Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
File: UhqgJHWNjRBOEXnFUDmBZjav4pg.mft (raw, json)
Hash identifier: rWqMC/YT2nSoOP/G90gkwgj0aDG0fqg6IUiNEC/l+OU=
Subject key identifier: 76:8D:68:11:1E:80:BF:A9:E3:C0:81:91:6D:BA:ED:B8:68:3F:EF:6E
Authority key identifier: 52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
Certificate issuer: /CN=521aa024758d8d104e1179c55039816636afe298
Certificate serial: 0194BB970D20B66C310CAE0E158FEE4EB49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 09:00:26 +0000
Manifest this update: Fri 31 Jan 2025 09:00:26 +0000
Manifest next update: Sat 01 Feb 2025 09:00:26 +0000
Files and hashes: 1: UhqgJHWNjRBOEXnFUDmBZjav4pg.crl (hash: AvG3Wy9xchhpOkEcLGLHBi8RAXJJSJAsPfY38/Tecrs=)
2: wzHTUEDPSJ9fu6Go3MzUkAR9gVE.roa (hash: HH9rFvWwfqcHjpbJnsKsdwBfEEqoBLNu0bOt5Pi9+gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:0d:20:b6:6c:31:0c:ae:0e:15:8f:ee:4e:b4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521aa024758d8d104e1179c55039816636afe298
Validity
Not Before: Jan 31 09:00:26 2025 GMT
Not After : Feb 1 09:00:26 2025 GMT
Subject: CN=768d68111e80bfa9e3c081916dbaedb8683fef6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:a4:02:96:df:8b:8b:b5:9d:8e:c1:47:22:
9f:8c:6b:03:7d:59:8b:35:98:0f:f1:90:ba:ea:d8:
a3:e9:33:96:9d:22:00:12:5e:06:5d:3d:59:5d:6e:
e5:0f:17:a9:ce:a3:d6:2b:22:45:fa:28:d2:f1:3c:
03:c1:4f:4f:7f:60:aa:a9:9a:e7:03:e4:ee:95:ce:
36:a0:75:62:1a:b2:a8:4a:77:a1:03:d5:7b:12:2b:
c9:33:df:66:f8:36:2e:98:e4:e1:a2:8c:54:84:8a:
02:01:d4:b2:0f:70:93:d5:e1:6d:a5:89:38:8d:d8:
d1:77:20:6b:df:3e:5d:17:30:8b:a2:72:82:ff:0d:
dd:ae:52:a4:93:2d:56:99:c6:5d:fc:a3:76:46:4b:
47:22:ab:3f:7f:d0:06:77:c1:c6:a7:11:66:de:69:
d4:64:2c:1a:50:c1:8f:8e:2e:b4:17:ed:35:0e:80:
2c:3b:57:5f:03:65:e4:f9:8c:82:12:be:17:d7:b5:
87:4c:da:41:97:36:1a:e6:1f:a1:7f:6e:aa:3a:61:
c4:2f:4e:d3:95:b9:fd:ff:df:5f:e6:90:6c:a4:c2:
4a:eb:ab:8f:bf:a5:e0:63:4c:e1:9a:93:3f:2f:23:
5d:88:25:56:91:41:6e:f2:ec:f9:a5:65:16:70:5f:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8D:68:11:1E:80:BF:A9:E3:C0:81:91:6D:BA:ED:B8:68:3F:EF:6E
X509v3 Authority Key Identifier:
keyid:52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0d:12:9c:ff:02:d0:b4:2e:1d:8d:ee:56:56:8a:ae:53:af:
77:da:b7:cf:5b:c6:6d:76:9a:7b:da:30:30:9e:1f:a1:69:a0:
37:d7:e6:c3:a0:20:67:c4:cf:1f:28:c2:61:0f:ed:1c:d0:46:
fe:f6:1f:ab:f0:51:9d:de:2b:7e:93:95:34:bb:98:4b:4e:0b:
2c:6b:b3:83:46:e6:55:16:88:e0:ef:44:69:d4:91:a0:2f:f5:
0f:ea:42:cf:8c:94:ff:dc:04:1d:6e:7a:f7:2e:e4:9e:e3:4f:
00:72:93:6f:99:43:7e:3c:6a:16:8c:2f:c3:99:83:0a:6f:c6:
7b:26:e8:42:31:2e:85:76:09:23:ae:2a:c6:ad:ee:be:3b:cd:
cc:20:24:92:b5:9a:f1:17:7a:13:56:6d:24:3d:5c:41:5f:ed:
a1:ae:e1:99:77:ee:d9:1f:06:36:93:cc:81:15:1d:fe:67:c8:
8f:c6:af:64:15:d3:d3:bf:70:5e:e4:f0:53:14:63:5f:44:84:
4e:7b:27:f2:10:cb:b1:30:a2:b2:d9:a8:d7:e6:4c:6a:18:a1:
b2:f3:0f:b7:be:f9:47:22:20:16:eb:50:a9:2f:11:83:89:c9:
cd:31:14:59:de:d7:e8:71:95:f4:5d:94:f4:aa:74:4a:25:32:
84:76:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:50 2025 by rpki-client on console-fra.rpki-client.org