Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
File: UJw4zD6qNVb6OaIvMNwbpINv6J8.mft (raw, json)
Hash identifier: GXmmkiV5Lz4fqob0xymzpbkyNxHWk5VkxUa5YGV32mE=
Subject key identifier: 2E:6D:ED:DF:DB:E2:26:AB:DC:9D:0D:9D:8E:22:8B:75:9D:8A:1E:85
Authority key identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
Certificate issuer: /CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Certificate serial: 019510C70A9A129CADA4C1E8522092593982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
Manifest number: 1452
Signing time: Sun 16 Feb 2025 22:00:34 +0000
Manifest this update: Sun 16 Feb 2025 22:00:34 +0000
Manifest next update: Mon 17 Feb 2025 22:00:34 +0000
Files and hashes: 1: UJw4zD6qNVb6OaIvMNwbpINv6J8.crl (hash: 5SEDiI7yt1OB3vE+JZ1cxFGZduzBXxU0LKbc7mB7mys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:0a:9a:12:9c:ad:a4:c1:e8:52:20:92:59:39:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Validity
Not Before: Feb 16 22:00:34 2025 GMT
Not After : Feb 17 22:00:34 2025 GMT
Subject: CN=2e6deddfdbe226abdc9d0d9d8e228b759d8a1e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:39:58:96:ae:b5:2c:8d:fa:8b:25:08:39:
c1:6d:86:e2:35:d8:ca:2b:11:fc:6a:69:ac:47:49:
62:d0:ce:d7:0f:24:67:ea:b0:2e:ca:3e:fc:83:82:
cc:9f:e4:ac:aa:b6:31:6e:a2:1c:13:e2:b3:c2:06:
8e:61:dd:4a:5f:8e:fc:df:fb:ab:a1:4e:4b:11:03:
69:64:35:a5:8b:f6:bb:c2:b7:fa:d1:12:81:df:f4:
26:4e:92:ef:ad:9d:b2:91:f1:20:21:2d:af:e8:fd:
93:d8:71:a1:2f:6b:fa:44:94:93:27:ca:b2:23:c4:
2f:37:f0:55:bd:c6:9d:a1:24:49:21:cc:28:fa:a8:
50:4e:e4:f3:a5:53:b2:61:29:d6:dc:8a:fb:47:1c:
89:2b:5a:b0:a9:dc:fb:33:8d:fb:6d:d0:01:18:e0:
c2:fe:29:2c:4f:e5:fc:c7:93:c3:e9:45:00:ce:d9:
90:f5:4a:bb:53:ad:eb:d5:36:2b:a3:5c:e4:08:ae:
7f:78:22:52:53:8a:b9:b0:e6:b5:43:ee:7a:45:18:
98:3f:63:22:c7:6c:d2:b1:07:85:ae:61:d7:85:08:
09:28:4d:ef:55:6d:b1:18:3e:0e:14:e6:02:d5:2c:
d0:b7:54:6c:ff:3b:c3:ab:e3:d4:15:ea:6a:5e:90:
3a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6D:ED:DF:DB:E2:26:AB:DC:9D:0D:9D:8E:22:8B:75:9D:8A:1E:85
X509v3 Authority Key Identifier:
keyid:50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:60:c5:cf:80:46:a2:48:3e:50:51:3f:7e:e8:2d:99:cf:fe:
56:9b:7e:ea:5d:cf:b1:d0:03:21:db:b8:38:e7:1b:4e:a9:d2:
2c:e6:a3:18:7f:61:9e:f8:06:83:c9:91:fd:fe:bd:9d:d3:62:
4a:8d:a1:df:3a:51:f1:3d:29:54:0a:91:91:81:5a:4d:02:ca:
a7:b4:4f:66:10:30:88:70:c1:0e:48:f8:fe:18:20:2f:51:1d:
d2:18:77:e4:19:59:2d:f0:67:e2:9f:8d:0e:e6:2f:46:f4:a4:
88:cd:7d:40:f1:cb:a2:f3:78:a7:07:98:cf:d2:bc:a3:d2:83:
b6:50:8c:ee:a8:4e:bc:b2:e1:87:4a:f1:9b:65:36:c9:c9:b2:
ef:3d:92:cf:17:0b:5f:a1:bc:e6:c6:c7:75:f0:6b:04:4a:c2:
1e:cc:f6:66:01:a4:50:2b:1c:22:f2:e2:be:6f:9c:c4:41:1c:
87:87:b6:7a:6a:16:d5:fa:d4:e8:14:d6:79:86:d0:ee:59:38:
46:03:28:17:8d:55:38:67:71:c8:6b:b6:bd:bc:fa:a7:25:3c:
ff:23:90:f8:81:38:17:b4:11:01:18:cb:8f:f8:37:df:0a:e5:
c5:c4:cb:72:4e:59:fc:0f:d2:26:91:d5:ac:1f:6a:0e:ad:37:
ae:25:56:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:29 2025 by rpki-client