Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier: ZvUn4WbZMce4iYD2u3o8c2lfKH16YxqFauLy5dylhrM=
Subject key identifier: F7:42:44:39:81:43:7F:36:4A:0C:8E:42:8C:2A:BF:70:12:75:E6:D4
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial: 019610FBAB50E4C76E14B2E36B8DA0F8E3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number: 13C2
Signing time: Mon 07 Apr 2025 16:00:50 +0000
Manifest this update: Mon 07 Apr 2025 16:00:50 +0000
Manifest next update: Tue 08 Apr 2025 16:00:50 +0000
Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: AKbOZw98NJPQ6IQr1dV0r55uyYxbxC3i4Ln8n4S4j+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fb:ab:50:e4:c7:6e:14:b2:e3:6b:8d:a0:f8:e3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Validity
Not Before: Apr 7 16:00:50 2025 GMT
Not After : Apr 8 16:00:50 2025 GMT
Subject: CN=f742443981437f364a0c8e428c2abf701275e6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:94:0d:c8:a7:55:23:2b:20:d5:46:13:67:
64:5d:78:b9:45:d3:1c:3b:7a:73:df:18:70:9f:3e:
8a:f2:4c:5c:b2:e1:67:5d:9d:a3:b1:5d:93:6c:ed:
da:67:50:85:b5:21:7d:e0:e3:a8:d9:b7:2a:03:87:
50:39:6f:82:4c:13:c5:24:e9:6b:b6:dc:19:53:75:
8e:f5:b5:5a:7b:54:9b:5f:a3:06:d4:b5:c8:e8:19:
49:56:8a:69:0e:79:21:31:18:6a:df:67:9d:8b:21:
8f:a9:85:82:35:d8:c2:f8:bd:9e:2f:b9:cb:05:7a:
f1:1b:e8:18:fa:4e:62:5e:81:92:8a:3b:97:59:c4:
0c:f2:40:37:ab:66:93:3c:76:f6:b5:45:79:7a:2d:
00:ad:a6:3f:4d:d5:7f:0c:6e:88:43:10:0c:f2:20:
f6:04:33:da:fc:7f:65:12:b0:56:b1:cc:92:ac:3c:
46:b4:20:39:2e:5d:82:0b:76:d3:bb:4f:60:ef:17:
39:1c:21:b7:21:fd:f5:75:98:37:12:b2:42:f9:aa:
a4:fb:fa:47:83:0d:7e:08:e6:89:4b:9f:b8:62:10:
fd:3a:70:5f:cd:48:48:59:41:a0:f6:e4:cb:0c:45:
ac:2e:a1:0f:5d:a7:75:d8:0e:e4:c1:23:fd:e1:cf:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:42:44:39:81:43:7F:36:4A:0C:8E:42:8C:2A:BF:70:12:75:E6:D4
X509v3 Authority Key Identifier:
keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0b:07:62:fc:9e:e0:2d:cf:fa:ce:b5:db:a7:cd:aa:40:e3:
f3:3a:81:2f:7d:15:c9:28:9c:27:29:d1:9f:df:18:51:c4:99:
25:41:81:04:a5:8c:9f:fd:e7:ff:bb:e8:6e:5d:2b:c3:54:c1:
ba:62:e4:05:b5:51:c7:98:51:42:ce:96:93:36:3f:eb:57:7f:
45:af:4a:e5:3c:08:9e:cc:8a:83:32:72:7c:34:7e:bf:64:54:
81:ac:ea:5a:ff:61:d8:80:13:3f:e0:11:77:f8:0f:9a:76:88:
60:69:85:2c:15:e0:b6:43:ee:16:d2:b2:e4:ff:1f:66:49:c1:
ca:8b:49:14:4c:f1:48:ad:40:c2:ee:f0:05:32:b2:e5:d2:d3:
70:bd:df:2a:6d:e5:58:b1:98:7a:a4:15:2c:0a:52:2c:97:59:
87:91:2d:b1:23:09:8a:07:4a:52:62:24:20:98:df:fe:f0:a7:
73:de:75:4d:48:9c:3f:3c:c8:44:58:47:63:b5:c2:ed:2f:b3:
b6:e3:60:4c:36:95:93:16:d1:ed:ea:59:a8:b0:d2:c1:3f:7d:
77:68:27:f9:69:23:78:18:3a:02:42:4d:ce:4b:1a:d1:39:dd:
ea:db:25:9e:cb:44:ab:4b:62:9d:3f:a6:bc:f3:b6:54:67:3f:
46:9c:35:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:40 2025 by rpki-client