Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier: 3IxGR9cHstVF4XuJpUPmYy/tbNXRVzGzRrd7l97JLAY=
Subject key identifier: 0A:40:87:0E:17:2A:EE:48:17:D2:8B:8A:99:72:33:8A:7C:B3:0D:48
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 0194C3886120E99D7D4E0EE10ABF4AE051E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number: 0D59
Signing time: Sat 01 Feb 2025 22:01:22 +0000
Manifest this update: Sat 01 Feb 2025 22:01:22 +0000
Manifest next update: Sun 02 Feb 2025 22:01:22 +0000
Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: x5Vc8xM6aENQKou4jWIgHCvIvyAe7q2D98VtdA2a+oQ=)
2: wcLPDXwZhknfwFVrmzWdaV09zJc.roa (hash: KCyUIbiI7WKGmxPwkUMQCU2Fnp9j24d2NyqBltI+vd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:61:20:e9:9d:7d:4e:0e:e1:0a:bf:4a:e0:51:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Feb 1 22:01:22 2025 GMT
Not After : Feb 2 22:01:22 2025 GMT
Subject: CN=0a40870e172aee4817d28b8a9972338a7cb30d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:8a:27:3f:20:e8:0a:6a:df:fd:a7:85:b5:
1d:0c:40:2e:5a:91:1d:36:da:e6:7e:b2:78:59:c3:
22:ab:92:fe:4b:95:81:82:79:b7:6c:e4:c7:7e:fc:
55:02:e7:6b:57:c6:6a:9d:13:89:40:3c:9c:31:21:
26:38:25:d3:c5:77:d4:3d:dd:94:63:b8:53:c8:44:
8a:fe:4c:72:9c:71:78:a9:17:7e:cf:e2:b6:b6:34:
bc:e8:fb:19:78:d3:75:36:9e:ea:42:11:55:c3:4e:
6e:07:d6:ba:3e:eb:50:c6:0e:e1:68:85:66:0b:ed:
5b:8e:56:1a:b7:f1:a8:ab:5f:a8:f9:46:70:76:73:
04:f1:ed:9b:86:a8:75:a8:0f:a0:46:0d:28:a8:a3:
b1:66:e8:78:37:fd:3f:7c:b8:62:35:f4:19:c0:81:
44:e4:79:1c:1f:80:c4:b6:d1:cc:fd:bc:ff:8f:20:
0c:5f:95:9c:38:66:8d:46:e0:27:59:0c:2b:c5:74:
76:c1:e1:4b:d9:7d:fc:42:03:c4:05:6e:7f:ae:8c:
fe:a6:59:52:1c:d8:fb:39:f6:77:ee:58:01:99:eb:
46:eb:a9:5b:e5:18:a7:4c:15:e8:2f:56:3e:d2:20:
49:ef:b2:f3:b7:55:f3:52:9b:a1:51:86:6e:99:a2:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:40:87:0E:17:2A:EE:48:17:D2:8B:8A:99:72:33:8A:7C:B3:0D:48
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d7:57:a5:d5:e7:2c:47:03:06:5b:e9:42:6d:40:85:26:4f:
56:b8:d3:48:70:49:fc:1c:e9:4d:63:55:cc:e0:4a:6c:33:41:
a6:88:87:10:37:a0:e8:56:12:55:45:c2:cc:81:63:b5:b8:28:
d6:eb:cd:e0:5f:1c:8b:bb:4b:8d:cc:cf:c0:ac:2c:e2:72:b2:
52:69:5b:71:61:3b:d1:e1:9c:04:cb:9c:c8:fb:db:3f:76:e9:
78:51:72:19:b2:f9:84:87:46:fe:47:3c:a1:59:e4:e3:6b:bc:
e5:f5:94:fa:18:fd:f3:49:9f:f0:e3:d6:44:fa:ec:59:89:26:
20:b3:fc:5e:a8:dd:ed:18:22:8d:87:eb:af:72:d6:5c:77:0b:
e9:dc:95:0a:39:df:6a:b5:52:8c:5b:88:07:01:dc:a1:ca:a5:
cb:65:20:ff:4e:c4:01:e4:82:cb:99:f5:cc:21:62:24:a5:a1:
da:e0:11:a5:82:49:81:2a:81:44:02:80:62:31:3c:22:69:1f:
2a:ca:09:da:62:3a:4c:85:67:92:c1:96:90:80:15:6f:ae:57:
37:76:fe:b0:df:39:73:0f:2d:6b:50:b0:1b:b1:0e:a6:bc:6c:
12:bd:94:61:43:66:10:a6:09:7d:cb:65:f2:f2:67:f9:fc:4a:
56:0a:f5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:01 2025 by rpki-client