Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
File: uVZnsVy6fKp0FSdIRHOE--A7iTo.mft (raw, json)
Hash identifier: /doz83O0PaoBtRHI5a0xKSHlvu+X1Z0yV4+fe9MoO4c=
Subject key identifier: 02:07:EC:F6:BE:7D:47:75:0D:84:87:11:51:A8:24:CE:DE:AA:E5:3E
Authority key identifier: B9:56:67:B1:5C:BA:7C:AA:74:15:27:48:44:73:84:FB:E0:3B:89:3A
Certificate issuer: /CN=b95667b15cba7caa74152748447384fbe03b893a
Certificate serial: 0196515A9FAC95E36B1C4D2245DCE10C6350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
Manifest number: 07AD
Signing time: Sun 20 Apr 2025 04:00:15 +0000
Manifest this update: Sun 20 Apr 2025 04:00:15 +0000
Manifest next update: Mon 21 Apr 2025 04:00:15 +0000
Files and hashes: 1: uVZnsVy6fKp0FSdIRHOE--A7iTo.crl (hash: Nh2R8nYS7SJRnxxYiAHBCPuegVEXPIPKC/h+AwiosA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:9f:ac:95:e3:6b:1c:4d:22:45:dc:e1:0c:63:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b95667b15cba7caa74152748447384fbe03b893a
Validity
Not Before: Apr 20 04:00:15 2025 GMT
Not After : Apr 21 04:00:15 2025 GMT
Subject: CN=0207ecf6be7d47750d84871151a824cedeaae53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:82:fa:36:de:3a:b8:0a:de:06:fa:73:59:
b6:58:5d:70:2f:d0:1d:d0:3c:73:4a:f2:2c:cc:9e:
e6:92:15:3a:43:04:88:ba:64:07:b6:4d:d9:ca:c9:
9f:6f:da:fa:bf:f2:28:92:52:c6:45:06:48:c9:6a:
a8:94:f9:3c:45:49:6c:6c:03:09:82:13:ad:57:a3:
5a:e9:79:2e:78:9e:89:3d:7b:3a:1b:46:04:93:54:
0b:6c:9a:b2:ca:bd:43:9d:e6:66:5a:3e:dc:b7:cd:
25:8c:77:dd:14:74:57:6d:18:aa:82:1b:2b:fe:7d:
b4:0e:e2:e7:fd:17:c8:43:d3:48:19:f5:4c:fe:5c:
2e:f0:1f:27:eb:94:f1:49:c2:f5:26:09:cd:05:c6:
cb:3f:dd:c6:36:67:7e:a7:2a:73:e5:10:6c:a2:40:
15:c2:b5:ea:f6:f5:96:06:16:d2:c2:40:bd:14:51:
79:5d:be:ca:15:02:49:c7:16:e0:a2:f3:b0:24:0f:
f3:7f:82:f6:d8:38:48:13:2e:df:a2:04:6e:69:d3:
c9:4d:6e:0a:e0:ff:32:c5:0d:47:ee:7b:a3:ec:61:
c9:e1:af:93:fb:6d:fb:cd:82:2e:83:7c:c4:9f:7a:
9b:69:46:ce:cf:61:75:a2:03:9a:30:47:7a:ef:ba:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:07:EC:F6:BE:7D:47:75:0D:84:87:11:51:A8:24:CE:DE:AA:E5:3E
X509v3 Authority Key Identifier:
keyid:B9:56:67:B1:5C:BA:7C:AA:74:15:27:48:44:73:84:FB:E0:3B:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uVZnsVy6fKp0FSdIRHOE--A7iTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/540c03-ba83-4971-8981-744dcd014fa4/1/uVZnsVy6fKp0FSdIRHOE--A7iTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d0:44:bf:f7:27:12:d2:b4:b2:9c:f2:c7:48:62:4f:06:45:
6b:f6:f8:d4:c2:ef:8f:9f:9e:96:26:e6:44:de:55:d7:e9:f8:
2a:ab:d6:49:ab:66:b2:e5:db:12:9e:58:92:35:ee:f9:98:28:
90:d3:d1:95:32:2b:ba:d9:1d:ff:f9:69:ab:f5:2e:8c:81:04:
44:12:47:55:f3:82:40:5c:77:b9:c9:52:f8:c8:d3:ee:b1:5f:
9b:5d:31:b0:94:a0:06:ac:b1:c8:e3:30:1f:30:ba:8e:c9:b4:
a9:ce:ee:9a:ba:50:e1:28:b4:cb:6d:1f:9c:b5:b2:e0:15:7a:
9f:65:c2:d9:40:e5:8b:3f:ea:5d:37:b9:6b:26:a5:20:d9:c4:
4f:1d:b8:b6:aa:7a:5c:83:99:a1:a2:1b:c7:f9:01:5e:fe:83:
c7:25:0c:00:3b:f6:c6:a1:96:7f:d9:a5:a7:13:f9:45:38:af:
33:e6:07:2e:e1:2a:89:52:47:f8:c0:a9:79:30:10:31:ef:63:
ee:a8:b8:b1:1d:b1:ce:e1:20:5a:43:b1:18:3a:85:81:0f:dd:
c5:84:e5:0c:78:d4:0f:6b:07:1d:48:4b:eb:e0:49:1e:d4:09:
3a:87:2d:75:16:79:20:78:0f:a5:19:56:b6:89:bf:05:25:85:
ad:5a:20:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:52 2025 by rpki-client