Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
File: UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft (raw, json)
Hash identifier: kSDU+MWLZ+DrcN6ds2ML6IKcvJCA6oxisr83trRZk4Y=
Subject key identifier: BB:A8:5A:0A:28:B7:A6:67:90:74:9F:C2:4D:6B:1A:19:51:07:6E:6D
Authority key identifier: 52:F2:5B:D0:5A:C1:48:85:1F:A2:A4:63:AD:0D:E0:70:81:84:04:F7
Certificate issuer: /CN=52f25bd05ac148851fa2a463ad0de070818404f7
Certificate serial: 01964F6D13FC056B63E45B6D250B66FBD196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
Manifest number: 0925
Signing time: Sat 19 Apr 2025 19:01:10 +0000
Manifest this update: Sat 19 Apr 2025 19:01:10 +0000
Manifest next update: Sun 20 Apr 2025 19:01:10 +0000
Files and hashes: 1: UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl (hash: Y5d93FlHjvMwkeE0lYbOWzGcq1nQ1H6Al4ma9JgiF1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:13:fc:05:6b:63:e4:5b:6d:25:0b:66:fb:d1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f25bd05ac148851fa2a463ad0de070818404f7
Validity
Not Before: Apr 19 19:01:10 2025 GMT
Not After : Apr 20 19:01:10 2025 GMT
Subject: CN=bba85a0a28b7a66790749fc24d6b1a1951076e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:3b:10:31:b8:06:ab:b6:fe:68:cb:82:74:
2c:06:4e:a0:94:48:40:bc:fb:57:51:09:0b:7c:77:
02:c6:9a:d8:be:9d:1e:0d:df:b6:e5:b8:2d:ec:3c:
22:b4:fd:b4:c6:0f:79:23:d9:13:18:d2:42:26:b7:
d4:20:21:09:81:c0:93:e7:23:14:3b:58:5f:c5:46:
4b:62:d5:f7:f5:f6:3c:8d:58:ae:3b:f9:86:96:39:
ec:0e:e4:2a:ef:52:fa:c2:93:ff:83:11:89:07:b4:
0e:af:c8:33:51:d6:ca:bc:a8:df:8b:e4:27:59:f8:
90:53:ea:ad:48:c7:b6:12:e6:46:60:92:10:f2:4c:
4b:35:44:d9:a5:aa:fe:e2:c8:1e:44:64:7d:93:fe:
c2:57:32:1b:1a:63:cf:94:5b:42:87:3a:43:24:d4:
27:56:c2:2e:b4:b5:5c:35:ff:19:6f:3b:78:57:f3:
b1:4b:35:3d:72:da:8b:a1:17:f3:0d:5d:09:ac:65:
53:4d:e8:06:44:f0:ec:77:70:b5:63:c9:99:36:5d:
f0:80:e2:e7:eb:ab:25:a7:7f:7e:ce:7a:4d:32:ea:
d0:f4:cd:95:9f:b0:23:df:e5:d2:28:0a:33:bf:bd:
d0:f4:ad:39:fe:2d:39:5f:3e:4a:50:2a:f8:48:58:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A8:5A:0A:28:B7:A6:67:90:74:9F:C2:4D:6B:1A:19:51:07:6E:6D
X509v3 Authority Key Identifier:
keyid:52:F2:5B:D0:5A:C1:48:85:1F:A2:A4:63:AD:0D:E0:70:81:84:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/12d4f2-5028-44fb-bdf3-c822155acfa6/1/UvJb0FrBSIUfoqRjrQ3gcIGEBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:09:5a:f3:df:47:21:47:54:d5:48:3a:e6:a6:5b:76:c8:7c:
3e:c9:ad:a3:29:71:60:f3:08:5f:0c:2d:99:5b:50:c6:65:cc:
73:53:60:fb:a9:0e:db:8d:aa:87:c2:72:9f:22:7b:5d:e6:d1:
9f:a5:33:b9:2e:9a:5c:60:c1:ae:07:e1:03:89:45:c6:15:74:
12:4a:9e:46:1f:57:da:c7:50:c9:8a:ed:60:6b:4c:80:ea:eb:
98:b0:42:7c:8e:77:3f:55:fa:94:6b:bc:ad:5b:f5:c0:61:7b:
76:68:42:03:16:9a:d5:10:96:3b:b6:61:66:c4:46:10:78:c1:
29:9d:be:f2:0e:40:e4:4d:84:33:d2:6d:45:26:21:7d:2a:d0:
11:6f:73:5a:1d:46:32:53:6b:f6:c8:2c:85:ab:57:de:1b:e7:
26:a5:88:4b:6e:49:fb:c8:53:eb:66:c2:cd:b6:ca:55:1c:bf:
bb:f0:0d:45:eb:53:61:74:da:a0:3d:ad:8f:63:70:41:1f:be:
43:54:5e:23:5c:5a:ac:f4:14:fa:86:da:36:ff:ed:b9:eb:83:
40:80:cd:1e:ff:b9:4e:15:20:bd:19:7f:0c:7f:2e:3b:36:c7:
73:54:b8:ae:48:b9:69:d4:37:3f:d4:8e:09:fb:f9:8d:49:10:
f9:26:1f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:48:22 2025 by rpki-client