Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
File: uHLaD5xsVoaj257hJKmQQrCogtE.mft (raw, json)
Hash identifier: Xtd1qTf6N0w/3XneYueTHwV+1QTooLqHauNavbqBYao=
Subject key identifier: F2:14:18:D0:3C:87:CF:1A:03:9A:F0:0E:30:44:4D:AF:86:D9:C4:2A
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial: 019511A2BAA5C836285B13E46BE4874D3F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 02:00:32 +0000
Manifest this update: Mon 17 Feb 2025 02:00:32 +0000
Manifest next update: Tue 18 Feb 2025 02:00:32 +0000
Files and hashes: 1: GwSclZbmW8WnUrygOTuyHlhOctc.roa (hash: 90yBE3rANCosAdjpMcBIDjsdlrAf7rrR2qzNpEkH8d8=)
2: RfhpUZchJkPP_5lxJHpNkmuGgNY.roa (hash: RyK9ORXOIgQu7p+VQmGJ1kdgaVVGVyFljq/xoyhLEM0=)
3: XK_-DoYkAq0FQtHBeHEZBiwTbtU.roa (hash: oLiyfMEZ+8NuCZuPjPWFi0zBy3xSJ1joH9/Uajj7btQ=)
4: uHLaD5xsVoaj257hJKmQQrCogtE.crl (hash: KxjH/cSgYv0YDYthOOhtchCybe6c+O/woOWye60xxL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ba:a5:c8:36:28:5b:13:e4:6b:e4:87:4d:3f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Validity
Not Before: Feb 17 02:00:32 2025 GMT
Not After : Feb 18 02:00:32 2025 GMT
Subject: CN=f21418d03c87cf1a039af00e30444daf86d9c42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:7e:cf:7c:1f:8e:44:3f:44:79:c0:c3:f4:
2a:dc:70:88:ab:62:aa:f0:4a:33:25:fc:10:fd:f7:
aa:19:13:cd:ba:10:2d:39:7c:a6:26:1b:e4:72:56:
61:87:39:55:38:b6:d8:6a:a3:3d:f8:af:2b:ac:9a:
65:1d:4a:28:32:59:86:b0:4b:e2:5b:9e:47:56:57:
55:48:86:0a:da:c9:7f:d8:ca:23:a5:d2:8c:0d:34:
f8:0b:fc:9b:7c:fc:5b:c7:1d:17:d4:f5:3d:79:9a:
bb:e0:ef:79:07:1e:7e:c6:d3:c7:46:bb:2f:dc:df:
70:6f:61:0a:a8:1a:dd:ba:5e:14:5f:47:1e:21:aa:
ea:de:c0:93:2f:72:fe:79:51:b4:fd:cf:6b:32:58:
2e:d0:1a:73:75:f2:46:11:02:fe:f2:d4:35:6b:2c:
fb:df:5c:9c:b7:d6:09:16:21:35:e3:1f:d1:19:1a:
d5:a3:66:ea:b6:b7:19:e5:54:0a:5a:41:d1:8a:7c:
fb:02:c2:19:bf:34:96:3d:0f:5b:82:11:d0:ac:c8:
5a:8f:d8:af:1f:8b:d3:7d:73:44:f3:d6:26:5d:a0:
04:e9:e8:29:07:6c:cb:27:a5:b0:41:1c:72:ca:6d:
ec:8b:86:39:ef:07:aa:57:e1:4f:ce:89:16:04:41:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:14:18:D0:3C:87:CF:1A:03:9A:F0:0E:30:44:4D:AF:86:D9:C4:2A
X509v3 Authority Key Identifier:
keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:29:6b:ec:4b:7d:41:75:70:e9:66:8a:69:e4:25:99:6f:46:
49:3a:64:07:e6:c9:7d:c3:e2:3c:a6:3e:d4:f2:30:02:78:03:
df:3d:20:a9:39:f0:4c:0e:61:88:3c:36:a6:b7:af:a9:70:7a:
60:9f:a2:53:84:d5:cc:06:ea:52:84:91:3c:ab:6b:c7:79:47:
63:bb:3e:39:f1:77:8b:19:ab:c9:e5:82:ab:f4:e1:49:7b:21:
b9:09:0a:ec:c3:e3:16:15:58:c1:6d:01:d8:a4:34:55:c2:a2:
f9:e4:42:fb:53:7d:46:dc:8b:60:43:37:90:a0:3b:12:e1:d5:
1e:2d:24:26:a3:c7:6a:f8:a9:a8:3b:5d:dd:9b:9f:30:5a:2f:
f5:7e:ec:8d:6d:49:62:a4:42:78:c0:97:33:69:a5:b5:9a:03:
e0:77:44:77:e2:c8:72:a8:e3:d2:d6:b4:6e:a3:cf:fc:bf:d9:
70:bb:f5:bc:cf:23:a8:bd:d6:d0:f9:de:d4:41:8c:2c:f7:13:
28:3d:54:ca:d2:0c:ed:33:e3:65:50:72:9b:72:54:ad:d3:32:
d4:f8:1e:f1:af:d2:0c:f9:8b:a3:09:cd:75:d0:f2:4d:6f:df:
9d:47:05:14:d8:9e:37:87:fb:90:b1:7e:de:ca:44:d9:3a:75:
32:65:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:38 2025 by rpki-client