Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
File: uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json)
Hash identifier: 7jwP0zCiw10aYsemh9ZAoUGDXIGZGne9MKUgUpoeEx4=
Subject key identifier: E4:25:08:39:8C:9A:FC:57:D8:3E:31:DB:B1:82:FC:06:22:0E:D2:C1
Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
Certificate issuer: /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Certificate serial: 019510FE2CE21D66A9793F8E273992DA1336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
Manifest number: 086F
Signing time: Sun 16 Feb 2025 23:00:47 +0000
Manifest this update: Sun 16 Feb 2025 23:00:47 +0000
Manifest next update: Mon 17 Feb 2025 23:00:47 +0000
Files and hashes: 1: _M8jdVXBLepBqO_3Zez_e6x2zw4.roa (hash: eZyfLyYE2Xw4ZTr06KMTpykro4FTlkDr9TejnMS2e4E=)
2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: j+VwMYpwF7QhUlWvxU7vgnGSjUVH5c35Epn/56d7XJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:2c:e2:1d:66:a9:79:3f:8e:27:39:92:da:13:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Validity
Not Before: Feb 16 23:00:47 2025 GMT
Not After : Feb 17 23:00:47 2025 GMT
Subject: CN=e42508398c9afc57d83e31dbb182fc06220ed2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:e4:ca:0d:89:64:6d:2b:92:32:42:71:65:
be:15:40:1e:5f:32:e7:67:c2:20:4e:76:f9:e6:94:
3b:dc:24:e5:3c:ff:20:06:b5:3b:e5:f4:37:30:c9:
5a:b6:ff:96:59:56:33:e9:41:36:d4:66:8f:47:39:
1c:ce:5b:fd:35:1c:9d:47:23:f9:2d:c2:f9:ef:ec:
81:6c:67:26:e9:c3:61:fc:ed:ee:1d:50:19:de:82:
a8:10:b1:b1:aa:4b:09:72:28:af:f0:23:90:71:e3:
c5:46:fe:84:b3:ed:22:ff:0f:e1:7b:72:6c:6c:e4:
93:b9:1c:ab:99:d5:5a:00:45:8a:cb:9a:a0:ac:c8:
b7:a9:2c:60:02:82:c6:5f:94:25:a8:ac:4f:4e:2f:
9a:3e:90:89:4b:e5:13:d6:8a:c0:7f:32:55:63:b9:
1d:42:aa:d5:3c:96:3f:15:fe:a2:2d:0c:26:5a:bb:
97:fa:8b:fc:52:fe:7e:a7:5f:e8:ce:cb:ba:50:55:
ee:eb:69:9d:af:88:ef:f0:29:b8:6d:f4:58:b4:39:
93:fb:3d:da:ab:0a:1d:1a:38:51:a8:81:0b:34:72:
63:0e:cc:c5:4f:f3:9d:07:5f:91:1a:c3:31:92:4c:
23:e2:3a:a0:dc:33:bd:85:c6:8c:83:ca:69:1c:4c:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:25:08:39:8C:9A:FC:57:D8:3E:31:DB:B1:82:FC:06:22:0E:D2:C1
X509v3 Authority Key Identifier:
keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:61:a0:2c:ae:fe:a5:a5:ab:c6:65:91:fe:08:c9:25:8f:06:
59:be:2c:eb:92:15:be:e7:96:37:4e:db:1d:93:49:ce:bb:aa:
a2:e7:c9:a7:4b:db:8d:98:73:b6:51:1e:79:92:b8:35:00:4d:
b0:00:e9:a0:e1:b4:d5:74:1f:24:d0:90:dc:7c:47:0e:51:eb:
71:53:76:6a:86:c7:f7:bd:36:c4:74:a6:d9:e7:fb:bc:a9:9c:
bb:23:01:32:0e:b9:0a:45:07:fa:bb:83:ed:b3:c3:74:80:d4:
7c:e7:02:cd:6a:b3:6b:ff:4a:69:a3:d0:9a:c9:45:18:fc:5e:
98:4b:25:96:32:37:0f:08:2e:0d:3c:be:d9:19:cf:e6:32:43:
b7:36:64:01:ca:f6:75:06:ff:88:52:ed:79:b9:cd:6e:1b:be:
3f:89:49:c5:94:9b:1f:e5:b7:6a:77:04:33:bd:6d:d7:35:ee:
80:09:cd:7e:8d:44:1c:fb:5b:e0:0f:4b:03:28:4f:8e:f9:5b:
b8:68:27:d0:10:e7:ea:59:8b:82:9c:4d:14:be:73:8f:3c:8f:
2c:9e:79:98:cc:ba:d4:25:cf:80:08:b5:13:80:41:0d:fd:a2:
6f:0d:af:48:ef:0e:2c:76:40:8d:0e:d6:e3:2a:fb:76:53:14:
cc:f5:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:02 2025 by rpki-client