb:08:c4:aa:49:53:0c:ef:b2:8c:a0:4a:82:22:
3f:20:13:9a:85:7c:38:e3:04:93:fc:96:81:64:81:
87:df:34:17:c2:dd:d2:2b:b4:eb:9d:c4:38:2e:cf:
83:fe:76:31:04:82:f5:dc:90:f1:e0:70:96:24:7c:
f3:8c:a5:75:c1:3e:e5:ef:f4:0d:a9:d5:a9:11:14:
a4:54:ab:65:89:7e:71:87:ed:8c:3f:35:cc:4a:ba:
fb:b5:be:2e:83:e3:46:61:08:93:7c:03:ed:87:f5:
06:97:7e:25:f9:3c:62:ca:9c:06:85:14:34:d2:fd:
4b:59:5b:3c:bd:8d:fc:59:8f:85:83:e4:09:03:30:
18:36:96:d4:9f:59:d4:63:65:9a:dd:dd:dc:13:45:
a4:48:0d:eb:72:c0:72:81:4e:8a:e1:2a:0a:8a:e6:
98:ea:c3:8b:d9:ea:c2:94:c6:ce:e4:db:b7:84:24:
b5:6d:5d:36:96:eb:46:24:78:d8:b3:c7:f4:c8:9c:
45:80:c1:20:39:72:c1:6a:25:76:d4:44:d6:0a:01:
d2:d6:9e:75:c1:e1:07:57:e4:13:73:0f:65:16:4b:
db:e3:a8:0b:37:5d:f0:82:2a:77:b7:24:67:01:47:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8C:73:12:27:E8:B5:81:D2:1B:2A:B8:69:7B:56:89:6E:C3:E7:B5
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:af:71:a2:24:66:1b:c3:08:4a:c8:99:07:19:1b:5c:07:14:
2c:35:36:f4:d1:15:01:0a:c2:4a:ae:6a:a7:d3:e2:f6:c0:0f:
f4:ee:c5:6a:e1:ee:81:fb:26:fc:f3:83:eb:42:d0:0f:c5:2e:
60:1c:94:8c:66:8b:91:07:55:4c:dd:f8:4d:90:dd:0c:11:4c:
a9:ee:e9:38:c2:d8:8b:98:c4:cf:fd:6d:ab:9b:c5:0a:94:d2:
5f:03:26:12:ec:01:03:2e:f3:be:a8:63:83:c8:05:b7:a4:b0:
1e:53:81:f9:90:3c:3c:63:6d:d3:69:8a:08:11:d6:79:0d:a5:
ce:c5:4c:1b:d1:a5:df:de:3f:d4:3d:4a:36:cf:b7:75:41:cf:
bd:32:53:02:ef:63:7a:2f:96:62:1c:d7:ef:88:c1:4a:64:61:
41:83:9d:8d:25:24:12:59:7a:11:75:f4:90:44:3c:6c:2b:96:
0c:29:05:9a:ef:05:21:63:bb:96:48:cf:98:b7:1d:c4:32:ab:
95:a4:14:0e:2a:b4:2a:f1:83:dc:6d:68:26:3f:15:93:cc:3e:
c1:5a:71:27:6e:54:0d:97:7b:12:c4:2f:01:70:35:76:17:95:
28:22:b9:89:3a:c3:f1:83:75:e4:76:61:a1:7a:92:1c:04:91:
4f:2b:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:25 2025 by rpki-client