Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
File: UnrRl4bdVLNaS5atP7xXkyeORHQ.mft (raw, json)
Hash identifier: AhNvBXlB30F3LH7gh8/Uu5tf0dx5mqaZcxpUlTpDmlM=
Subject key identifier: 5F:3D:94:AD:40:A5:E3:3D:32:BD:B4:AE:5A:25:96:EC:E7:2C:FC:EF
Authority key identifier: 52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
Certificate issuer: /CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Certificate serial: 019511D9BDFCBF6777E0BD05CDDC47C31DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
Manifest number: 12F3
Signing time: Mon 17 Feb 2025 03:00:37 +0000
Manifest this update: Mon 17 Feb 2025 03:00:37 +0000
Manifest next update: Tue 18 Feb 2025 03:00:37 +0000
Files and hashes: 1: KSlt8Y4QfsPuB2e5q-MUkgg1aqo.roa (hash: AJw2YCH/VuTSNYo91kTytnKXtEZrdqVQkspms9NQoho=)
2: UnrRl4bdVLNaS5atP7xXkyeORHQ.crl (hash: y30rPNlWGInVLZO3Kvg7n1JpV294swqoI6HI5cS1vp0=)
3: bZHncdmF5KrWNlZWpNRpsaE6nbQ.roa (hash: 7MucZNPxoy6xDKGVNK0X6Z3pxNOoq8ocl4uzKyv0GQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:bd:fc:bf:67:77:e0:bd:05:cd:dc:47:c3:1d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Validity
Not Before: Feb 17 03:00:37 2025 GMT
Not After : Feb 18 03:00:37 2025 GMT
Subject: CN=5f3d94ad40a5e33d32bdb4ae5a2596ece72cfcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:3c:f7:fe:d7:3b:35:23:59:32:e2:27:cf:
cf:0b:77:2b:78:c2:63:c0:75:ba:75:0a:ed:c1:2e:
78:32:61:70:48:6a:25:a5:3c:55:f9:23:83:01:0b:
58:a1:d4:59:69:b1:70:45:0b:8b:b7:04:72:56:ad:
3d:cb:40:af:f0:64:f0:33:5c:7c:5a:cb:45:f8:df:
59:22:85:10:97:60:c0:d8:32:ba:83:f5:fb:88:99:
19:28:fc:50:26:5b:dc:56:9f:57:19:8c:bb:c0:0c:
6b:01:07:64:b6:7e:6f:8f:14:c6:28:a8:3f:ae:89:
66:31:0f:3b:ec:b8:35:26:18:e2:64:05:9b:07:d6:
26:74:71:1b:d7:e9:f6:39:17:71:a4:a3:10:6e:c3:
5d:03:ca:ac:5c:2b:f6:d8:7f:5e:ce:17:13:14:2e:
54:93:f3:bb:8d:69:fd:02:c2:04:0b:07:9f:30:7c:
00:53:b3:82:15:88:2a:3c:17:84:1d:51:81:23:a9:
68:e9:3e:36:b5:a3:21:0c:71:2d:4e:53:cb:58:84:
6d:1e:8b:b8:69:1d:a8:b4:93:b0:61:e1:23:39:28:
5d:7f:09:0a:be:ea:65:8e:fa:3e:fe:28:4d:f1:b2:
8f:91:0f:ba:30:ef:44:6d:5b:bf:d2:ea:0c:e1:e6:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3D:94:AD:40:A5:E3:3D:32:BD:B4:AE:5A:25:96:EC:E7:2C:FC:EF
X509v3 Authority Key Identifier:
keyid:52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:35:95:e7:a3:e9:9b:fd:7e:ea:7e:49:f3:b5:8d:1c:98:ec:
0b:1c:a0:eb:52:2f:76:37:63:cb:fd:6a:cb:c6:da:3b:c0:aa:
90:9f:95:63:00:a3:43:a3:15:8b:e9:21:58:4c:26:14:a0:e4:
ef:a6:a3:ce:92:87:a1:75:51:be:a2:6d:99:c2:3e:98:a5:a6:
8d:b4:69:07:30:1e:ed:af:17:d2:26:65:d4:f2:27:9b:31:c5:
64:87:c2:4b:d0:61:c8:09:13:3b:1f:4c:d0:82:d3:f6:72:f6:
d8:d2:03:1e:63:10:c5:08:b9:b2:8d:67:47:07:53:ee:f3:26:
11:24:de:ee:97:fe:a9:a6:85:74:52:22:f5:23:80:5b:ee:3d:
e0:5b:c9:52:7b:18:fb:cd:55:8d:bf:ae:c8:47:35:5d:a3:17:
3b:35:ff:83:e3:e5:4b:22:99:83:f3:95:1d:12:28:64:1c:7e:
0c:f9:75:ae:32:de:d5:c8:92:a2:5a:d3:41:6c:79:f5:27:73:
f4:54:27:49:8c:fd:2f:d2:52:80:8d:5c:be:b4:77:19:c8:c6:
2e:d4:72:81:c8:95:a8:46:84:5b:1b:cb:cd:ec:64:a9:c2:79:
15:20:db:53:0f:45:fc:4c:1d:98:99:32:57:39:2e:3d:ea:c8:
f4:d7:d3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:02 2025 by rpki-client