Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json)
Hash identifier: yLhfy6KLEIJyPNsv2r09KlhYkjkDX8y8LGeUaeoGJxI=
Subject key identifier: EF:E4:56:A1:21:96:4F:BF:24:A0:B6:B1:F7:4B:3A:03:F2:DB:C7:DF
Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Certificate serial: 0195108FC3700F832AD1E76BEF812F162D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
Manifest number: 1153
Signing time: Sun 16 Feb 2025 21:00:11 +0000
Manifest this update: Sun 16 Feb 2025 21:00:11 +0000
Manifest next update: Mon 17 Feb 2025 21:00:11 +0000
Files and hashes: 1: CNzkiSB6aHtzY0O727sE464QSi8.roa (hash: jl53RICMTSEcHClA6hdGIYAm+qbxdQWju025NBkPLn8=)
2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: ZcCjjHYJxiDJhGqZcORdxrpQC29FicYXGIiem5o7P+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:c3:70:0f:83:2a:d1:e7:6b:ef:81:2f:16:2d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Validity
Not Before: Feb 16 21:00:11 2025 GMT
Not After : Feb 17 21:00:11 2025 GMT
Subject: CN=efe456a121964fbf24a0b6b1f74b3a03f2dbc7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:32:0c:46:52:2f:7a:16:52:78:4e:38:c2:
38:cf:71:cc:c4:9a:cb:5b:1c:9c:65:31:8c:27:ba:
f5:76:d7:b9:8e:df:b9:0d:fb:35:48:ea:dc:cf:3c:
55:1a:be:2f:9f:2e:83:53:bf:37:63:e8:77:0d:1f:
9e:66:69:c5:50:67:c2:24:e3:98:63:32:60:33:32:
6b:12:85:17:dd:f1:d3:e4:0b:e8:67:4c:be:dd:be:
d3:e5:7b:21:1d:a8:b2:78:92:05:ce:8a:03:2b:ae:
0d:95:72:c1:45:38:98:d0:05:7f:e6:aa:dd:58:0d:
fb:5c:e7:02:76:9f:84:50:f3:d5:c5:b2:af:ae:a0:
2b:bc:6a:86:04:ab:0f:5d:e3:57:8c:87:da:95:d2:
74:03:11:1e:ee:3c:ba:c8:87:da:93:9a:09:c4:85:
49:a2:f3:bc:3d:e1:7f:c9:29:2b:e1:f7:d5:1d:70:
48:6d:dc:d9:5e:2e:ed:a0:3c:d5:31:71:71:5f:fc:
71:f9:8e:96:d7:ac:9e:38:2a:db:55:09:37:ad:d0:
35:fd:53:7a:4f:d5:31:21:4a:84:65:1d:6f:49:8d:
2a:45:91:08:ed:e1:1d:9d:a9:16:1b:66:53:dc:53:
3b:ed:dd:e7:cb:39:97:47:c3:c1:e0:da:1c:fb:a0:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E4:56:A1:21:96:4F:BF:24:A0:B6:B1:F7:4B:3A:03:F2:DB:C7:DF
X509v3 Authority Key Identifier:
keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:65:cc:5e:9b:80:53:ba:84:66:1a:b8:32:03:fb:e4:66:7a:
b7:cc:ca:f0:55:4b:c0:bc:d4:fa:bd:88:86:c0:36:7a:f7:80:
70:00:0f:fa:c3:ce:d1:6b:f8:6a:19:aa:8e:33:79:7b:9c:91:
56:1f:35:63:d0:64:dd:46:f5:17:1d:16:b7:b7:e5:de:2b:1c:
6c:02:4c:d4:69:17:4e:51:b6:a3:d9:23:e5:b5:fa:37:77:52:
e4:58:b2:a2:fd:d5:d8:85:69:93:94:3f:d8:de:10:90:b6:0b:
e3:16:30:a5:ef:c1:59:6f:2b:5e:98:cd:e6:b6:4e:61:74:6d:
8a:c1:11:c2:77:45:b8:25:76:e3:da:5a:8e:9b:f4:fb:e9:2e:
99:8f:e7:2d:6a:77:4f:fe:d6:85:aa:3a:18:68:a0:1c:d2:85:
3c:ba:24:a9:2b:6f:9b:b4:b1:84:63:f1:78:cf:9f:a6:15:b0:
ae:6c:ca:95:1e:07:8a:94:c7:5a:95:41:97:c8:f3:bb:fb:15:
c0:06:d5:be:ce:3d:e4:24:43:8b:67:d3:b4:67:e3:4d:29:b2:
d9:15:c5:32:c1:73:bc:aa:54:d9:f6:b7:e4:95:a3:48:80:47:
dd:27:88:f4:7e:85:36:d9:1b:51:12:af:9c:86:f3:ed:97:37:
76:70:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:57 2025 by rpki-client