
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
File: UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json)
Hash identifier: HuBuxyf3jgM2XlIPwTzQq4RXnak5RckDaenFB7KSpSY=
Subject key identifier: 1E:72:32:29:DA:EB:62:1D:22:19:4A:76:F7:83:44:26:BC:43:1D:F1
Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Certificate issuer: /CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Certificate serial: 01965EA8E666B5BA2F89CE0E90D06308AD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
Manifest number: BA
Signing time: Tue 22 Apr 2025 18:00:49 +0000
Manifest this update: Tue 22 Apr 2025 18:00:49 +0000
Manifest next update: Wed 23 Apr 2025 18:00:49 +0000
Files and hashes: 1: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: E2KPs7O3hE8iDAHtlQeHt9kKP/w4OgTAyDYYSfKoP6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:e6:66:b5:ba:2f:89:ce:0e:90:d0:63:08:ad:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Validity
Not Before: Apr 22 18:00:49 2025 GMT
Not After : Apr 23 18:00:49 2025 GMT
Subject: CN=1e723229daeb621d22194a76f7834426bc431df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:b3:a5:74:44:0d:9a:d0:2c:b3:fc:8c:6b:
c8:b1:8e:5c:c3:b2:4d:28:86:fd:29:64:7a:db:b8:
30:d3:1a:ef:96:5e:b1:a2:33:22:21:be:9e:50:23:
e2:00:c2:c0:0c:41:15:d5:a9:a0:bd:e7:6d:3a:67:
82:8a:b3:cc:3a:53:ce:1b:c2:42:25:54:9c:0a:e4:
d9:a1:09:e5:c4:b3:b8:08:1f:98:ee:c5:a7:03:4b:
64:75:c2:71:dc:bb:cf:bf:a7:48:48:b8:8c:d7:9a:
9a:73:f7:70:c9:fa:2c:9d:84:e7:87:0b:3c:6a:33:
22:d3:b3:8f:9a:6a:f2:cb:6f:14:9f:1c:f2:63:1a:
81:dd:e4:0a:bb:c1:0f:dc:1b:dc:46:8e:e2:0f:a8:
44:af:3a:b5:c4:38:77:15:c9:a6:b7:05:75:ea:d2:
d8:62:85:74:f8:c7:2c:01:b3:71:57:85:0b:f8:88:
0c:e9:08:32:1f:ad:38:73:ae:e0:13:57:90:a0:94:
a5:e4:0e:71:eb:12:43:e8:9e:90:c1:1e:3e:e6:65:
ad:db:13:b4:3d:36:09:81:7d:12:8f:bf:72:99:6f:
80:f8:83:3b:1e:ae:d3:87:f3:af:47:b3:95:26:49:
69:23:f7:ef:2a:30:6c:25:1b:d2:35:ec:96:37:25:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:72:32:29:DA:EB:62:1D:22:19:4A:76:F7:83:44:26:BC:43:1D:F1
X509v3 Authority Key Identifier:
keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ba:f0:42:96:15:83:1e:91:e6:05:2d:5e:17:46:e2:49:cb:
24:7c:5d:d9:93:ec:72:27:a2:aa:64:1d:bc:3e:26:4c:87:bf:
97:62:96:83:33:bf:eb:4a:eb:d9:30:f9:8b:4e:51:ad:65:3d:
f2:78:ea:fd:26:65:b5:31:18:d0:59:a4:3c:c1:8c:eb:a8:de:
2b:bf:0e:46:3a:77:d8:12:17:80:d1:0f:74:37:db:ce:da:30:
d3:1d:73:e3:f6:20:81:90:f7:5f:65:e0:b4:33:00:d6:fc:a2:
88:25:9f:5b:52:db:f5:cf:62:d3:2f:05:75:8b:8b:2d:0d:37:
0e:2e:f4:97:4f:6d:25:24:ba:b3:ed:29:cf:6d:ce:62:0e:11:
0e:aa:16:38:b6:97:e3:9f:9d:8c:ce:7f:6f:08:18:18:eb:53:
09:f6:85:75:94:7f:25:ce:5c:a4:4f:a7:ed:de:26:a9:10:3a:
12:74:bf:d2:9d:d9:e4:83:3b:da:91:1e:3e:e3:3e:8a:66:3b:
0c:ce:55:a1:39:2e:03:34:60:25:db:71:66:0f:e4:e2:3e:6d:
6b:3e:0d:5f:e0:6d:3a:1a:fb:c1:3a:ca:54:f0:48:f3:c6:5e:
ee:88:df:e9:09:be:b9:22:e9:5c:c9:55:dc:13:7a:b7:28:ea:
f4:08:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:42 2025 by rpki-client