Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: XFaUxuh665ufJCS1d1E5eT2PkGBbCF/RxfAT4akT8mg=
Subject key identifier: 0E:97:01:3C:97:F3:13:E9:96:50:55:24:A2:71:15:A5:C5:4D:6A:DB
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 0195116C0F7ECF6C15C5812EC258B8EA7301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 13EA
Signing time: Mon 17 Feb 2025 01:00:49 +0000
Manifest this update: Mon 17 Feb 2025 01:00:49 +0000
Manifest next update: Tue 18 Feb 2025 01:00:49 +0000
Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: HIjZ8y7H2fhGFPdUjlG80mP9j1UCgW9qjK90gdQzulg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:0f:7e:cf:6c:15:c5:81:2e:c2:58:b8:ea:73:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Feb 17 01:00:49 2025 GMT
Not After : Feb 18 01:00:49 2025 GMT
Subject: CN=0e97013c97f313e996505524a27115a5c54d6adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:e5:77:69:89:57:2a:5d:eb:45:77:10:b5:
fe:05:48:5c:48:ae:a3:ff:54:2c:44:35:63:69:5a:
b7:6c:45:44:be:a5:11:2b:1a:93:40:f0:9e:24:06:
8e:d7:0c:43:57:e0:01:03:87:2c:38:5c:7a:93:a2:
ab:e3:d7:2e:d3:d8:3f:88:db:97:ef:8c:e2:5c:5a:
a6:e3:e2:28:fc:12:50:b4:9b:15:d0:26:d8:d7:65:
fe:cc:58:9f:89:e4:04:47:da:ef:f7:23:b3:c6:b6:
10:93:29:44:7a:66:75:55:b7:ec:13:d7:01:da:07:
1e:3b:55:8d:10:70:31:77:b9:7d:07:80:f4:2f:ce:
5e:bf:03:46:e6:41:26:cd:24:39:1d:27:c6:48:83:
9f:87:30:0c:87:c3:45:c8:56:08:4a:0b:d0:2d:32:
7d:d2:2c:9c:dc:c4:0a:f9:23:6e:a4:36:c1:7e:98:
3a:e9:b1:f6:eb:4f:59:bd:e2:32:bd:dc:f3:58:72:
3b:c1:fa:c8:31:11:81:8b:9b:d8:69:23:6c:f2:cc:
f3:10:22:d2:45:51:06:53:71:5c:50:df:48:53:37:
d4:04:98:78:89:9b:8d:9c:37:82:08:a5:09:f3:5d:
6b:9d:85:02:2e:70:c8:8e:33:44:79:7f:4c:0f:61:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:97:01:3C:97:F3:13:E9:96:50:55:24:A2:71:15:A5:C5:4D:6A:DB
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0f:75:96:87:a8:79:59:87:64:5d:12:d4:05:5e:63:4b:6f:
9a:62:87:aa:cf:d5:4f:78:ec:c0:e8:b5:78:7d:a1:e5:3a:0f:
12:a1:f4:7d:bb:28:cd:0f:b7:3d:0c:b8:f4:59:dc:15:43:6a:
5b:19:5c:b6:56:ad:df:b1:eb:28:9c:aa:18:64:67:4a:90:ba:
60:9a:8c:69:92:f3:25:2a:0e:fe:9a:00:89:e6:dc:46:f8:2c:
12:fb:1e:90:4d:7e:36:4f:c7:7d:3b:33:71:5f:a0:0a:6a:79:
61:a7:80:80:86:5e:04:ce:7c:68:de:cd:03:79:c6:f7:f1:d6:
ae:21:15:97:c1:80:fc:2f:65:d0:35:dd:ce:88:e8:f4:27:fa:
b3:f1:48:26:ed:43:52:03:36:e4:9f:ab:a0:83:48:ad:78:51:
6f:a8:87:d1:10:7a:f1:24:f3:1b:ea:7f:9f:9d:54:f6:37:ef:
be:c9:fd:5a:9e:10:32:73:db:a5:5f:1e:34:16:44:71:0d:2e:
fd:ea:1a:77:1b:1c:42:8e:f5:cf:43:af:c6:f0:7e:68:12:3a:
e9:84:90:6e:d9:07:6d:12:91:5c:bc:ad:48:2f:82:ea:67:30:
99:aa:a1:0f:57:77:b7:b7:f8:66:b5:e2:c1:97:f1:be:f3:fd:
73:12:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:29 2025 by rpki-client