Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File: UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier: PXrK7HgmNY7VuZR7iFG/TfG22K7J2WRhtisEr7VTd4s=
Subject key identifier: E6:9C:CF:36:39:20:AA:BA:82:3D:1F:AB:2B:F3:0F:00:C1:ED:42:8C
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 0194C42CA7073ECDD9670C18604C5EFDA0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number: 1179
Signing time: Sun 02 Feb 2025 01:00:48 +0000
Manifest this update: Sun 02 Feb 2025 01:00:48 +0000
Manifest next update: Mon 03 Feb 2025 01:00:48 +0000
Files and hashes: 1: 1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa (hash: 2k5Vbn4Uzj43wxo1XqMC5rFldjjQHil2kjWg9IIMQEQ=)
2: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: cVWp+asmi6UdScXynl+2wM0gRBqaDDAiHzEjp9eEmJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:a7:07:3e:cd:d9:67:0c:18:60:4c:5e:fd:a0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: Feb 2 01:00:48 2025 GMT
Not After : Feb 3 01:00:48 2025 GMT
Subject: CN=e69ccf363920aaba823d1fab2bf30f00c1ed428c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:ea:b4:ce:60:80:2d:df:51:3a:96:b7:9a:
ab:0b:04:36:13:75:f9:19:2e:1a:15:f0:4b:90:8c:
38:9d:a6:e5:c2:b9:e4:ac:84:b3:77:70:19:f4:b8:
24:55:fa:a0:35:e4:36:75:df:b6:ee:84:58:80:ff:
57:13:81:39:82:a0:e8:00:47:ce:1f:3e:fc:dc:0c:
e9:ae:39:02:e9:3f:75:aa:39:87:2c:6e:bd:9c:ab:
8c:b3:f1:0a:61:ad:44:aa:a0:bd:3f:03:59:2b:7c:
ac:5d:d1:3d:1a:90:00:67:a0:3d:f7:b8:2f:9b:bf:
14:c1:a2:99:15:d9:d5:b8:cf:d8:6d:cb:9f:1c:19:
02:28:d0:3d:18:da:8e:c3:6e:f2:1f:c1:6a:f4:03:
2a:94:a4:1e:d8:5d:35:91:14:03:3b:29:7f:a7:c4:
eb:c5:ce:f6:70:83:f9:ff:23:29:2d:8a:36:ee:82:
a7:90:0f:e3:7a:2e:de:5c:bd:67:24:32:0d:f0:9e:
b3:33:9f:a9:87:f8:f8:34:8e:a5:4e:7c:36:0d:0c:
14:04:db:2e:75:78:22:98:1e:32:f0:95:f3:e6:41:
05:26:ac:4b:57:50:14:f0:05:94:58:dd:1e:0a:2a:
d3:3c:15:58:a5:77:39:ce:5f:f8:55:fb:1f:a6:62:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9C:CF:36:39:20:AA:BA:82:3D:1F:AB:2B:F3:0F:00:C1:ED:42:8C
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:65:ee:59:a7:ef:e3:2f:e1:c6:8e:d2:43:e0:89:ca:89:08:
8c:05:17:04:6f:f3:2d:bc:3a:f7:fb:d4:2b:81:86:57:41:21:
e4:e7:19:cc:9f:82:1e:9d:56:dc:ea:8c:84:0b:ba:c5:45:bb:
d2:7f:17:40:2a:14:15:87:b3:6e:fe:44:fa:33:e8:69:56:9c:
0f:f1:5f:6b:08:a4:d7:63:de:05:85:19:9b:62:dc:9e:56:93:
ee:3c:c6:c8:4d:e2:4e:68:ba:58:3a:43:1d:b9:04:e1:f7:ed:
13:91:81:d9:2c:ea:ce:27:b4:30:6b:ba:51:db:94:17:24:37:
8a:de:9a:81:4e:ef:a6:33:ee:4b:aa:1f:ac:37:ff:18:54:33:
2c:2c:4b:c5:aa:37:ce:b2:83:cd:6b:33:9e:de:1e:0e:97:ed:
9b:41:73:0c:a5:df:61:6d:0a:a8:5a:45:18:bb:f0:a5:30:ac:
eb:70:19:78:b7:ab:01:e3:b6:60:c3:1c:51:0f:d7:e5:3d:7c:
a0:88:f6:d1:1e:40:da:66:2a:17:1c:5f:01:2e:cc:dd:d7:aa:
d4:45:14:35:31:5e:26:17:e2:2f:d7:91:e3:f4:26:12:d3:bc:
f5:1e:7d:2d:ed:80:84:74:f0:28:85:6d:dc:b9:6b:9d:f8:55:
bf:1f:4d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:52 2025 by rpki-client