Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File: UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier: mTc2cmkCEr/qTPibVdZRJv4pmFjouqzA2LLVkl0io6I=
Subject key identifier: A0:E2:B4:D4:72:04:FA:F1:61:92:2D:57:66:9F:F2:FD:91:85:FA:2B
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial: 0194C350E59B26A62FC12FD779359BF149FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number: 1430
Signing time: Sat 01 Feb 2025 21:00:46 +0000
Manifest this update: Sat 01 Feb 2025 21:00:46 +0000
Manifest next update: Sun 02 Feb 2025 21:00:46 +0000
Files and hashes: 1: 9m785MXZwp0BQtk_jk4fp9A4qB0.roa (hash: u+8J+4zJtWHS217NkWrzbcfb0E+Zj0l1Wu1mFSLU2lI=)
2: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: A5MhyHyQAs3LnDrfl7WdIion07XZfxVJe59jHFrq1Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:e5:9b:26:a6:2f:c1:2f:d7:79:35:9b:f1:49:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Validity
Not Before: Feb 1 21:00:46 2025 GMT
Not After : Feb 2 21:00:46 2025 GMT
Subject: CN=a0e2b4d47204faf161922d57669ff2fd9185fa2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:f0:5b:5a:82:83:ba:29:a9:08:ed:e0:63:
67:fb:a7:7c:f3:ba:51:a8:04:ba:96:68:be:e1:b9:
ed:82:5c:bf:35:7c:22:68:35:4f:19:19:1f:50:56:
e6:ca:f8:bf:71:d1:c6:80:b5:4b:9a:1b:70:ab:05:
66:a6:d0:45:21:11:18:30:3a:a0:94:e1:d1:ca:da:
6e:a2:04:72:26:e6:b4:30:5f:9c:b5:1f:f3:0d:1c:
9e:70:52:cf:65:fb:74:ea:e5:58:76:ce:23:bc:ee:
19:a9:b2:22:33:47:60:02:09:06:6b:53:b4:a7:e4:
ba:1a:a6:01:bd:b8:88:f9:35:8a:23:bd:d3:0d:f6:
89:19:c8:c8:34:f9:54:29:c3:86:83:7d:a7:85:99:
3a:ec:c8:ef:b4:1a:04:4d:ac:c1:90:17:f4:26:a3:
13:2f:6a:6c:49:33:ec:b8:b1:72:69:0c:05:cb:83:
99:53:91:8a:09:94:7f:84:56:77:06:7f:3e:5c:1e:
df:28:bf:07:11:e4:60:d3:33:8d:03:da:9f:77:1c:
40:c0:c9:f8:28:06:e0:a0:a8:2c:e8:31:a3:18:77:
8c:75:c6:ea:3c:a9:54:8e:98:7e:68:21:cf:a4:e9:
1a:5c:32:54:e5:68:11:d7:83:a7:65:12:1b:e8:60:
7a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E2:B4:D4:72:04:FA:F1:61:92:2D:57:66:9F:F2:FD:91:85:FA:2B
X509v3 Authority Key Identifier:
keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:8b:eb:2b:27:53:46:65:2a:17:52:63:83:a0:3d:1a:22:70:
07:7e:7f:a6:0e:d2:51:cd:cd:c6:b1:54:69:65:09:3d:1e:97:
af:02:da:13:90:d1:bc:f5:3c:f8:4c:8f:21:8e:68:ba:51:86:
fa:fd:6c:63:9a:40:01:c7:63:5c:76:55:a4:10:50:7f:ab:63:
aa:ea:b2:cd:df:79:82:4d:69:a2:3f:96:35:e2:dc:39:a1:a8:
ee:ca:3d:0c:61:d9:4a:f7:66:b4:99:6b:cb:ed:2b:1d:b1:f8:
c4:0d:36:72:8a:e8:39:5e:8e:3a:af:fa:2c:43:ca:cc:04:aa:
0b:bf:0e:11:e7:42:cf:5c:01:8b:19:9a:a6:41:e0:3d:34:f8:
25:00:8f:3e:d3:0c:0b:6c:94:10:77:53:4b:e2:4e:c6:83:d1:
78:e6:33:76:4b:1d:e9:58:12:fd:fa:84:ae:1f:cc:d7:cc:de:
44:48:ec:6a:f8:1a:01:da:fd:1a:dc:05:c0:11:1c:9e:7a:95:
8f:6f:e2:ee:3c:93:53:9c:89:ef:2b:01:5d:df:3a:c4:08:62:
26:47:06:ba:da:4e:64:e4:c4:32:e7:16:0c:0f:42:98:92:23:
cd:91:11:fd:4e:60:ae:d8:35:49:b7:8c:64:ca:12:25:ea:f2:
e5:10:b6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:56 2025 by rpki-client