Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
File: uUZ8BbpC7h85pkpT4dA0Azbl48M.mft (raw, json)
Hash identifier: t74gHNmRBtXlzz5gHx93hhSYB3X45r/XCIzL9LawMvg=
Subject key identifier: 3E:64:98:AF:C1:E9:60:F5:2D:68:47:9C:DE:FE:30:2E:53:15:0D:24
Authority key identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
Certificate issuer: /CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Certificate serial: 0194BB29700EC753BA829DB261B6F2ED96EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 07:00:42 +0000
Manifest this update: Fri 31 Jan 2025 07:00:42 +0000
Manifest next update: Sat 01 Feb 2025 07:00:42 +0000
Files and hashes: 1: uUZ8BbpC7h85pkpT4dA0Azbl48M.crl (hash: rn1UMiCNur5W3ZjAjpQXa9rTxo4GC7JUbkDY1oP6oMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:70:0e:c7:53:ba:82:9d:b2:61:b6:f2:ed:96:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Validity
Not Before: Jan 31 07:00:42 2025 GMT
Not After : Feb 1 07:00:42 2025 GMT
Subject: CN=3e6498afc1e960f52d68479cdefe302e53150d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:f8:68:97:80:fa:0d:e2:5a:ff:bb:44:99:
3d:45:26:d0:99:a3:b1:3f:21:dd:50:46:57:8c:71:
fe:7c:5e:f7:75:88:7b:dd:23:cf:b4:f2:fc:19:5d:
5a:37:75:11:6c:65:78:cc:f9:49:86:6c:58:b4:21:
42:8a:55:58:64:46:71:e9:3f:d0:31:06:90:44:08:
4f:9b:d4:f5:0a:6a:ef:50:02:a6:3c:63:18:29:04:
bb:33:f2:89:01:ce:65:ec:d4:34:0c:be:2a:6f:32:
b7:05:0b:79:01:d9:c9:ec:17:c2:3c:0f:4e:24:06:
68:41:a1:63:4e:cb:8c:a7:84:05:17:62:83:77:5c:
92:04:c1:8d:dd:ca:99:5f:3e:7d:2f:9e:87:85:0a:
b5:f5:5f:5d:76:fc:01:26:db:9f:fc:21:0a:6d:b0:
6a:7e:c9:26:af:ca:26:ca:05:dc:2e:5f:46:cb:61:
43:92:18:8b:22:32:b4:a7:44:3a:b1:ae:7e:d8:d3:
e6:82:3f:a0:4a:df:79:49:4a:ff:e0:83:f0:1c:fb:
7e:b1:ae:7e:7e:fe:3e:40:db:55:e8:83:54:53:ac:
89:94:50:94:a1:c0:e4:aa:71:05:7a:e6:90:01:61:
0a:2b:63:4a:69:e8:c9:14:36:a4:ea:dd:6c:35:0c:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:64:98:AF:C1:E9:60:F5:2D:68:47:9C:DE:FE:30:2E:53:15:0D:24
X509v3 Authority Key Identifier:
keyid:B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:b2:84:9e:89:fd:5a:27:69:0f:28:12:a4:72:06:3f:2c:
a4:35:98:3c:ac:f1:7a:34:aa:b1:c3:6b:d2:8e:10:fe:00:f1:
0f:bf:1d:cf:db:f7:d5:20:c5:a5:43:5a:07:25:e9:d9:7a:0d:
76:6c:78:a0:30:93:b8:32:e4:52:81:f9:da:f2:76:c8:56:76:
0d:15:51:95:6f:54:62:58:b7:9a:1b:bc:68:22:09:f7:f9:33:
8d:e3:f5:d3:63:85:8e:1a:aa:8c:97:dc:36:bf:58:d9:e4:12:
a5:d1:52:32:39:93:f5:90:2d:68:39:fa:48:32:fa:7a:85:ae:
5d:5c:6f:ce:d6:65:e3:31:01:bf:d0:af:6c:1e:fc:f8:c1:e3:
e4:e1:e3:73:70:8e:07:6e:d2:eb:a4:4f:23:33:f2:13:1b:01:
08:0d:59:8e:d5:9a:61:64:da:63:3a:24:06:ad:7a:8f:bd:ad:
87:d9:30:73:5d:6b:9e:4e:d2:7b:2a:51:13:f9:52:a1:be:46:
29:48:29:60:36:bd:73:65:96:fe:19:ea:1e:39:60:ea:12:3d:
ca:98:a7:5e:85:c2:43:97:c3:1e:1a:02:f8:e6:34:d4:18:3c:
c0:c7:c4:ef:4e:21:2b:7a:8a:99:39:15:d7:e4:6b:b3:d9:17:
1e:a9:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:06 2025 by rpki-client on console-fra.rpki-client.org