Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: R2zTNYBTd3I128Y8O4Qeon1BMaWDKsnkToqDW9UjXJ4=
Subject key identifier: 69:95:AA:16:9F:BA:EE:E4:5E:AE:8F:FF:C6:AE:2F:E5:C6:D2:52:17
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 0194BA8477896F89804F4E66A406210F6FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 0C1F
Signing time: Fri 31 Jan 2025 04:00:30 +0000
Manifest this update: Fri 31 Jan 2025 04:00:30 +0000
Manifest next update: Sat 01 Feb 2025 04:00:30 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: EiyxJWl/puOeKRSCG5zYqMV8fAiarUrm9f57CU2HF1g=)
2: vkVOKzv8_S2fkG1izpq7kTixdUE.roa (hash: piMEcgAOMMddSvNaBzKcgAojln/bHlikM4A3Z6HENXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:77:89:6f:89:80:4f:4e:66:a4:06:21:0f:6f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Jan 31 04:00:30 2025 GMT
Not After : Feb 1 04:00:30 2025 GMT
Subject: CN=6995aa169fbaeee45eae8fffc6ae2fe5c6d25217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8b:13:64:c9:90:f8:15:c4:1a:60:b1:28:31:
f2:8a:ce:d1:f0:da:c5:2a:25:d5:21:c6:11:e6:c1:
ec:ff:26:88:ba:7b:c6:e0:eb:df:fb:62:bd:e8:66:
5e:01:c9:cb:48:db:56:f8:25:c2:92:ed:e7:2e:ba:
e6:eb:57:cb:b0:bf:52:e6:40:ea:98:0c:0e:3d:8d:
52:12:0c:c9:ce:46:dd:e1:72:92:d1:f4:33:bb:96:
d0:41:49:a1:b0:78:56:fe:1a:7a:d7:ba:43:7b:98:
a4:4b:6a:b3:c6:30:f5:f7:fa:1b:97:64:7a:08:4c:
93:a2:ec:98:14:a6:52:a1:22:65:e5:6b:2d:0a:3f:
f0:63:08:c0:5d:b1:32:fa:ce:75:c9:2e:ac:9e:17:
d9:8d:c2:c9:01:01:2c:94:c9:19:79:6d:b8:0e:a8:
98:9c:97:d4:65:dc:9f:da:2f:4d:66:32:37:bd:ea:
5f:6c:c6:9a:55:fa:b4:32:a6:99:ba:b6:d8:37:4d:
35:f9:67:a9:b4:ef:57:a4:c1:2f:30:45:9c:54:27:
97:29:b9:81:bb:75:8b:80:56:4b:ab:72:00:f0:a6:
63:39:fe:df:58:71:13:49:8e:a0:68:aa:da:35:da:
05:13:43:49:8b:fc:bd:fe:5c:96:59:b7:8e:a9:38:
5e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:95:AA:16:9F:BA:EE:E4:5E:AE:8F:FF:C6:AE:2F:E5:C6:D2:52:17
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:48:8e:d2:c2:49:d7:58:ef:69:46:14:5a:66:0b:18:0d:fe:
8f:9e:cb:fa:d8:34:a9:52:e8:e7:ff:34:4f:45:a1:de:aa:c9:
92:c7:bb:fe:74:80:8e:f7:66:ac:c4:f7:03:97:91:b1:db:2e:
d6:ce:e6:7e:8d:92:14:2c:45:13:84:d3:e8:9f:02:8c:57:55:
45:59:9b:69:97:9e:bd:c5:01:44:5f:68:0a:76:8b:f1:33:7f:
de:04:2a:36:87:f0:37:11:e2:a3:e2:58:b5:cb:4b:7b:47:7c:
06:4c:30:b9:4f:1a:00:fa:af:ec:65:09:80:ea:c0:de:82:5e:
55:04:c9:17:d7:36:fc:d3:2b:95:7d:5b:88:20:9b:38:37:24:
1d:1f:1f:dd:26:61:14:f8:0c:a7:58:77:2c:f0:27:28:0f:78:
5b:df:10:ab:dc:71:e5:2c:89:dd:0f:85:f0:60:a1:c9:e4:e3:
02:e7:51:a3:96:04:3b:ce:50:5b:70:4a:b3:ac:2d:07:11:dc:
9b:80:cc:60:19:cd:3b:18:10:0c:53:ed:cc:b4:48:4c:9a:33:
5a:b2:1b:55:0b:e4:6f:39:e6:77:c1:47:7d:74:bf:0d:9a:3f:
1f:a8:7d:2c:ca:26:3a:63:f8:09:ff:b0:c0:58:de:10:23:ed:
ae:1e:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:20 2025 by rpki-client on console-fra.rpki-client.org