Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
File: uUZ8BbpC7h85pkpT4dA0Azbl48M.mft (raw, json)
Hash identifier: I4gvMNPeyJj5hc64Gz7SGCnuyOIRBhBt3uzWPhAZYlM=
Subject key identifier: E6:5B:63:A8:30:2E:8C:E6:9D:3A:58:CA:02:F6:7D:2E:FE:07:F4:C0
Authority key identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
Certificate issuer: /CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Certificate serial: 0194C4D0D194DA36644C47A7F40C06F0BC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
Manifest number: 142C
Signing time: Sun 02 Feb 2025 04:00:06 +0000
Manifest this update: Sun 02 Feb 2025 04:00:06 +0000
Manifest next update: Mon 03 Feb 2025 04:00:06 +0000
Files and hashes: 1: uUZ8BbpC7h85pkpT4dA0Azbl48M.crl (hash: 5tmGRJ/R28P6/X2251gOrNDymAZ+0eNuCGxOIM4XA8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d0:d1:94:da:36:64:4c:47:a7:f4:0c:06:f0:bc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Validity
Not Before: Feb 2 04:00:06 2025 GMT
Not After : Feb 3 04:00:06 2025 GMT
Subject: CN=e65b63a8302e8ce69d3a58ca02f67d2efe07f4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:e3:35:f2:c5:08:7b:d8:bf:05:c3:a1:fa:
6f:d6:b2:3b:27:84:88:e9:e5:91:aa:66:fc:9a:46:
12:ec:c7:72:74:95:7c:54:54:d6:f5:6f:a2:57:e5:
f3:91:c7:cb:e4:85:5a:d0:a7:4a:cb:aa:be:e4:bd:
06:bb:5e:13:b8:49:91:21:9b:b9:5a:12:42:93:16:
3a:5d:65:13:b8:98:8c:b0:eb:d6:a7:25:3b:a0:ae:
d2:81:8a:4a:a3:cc:bb:b8:08:e2:55:7d:b4:d3:93:
76:11:51:a1:e1:35:8b:76:a4:8e:e8:d1:5b:46:fe:
99:ab:45:fa:e1:97:72:d7:e9:02:45:d6:0d:6c:89:
a3:fc:29:bd:24:3c:00:d8:ac:c1:f7:0f:a8:86:46:
4e:ba:69:3a:41:b5:ca:11:dd:b6:94:f9:fb:8b:bc:
76:c0:18:a1:b9:63:bb:2c:43:c2:84:93:77:07:4c:
a2:85:e6:d0:83:44:2a:b0:a2:b7:c4:77:49:6d:27:
f5:f2:5b:cc:26:29:17:3c:f7:51:e8:8f:cf:23:b1:
0b:aa:50:7b:03:b8:61:31:d6:fa:3f:f6:77:03:95:
d5:a7:f0:54:5f:0e:92:31:c0:4d:26:7f:93:88:90:
e1:9f:d0:68:b0:8d:63:32:1b:28:69:70:b9:56:de:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5B:63:A8:30:2E:8C:E6:9D:3A:58:CA:02:F6:7D:2E:FE:07:F4:C0
X509v3 Authority Key Identifier:
keyid:B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3b:d6:63:c7:45:11:3e:2e:4d:e6:01:08:73:b6:b4:f6:df:
d2:59:ca:bf:6c:c3:fc:e1:d9:12:19:77:b8:b5:31:03:ea:21:
53:be:67:d8:b0:95:50:ce:f0:c2:98:4b:ca:ef:b8:d5:d4:2a:
9f:da:20:7d:e3:66:45:ec:77:f1:ed:8d:db:4c:6c:9d:95:e3:
88:47:c1:2f:16:da:f5:40:95:9f:53:80:a5:fa:04:f3:b8:20:
34:13:21:63:fc:9b:0b:e7:58:75:99:8e:97:35:f0:a1:8a:ac:
d8:9a:f8:9d:0b:f9:27:25:0f:da:8a:49:2b:65:fc:7f:6c:91:
3e:12:41:a1:d8:36:9f:f6:18:71:b5:e6:98:e0:4f:15:30:58:
44:0d:75:98:de:25:02:bd:69:d1:00:e0:a5:ab:ed:3e:90:12:
bb:cb:2a:f0:a6:69:de:a4:d0:50:d4:ec:e4:8b:fa:6e:2d:07:
8a:c8:9a:06:20:1c:f4:04:04:67:b9:25:2f:25:d6:59:bc:9f:
27:00:65:86:22:ab:f4:0e:da:28:fa:1e:a4:28:88:19:52:1c:
94:01:a7:ad:4f:51:b2:0c:ed:7d:f8:c3:72:52:b4:c8:eb:1d:
db:9c:1f:1b:ab:e9:01:b2:a1:de:fe:c0:08:14:fa:53:f6:e2:
dc:a7:b6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:42:54 2025 by rpki-client