Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: wpjWnfeqDkdcbkcdwLZUcx8eoC6UWi++aNsbaUGkWbA=
Subject key identifier: BE:FB:C4:AA:B1:65:58:0D:82:0A:01:24:75:4A:D8:7E:42:0D:93:23
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 0194BB28F35197E7C198B251E3FBCCD59D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 07:00:10 +0000
Manifest this update: Fri 31 Jan 2025 07:00:10 +0000
Manifest next update: Sat 01 Feb 2025 07:00:10 +0000
Files and hashes: 1: LhDegbR4xFlO6pz_ANDkPzTlFGk.roa (hash: xMGN0Z+cCcbH3arqVxwuW4j6b8JSM83DRHp4H/CfXzQ=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: lgDdq3T4wSE9zjcFBCtu2Ypmm1OquRw+1yYWp3Vsx6Q=)
3: pleHW6nWDcc0xfnD71P7Zj02Qrw.roa (hash: jUunyevGvx7qOlFlsS+9kK0/bbvq3BE2/HQ+8URjUz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:f3:51:97:e7:c1:98:b2:51:e3:fb:cc:d5:9d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Jan 31 07:00:10 2025 GMT
Not After : Feb 1 07:00:10 2025 GMT
Subject: CN=befbc4aab165580d820a0124754ad87e420d9323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:e1:f9:e3:00:df:b2:23:ce:19:1d:00:22:
9d:00:5b:81:2e:1c:71:02:7c:cf:dc:cb:a9:2a:59:
fa:28:09:e6:b1:89:65:d2:68:3e:8d:09:a0:3e:ed:
50:cc:e7:08:bc:f8:0d:cd:9d:fe:a1:97:35:48:b9:
30:d8:9d:b8:00:8c:de:f5:21:42:e8:1f:aa:ed:3b:
38:12:d6:46:0e:8d:ed:f2:cb:08:9c:52:5e:8c:94:
cd:91:23:11:af:09:63:b3:cc:16:c8:ff:dc:08:80:
12:c9:e8:47:e8:65:e4:68:ff:71:60:2a:e4:05:bc:
58:3e:cc:93:c6:41:97:2c:20:ca:b7:cd:ca:b3:c5:
c3:e6:20:4f:f9:6c:11:55:63:dd:85:85:b6:1c:d1:
b9:87:d3:e6:e5:9b:8a:99:3b:38:62:19:dd:13:32:
07:6a:b1:37:aa:3d:87:3c:95:c0:62:b6:12:25:15:
82:82:3d:34:c9:ae:ca:ab:96:a4:75:25:bd:7c:62:
be:a1:77:71:a0:8a:56:9a:c5:e4:a2:38:c3:61:4d:
77:6e:08:c9:7d:12:7f:37:19:7b:41:7b:56:76:19:
8b:a3:30:0c:91:4f:d4:b5:e8:1d:b7:65:ad:8f:b0:
96:f8:f3:e1:97:b0:14:38:e3:28:c3:fd:3b:e3:f1:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FB:C4:AA:B1:65:58:0D:82:0A:01:24:75:4A:D8:7E:42:0D:93:23
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e3:e3:87:a4:fa:e2:57:d4:db:5d:87:9e:a4:0b:08:d5:a2:
ee:e3:73:14:06:ca:b9:d1:56:63:3e:80:b1:07:ef:f9:43:22:
da:a0:29:cf:4b:e6:38:ec:5d:71:ef:a2:95:92:ba:e0:c7:c1:
14:3d:78:7f:b7:9d:7a:46:01:91:6f:7e:c8:ed:b8:e7:43:76:
b2:f2:bb:68:2d:d8:51:ee:7b:66:4a:2a:be:fa:cf:73:74:ae:
49:48:22:ed:ec:4e:9e:85:e6:00:01:54:2c:8c:27:a4:e0:1a:
cd:f3:0a:90:a6:ed:ce:f4:f0:1a:43:c7:05:60:ec:42:67:7d:
32:b7:ad:fa:48:04:c3:b3:26:95:51:82:25:6a:9f:1f:4f:d8:
be:b7:e4:40:85:9c:18:9b:5f:27:c2:30:1f:56:89:a0:a3:86:
e7:91:15:d2:66:71:00:61:e5:92:5b:4b:02:3e:c0:76:4a:14:
3a:b9:e5:3c:40:43:32:f8:e6:03:71:a5:d3:75:13:a7:5b:4e:
05:31:b9:c7:d9:f8:ca:86:46:9e:e4:66:ad:9a:8c:c7:40:31:
c6:cb:06:69:fa:05:27:34:36:db:97:93:b7:8e:8b:c9:77:b6:
5c:04:58:64:59:43:d8:a3:89:5d:5c:33:3b:a0:19:be:86:0c:
79:0e:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:08 2025 by rpki-client on console-fra.rpki-client.org