Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
File: UDUgXD0BcT-di1sA41OWGbIzUjI.mft (raw, json)
Hash identifier: E1k+I4F2C9KX2rorZIgbH4CELxSDa6+f/gvCrH4M4cs=
Subject key identifier: 9E:C8:1E:A7:17:7A:7E:81:D9:C4:A7:B1:32:3D:29:4C:7E:AF:E2:F5
Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
Certificate issuer: /CN=5035205c3d01713f9d8b5b00e3539619b2335232
Certificate serial: 0194C3BE469749C167879C2F224B93735E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
Manifest number: 0BF7
Signing time: Sat 01 Feb 2025 23:00:14 +0000
Manifest this update: Sat 01 Feb 2025 23:00:14 +0000
Manifest next update: Sun 02 Feb 2025 23:00:14 +0000
Files and hashes: 1: J1PA5zhc5yqV3-JBl0JRvNFdZ4Q.roa (hash: FL+ey6+/QlF2eMruVQ9t4rwcUImoiKltUkjApQ8aP7k=)
2: UDUgXD0BcT-di1sA41OWGbIzUjI.crl (hash: ml0ANt3zVp8k0iVdleWR0lOjpRyHSaq/YMQqV0aTH+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:46:97:49:c1:67:87:9c:2f:22:4b:93:73:5e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232
Validity
Not Before: Feb 1 23:00:14 2025 GMT
Not After : Feb 2 23:00:14 2025 GMT
Subject: CN=9ec81ea7177a7e81d9c4a7b1323d294c7eafe2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:c6:8c:4c:eb:99:7c:0b:c7:d9:2a:75:c5:
5e:ef:2b:ba:23:8f:99:b9:00:d2:5b:72:ab:b1:23:
6b:10:5e:bf:02:66:6e:ba:5b:e6:bb:56:e1:bd:37:
6b:e5:77:b1:98:d4:6d:bd:03:1c:ec:e9:19:e8:97:
7e:bc:b3:6b:35:0c:52:db:9e:92:e6:cb:fd:3a:54:
b5:78:2b:9d:e7:9d:2c:dd:2e:6e:36:00:ef:92:2f:
a3:c7:ec:90:de:a7:31:b5:31:6f:98:38:db:23:91:
d5:20:fd:ab:5f:67:05:4a:3d:38:d6:6b:cd:63:58:
aa:15:4e:c4:58:71:5d:ad:b2:06:5a:b2:ff:89:8a:
2e:78:42:ff:55:82:97:18:fa:eb:fd:f7:f1:03:47:
b6:b8:2a:32:79:36:30:76:96:13:d1:f6:ae:b1:54:
b1:cb:87:42:83:60:fa:25:6b:de:37:7c:12:87:02:
c3:14:f6:e4:9c:28:a7:6b:2e:7b:88:be:53:8d:6f:
f4:a1:c3:01:36:09:89:07:69:d5:31:aa:8c:12:ca:
86:c7:a8:65:bf:6f:bc:7b:2f:6a:56:bd:9b:90:02:
7f:7b:c0:8f:1c:1d:ed:ec:4d:04:36:19:e2:cf:70:
a7:4f:f5:48:e9:10:b0:c4:b6:92:64:bc:9d:f7:84:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:1E:A7:17:7A:7E:81:D9:C4:A7:B1:32:3D:29:4C:7E:AF:E2:F5
X509v3 Authority Key Identifier:
keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ef:06:71:4a:a3:73:d5:94:04:9a:e1:f7:04:59:5b:35:87:
f8:3c:db:d2:7d:c7:39:48:03:34:05:a3:8a:ea:e0:cc:2b:d7:
20:4c:8e:81:22:56:5d:1d:43:a5:8c:e9:b9:64:ce:29:f1:62:
74:da:bb:d2:7d:9c:fd:dc:fe:df:96:6e:cc:2c:fd:02:f8:d3:
bb:86:12:d5:c9:4c:5c:31:78:14:81:b2:8b:80:46:4a:ff:cb:
ef:35:4a:af:20:13:c6:b4:c1:9a:b2:21:99:3e:fe:52:c6:7f:
98:a5:20:82:e8:69:15:1e:10:09:5e:e9:00:5f:17:81:85:22:
64:d6:f4:67:b4:b9:c6:20:cf:1d:a4:dc:4a:dd:5c:45:9a:a4:
fb:a9:cb:a2:44:c7:08:a0:1d:31:1f:be:18:79:a9:e1:dc:74:
b1:a0:2a:6a:dd:67:3a:a0:85:bc:c3:bd:da:e9:45:96:e5:c5:
a5:d9:31:74:5d:dd:f1:6b:ef:63:3c:d8:d3:7d:e0:64:6f:f7:
33:cf:a5:46:47:df:e6:74:57:75:d1:18:ba:c8:75:dd:ee:ee:
75:c6:69:5c:3b:eb:e6:93:b1:15:40:d1:c9:ee:70:32:72:5f:
7b:25:24:04:13:c4:b7:9a:a7:ea:7c:f5:d6:57:f8:83:65:5a:
6b:6c:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:39 2025 by rpki-client