Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
File: UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft (raw, json)
Hash identifier: c3NB5WvTHY5lneykYtGkSp5kG0V6mAIb3b0wYNdsRF8=
Subject key identifier: 8C:C5:16:2D:D7:6D:0A:31:E4:75:6F:D4:16:04:9F:DE:F6:13:4F:7D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194BC402411C7AA6D420CB122FB4D862A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
Manifest number: 2F21
Signing time: Fri 31 Jan 2025 12:05:06 +0000
Manifest this update: Fri 31 Jan 2025 12:05:06 +0000
Manifest next update: Sat 01 Feb 2025 12:05:06 +0000
Files and hashes: 1: 1-aPUi_d5vCf8feIg2a9dFVsRnOM.roa (hash: PupEsIXHB6rGqEymngMsBPy2Wh8A195/YgvNAUoFwO4=)
2: UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl (hash: l1c/xukrzJwPAroGBKazjOJag5Fgyal1E8AMPOTs+1c=)
3: g7CebBwxbZ0K_kb1AKTk7mDoqEQ.roa (hash: q9q+E45rQnk43JwpyGDh+o0A1GMMjB84M/ow36XmuV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:40:24:11:c7:aa:6d:42:0c:b1:22:fb:4d:86:2a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 31 12:05:06 2025 GMT
Not After : Feb 1 12:05:06 2025 GMT
Subject: CN=8cc5162dd76d0a31e4756fd416049fdef6134f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:57:6e:41:9d:dd:ec:85:0e:f8:39:0a:3f:
aa:6c:8d:68:f0:8e:a5:dc:2d:1c:7c:ca:fc:ab:ac:
62:cb:c5:26:82:02:a1:d6:56:36:0e:4d:96:8a:40:
73:5f:d1:03:4e:66:e7:3e:3a:99:7c:e3:6e:68:e8:
b5:99:28:54:85:03:7c:16:a7:12:36:2f:18:e9:c0:
06:e0:9a:1a:66:e8:b8:69:d2:0f:bd:1f:75:b3:ca:
cb:0b:04:33:82:d8:ac:3e:98:5b:de:f2:0f:3c:f0:
96:ac:8c:bf:0b:4f:86:ce:2d:c5:75:2c:47:23:cc:
ea:6f:f7:6b:00:1f:ab:1e:8a:a1:99:77:a1:2a:8b:
85:bd:00:18:b5:9a:40:c3:44:5a:f6:dc:b9:6f:04:
f0:0b:e3:77:45:df:c9:01:ad:b8:f5:02:9c:67:ad:
02:ef:39:0c:41:8b:8a:1e:08:8f:71:5e:60:63:85:
0a:f8:7e:4a:66:ce:a6:a8:bb:49:0e:db:1f:54:24:
ab:c3:c5:d4:cd:1a:a8:69:28:a0:6a:d7:ee:d0:55:
b6:49:77:5a:8d:16:56:94:6f:b1:32:60:9e:d4:0f:
06:72:25:66:e0:00:04:76:02:00:9a:95:63:0d:47:
d5:97:d5:91:6c:52:f9:5f:38:d7:49:87:fd:a9:4f:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C5:16:2D:D7:6D:0A:31:E4:75:6F:D4:16:04:9F:DE:F6:13:4F:7D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:29:27:8d:16:99:98:7e:f4:a6:ab:b1:dc:37:35:ee:4e:0b:
a1:68:51:1b:3e:95:6a:b4:62:15:98:4b:70:a3:60:0a:26:ae:
91:7d:88:b2:69:21:b6:66:a2:ed:89:30:d0:2a:0f:17:bd:3d:
7c:36:1a:ae:59:52:0a:45:1b:22:3b:3f:69:7e:19:53:86:5d:
7b:3f:74:63:87:0c:3a:cb:86:1d:6a:40:06:5c:a9:56:b7:f3:
fe:76:92:02:5c:f9:83:9c:ee:b5:d3:2f:6f:57:56:49:30:b6:
1b:51:c0:43:6e:a8:3d:26:26:23:60:af:55:48:0e:a8:26:76:
7c:d9:68:71:9c:52:6a:b4:12:6b:76:12:c8:0d:50:50:78:77:
99:ef:ce:5f:40:aa:7c:16:5c:63:86:0a:8a:eb:c6:c6:e7:69:
65:8d:38:0c:61:df:26:80:20:39:48:e0:f6:53:56:75:c1:b3:
81:33:12:ce:26:b7:60:35:f6:25:c5:3a:a7:51:a5:b0:c8:c1:
ed:d5:88:72:54:fb:f4:ae:2d:69:94:01:14:20:29:3a:ac:3c:
58:52:c7:b4:35:55:a1:c6:7a:42:0d:89:2d:5a:b4:1e:81:4a:
4e:6b:e9:04:96:0e:48:31:90:a1:bf:1f:94:38:62:60:17:31:
49:55:02:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:20 2025 by rpki-client on console-fra.rpki-client.org