Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
File: UPLWshZg-tH2Di350L18bM-VwxE.mft (raw, json)
Hash identifier: ZJ08gQzpsYM+TUBzK7kfUDQbEHbDbb3Dli3hmSu9694=
Subject key identifier: A5:C7:0D:FC:FB:95:E0:2C:71:79:E3:EF:F2:13:38:D4:B7:8E:65:B8
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial: 0194C5081B46BFE5B3731D86B89E606B4255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
Manifest number: 1435
Signing time: Sun 02 Feb 2025 05:00:30 +0000
Manifest this update: Sun 02 Feb 2025 05:00:30 +0000
Manifest next update: Mon 03 Feb 2025 05:00:30 +0000
Files and hashes: 1: UPLWshZg-tH2Di350L18bM-VwxE.crl (hash: CmguJb002Ti1zW5KTvJwDin+Z1vg6pbzJtzOn4ZFoYQ=)
2: jj41_vdc1pJ7_jJ7Qj3huwsGvCw.roa (hash: kWywwuZ3gFN5QXplJTXTCIOtPpLw0Ezkefc6voJQkFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:1b:46:bf:e5:b3:73:1d:86:b8:9e:60:6b:42:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Validity
Not Before: Feb 2 05:00:30 2025 GMT
Not After : Feb 3 05:00:30 2025 GMT
Subject: CN=a5c70dfcfb95e02c7179e3eff21338d4b78e65b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:13:f7:15:ba:5e:98:2d:b8:e2:80:49:27:
ca:f1:3d:2a:d3:8b:62:77:b0:35:b2:6e:ec:d3:14:
85:43:2c:cc:e4:e8:14:e4:07:ff:fa:ec:7b:cb:20:
69:23:89:52:58:01:55:3a:d3:ad:5d:6e:16:cd:6a:
ed:41:eb:66:9e:19:c6:cd:2f:b8:02:b4:9a:96:b5:
b4:aa:af:56:10:5e:08:92:ea:f2:ac:d8:0c:03:74:
40:69:f4:c9:35:b7:7e:fa:c2:93:82:ee:b2:d9:30:
05:4d:18:30:7a:30:cd:c8:95:ce:2a:0d:a7:63:f7:
9a:10:c9:56:b4:1f:66:5b:c4:32:06:58:d7:bc:84:
45:7c:e4:83:b8:4f:18:b3:cc:cc:9f:f4:81:42:12:
8b:46:0c:5b:97:ca:5c:f4:1b:f3:c9:33:d7:f9:d7:
35:d1:7c:d2:08:5f:95:f6:31:64:44:e9:db:d1:fa:
ed:1c:fd:ec:5a:76:85:b2:c3:5e:0d:a4:59:f3:67:
a0:fe:5e:00:50:1d:49:b7:a7:c5:0d:ef:df:a0:84:
e4:42:51:46:53:d0:a7:76:36:5f:d1:bf:74:9f:94:
b0:f3:36:e9:29:72:f2:a5:6b:d6:da:81:b3:4d:4f:
89:bb:d7:2d:06:de:99:23:c9:a3:d2:7e:8d:2f:3b:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C7:0D:FC:FB:95:E0:2C:71:79:E3:EF:F2:13:38:D4:B7:8E:65:B8
X509v3 Authority Key Identifier:
keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:17:d4:17:dc:72:0e:2c:24:55:ac:dd:fe:e8:18:67:e5:0d:
fb:0b:16:ce:1b:be:07:a4:03:03:9f:b6:b7:cf:8e:ec:fe:27:
f8:20:ee:39:f1:91:78:49:ee:f6:d1:73:c9:9c:0a:54:29:0f:
27:fb:91:4b:4f:58:5f:61:df:7b:0d:12:4d:c5:79:d1:44:3b:
ba:4f:27:ee:c1:16:3f:9a:10:3b:f4:2f:01:d8:e3:32:66:19:
c0:49:ee:48:f9:4f:1a:36:2b:8f:b1:21:7b:76:77:d8:f4:31:
47:24:f9:7b:f2:8f:2b:eb:f6:52:55:9e:ec:a3:2c:08:39:ec:
32:7a:31:0b:20:5d:d1:29:46:9c:a2:74:fd:bc:22:ce:7a:37:
38:cd:22:b0:20:90:ab:01:32:62:d3:0b:c6:fe:58:64:0e:bf:
4a:bc:52:08:69:ca:9d:df:cf:64:27:3b:d4:01:0b:7d:71:0f:
26:76:bc:63:34:04:f1:7f:a0:2a:ea:df:6d:4d:8c:1f:20:4d:
92:65:0e:7c:5f:2d:e8:f2:04:ab:45:1c:f4:54:8c:08:b6:36:
45:ec:56:16:bf:e1:55:e0:a7:5b:72:0a:c3:e9:25:fa:0b:8a:
b5:90:94:17:76:1c:79:d1:a9:73:9c:df:29:84:50:05:be:06:
a5:56:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:07 2025 by rpki-client