Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: o+zRHZgF39MUagGsNMLZ/mcqeigTQ57TyepCjSmTIYY=
Subject key identifier: E2:7A:31:9F:A6:75:19:90:ED:A9:AA:89:60:0E:06:78:DD:02:C0:B4
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 0194C4634EC4508F849E3201F637811B5B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 77
Signing time: Sun 02 Feb 2025 02:00:30 +0000
Manifest this update: Sun 02 Feb 2025 02:00:30 +0000
Manifest next update: Mon 03 Feb 2025 02:00:30 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: tB3n2n9yChl7T91lL+FsAHbbp5MkomBJ/VXjTmWwfkI=)
2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:4e:c4:50:8f:84:9e:32:01:f6:37:81:1b:5b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Feb 2 02:00:30 2025 GMT
Not After : Feb 3 02:00:30 2025 GMT
Subject: CN=e27a319fa6751990eda9aa89600e0678dd02c0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:69:12:53:40:36:aa:85:0a:e2:22:68:7c:
7f:1b:bb:1d:5c:e6:76:0c:8d:c0:3f:dd:ac:82:04:
35:e9:d1:5b:25:8c:8e:70:de:02:9c:76:ad:72:b6:
24:3e:3e:27:d1:00:cb:d3:41:cb:10:38:dc:d5:05:
05:48:b0:1f:43:a4:15:76:4a:91:7a:02:06:51:00:
c7:f7:7a:a7:58:5a:9a:9e:71:3d:53:5f:3c:5c:b0:
e3:cc:50:e4:72:f3:b8:be:c7:4a:ab:33:94:e2:87:
ff:9f:63:2e:17:7b:e3:a2:16:56:81:d0:20:c1:5f:
11:d4:6b:a7:29:a0:bc:79:ef:de:f8:a6:b9:8b:81:
00:01:93:b7:44:48:4b:c1:7e:df:01:86:ec:34:e0:
28:10:52:68:40:3d:4f:f1:cd:3c:d6:66:c5:05:a8:
1d:54:51:71:d9:04:3c:78:84:dc:1b:7f:9a:3c:d1:
3d:d0:d1:84:1a:6c:cf:f5:ce:0c:55:bc:2b:73:ca:
31:38:80:c2:90:21:3d:30:2b:c2:84:51:bf:33:42:
7e:72:ec:96:34:42:54:a9:06:48:07:03:df:8e:e2:
e3:53:db:67:57:0d:6c:43:9a:f1:11:48:ca:5f:5a:
8e:b7:78:98:82:cd:fe:28:ed:4c:8e:6c:29:6b:58:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7A:31:9F:A6:75:19:90:ED:A9:AA:89:60:0E:06:78:DD:02:C0:B4
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:60:5b:7e:e9:fc:2e:6c:8f:1f:86:ab:c4:6e:3d:9d:58:9c:
57:9a:21:ed:83:43:79:b7:23:17:d1:9d:1a:e1:1a:11:13:4b:
b0:07:3d:81:90:49:d5:70:97:0e:26:78:66:7a:69:db:1a:7e:
59:9c:c6:ab:2d:40:74:38:6c:7b:e7:20:54:9f:7d:58:48:c3:
09:1b:50:60:73:51:f1:0f:cc:ae:57:48:ec:ec:e4:2b:10:43:
00:c7:5f:9e:c6:fb:5d:15:d3:cd:2d:89:66:8c:35:a8:4e:f5:
f5:db:bf:f9:d1:4d:66:3d:a6:97:1e:30:c5:17:39:3a:47:8c:
e1:c7:4a:7f:8f:02:e5:52:7b:93:a0:38:96:02:b7:9e:2a:b8:
a2:3c:54:a9:9f:cb:9d:8b:6c:e8:7a:d8:a2:3f:9d:31:56:ca:
d2:30:b0:60:80:a5:af:be:6f:05:b4:ad:d8:91:8b:cb:dc:e9:
67:41:8d:2f:a8:fe:72:a4:bf:6a:8b:76:1f:89:87:55:ca:b6:
95:b0:70:07:36:a3:32:d0:ca:ef:7d:db:5b:cc:e2:8e:32:70:
15:80:9b:d5:82:0d:40:67:d3:2a:6d:40:6e:a6:fa:7a:48:67:
f8:26:4f:3e:c7:fe:d8:7c:a9:d2:9f:ca:8e:06:8e:ee:8a:de:
ce:c5:51:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:57 2025 by rpki-client