Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
File: Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft (raw, json)
Hash identifier: 4gH/mHjNMsDZuKkZvMTURwpFcUBp29JSbrUzHUzfIIE=
Subject key identifier: 42:25:74:81:37:B5:A3:D6:D0:38:9F:DD:95:D5:08:FE:B3:EE:3C:2E
Authority key identifier: 51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
Certificate issuer: /CN=51cf732a8a7439e9280f23ef57849814af195ae0
Certificate serial: 019510FDD25DE7A0E37BA1FCC7A892F93BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
Manifest number: 0AC0
Signing time: Sun 16 Feb 2025 23:00:24 +0000
Manifest this update: Sun 16 Feb 2025 23:00:24 +0000
Manifest next update: Mon 17 Feb 2025 23:00:24 +0000
Files and hashes: 1: 6U9v2b9_H16oPmmsjyxvxUr0E3s.roa (hash: vTyGtdDSUJCCG+RyWL7dyY03BLe4INjU/wmtj3pLFUM=)
2: Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl (hash: pV5p6EJUUfTL3pxFJbEGvJPM30UlcSpMthfvgRL5GKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:d2:5d:e7:a0:e3:7b:a1:fc:c7:a8:92:f9:3b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51cf732a8a7439e9280f23ef57849814af195ae0
Validity
Not Before: Feb 16 23:00:24 2025 GMT
Not After : Feb 17 23:00:24 2025 GMT
Subject: CN=4225748137b5a3d6d0389fdd95d508feb3ee3c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:3c:c9:05:27:0b:ce:69:06:d6:fd:a4:39:
55:54:a6:b4:c1:fd:3a:e5:27:a0:d2:86:c7:92:99:
b0:f7:bc:b8:3c:31:78:7f:64:30:f0:6b:fa:5d:c9:
55:86:06:fd:5d:e4:95:09:f1:34:65:eb:2b:9d:da:
16:b4:39:54:dc:e1:1b:83:38:db:b3:83:1f:82:93:
58:65:ce:49:c5:f7:16:70:7c:d8:5e:d3:13:44:b4:
c3:0f:4b:e1:c7:3b:d6:b8:52:ca:43:d5:28:6a:e7:
51:a8:bd:81:01:27:f2:25:f0:0a:bd:dd:79:cd:e2:
a0:db:38:1c:77:a2:8e:46:ef:f7:94:74:7a:d9:95:
35:62:a3:19:4c:7a:de:92:bc:61:bc:0b:1a:b7:fd:
3f:d5:e3:62:4a:da:d4:2a:0c:47:be:fd:ce:0c:bc:
ad:69:2e:2f:75:8e:88:ef:16:89:3f:4d:18:77:a4:
1b:8e:b0:24:c3:77:4f:1f:d0:7c:d4:5c:01:3e:c1:
3d:7a:f6:7f:8a:5a:c1:6e:a1:c4:70:d6:86:1b:71:
61:54:c3:a1:b6:26:1f:a1:de:07:5c:80:35:23:3c:
e4:9c:dc:96:8a:65:17:7a:83:d2:ed:f5:aa:8c:b5:
80:67:8a:f9:57:98:05:f9:4e:d1:39:a8:94:9a:0e:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:25:74:81:37:B5:A3:D6:D0:38:9F:DD:95:D5:08:FE:B3:EE:3C:2E
X509v3 Authority Key Identifier:
keyid:51:CF:73:2A:8A:74:39:E9:28:0F:23:EF:57:84:98:14:AF:19:5A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uc9zKop0OekoDyPvV4SYFK8ZWuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9a6638-c8fd-43cf-b1c4-b071c7efd915/1/Uc9zKop0OekoDyPvV4SYFK8ZWuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cc:50:30:42:3c:34:45:6a:5b:4e:d7:27:cb:c0:1b:48:28:
5b:12:f4:be:c4:d4:c3:7e:15:24:86:55:6f:82:66:a2:cc:68:
b0:78:9f:02:ee:ae:10:bb:d3:2c:27:99:5c:94:9b:7b:3c:e2:
dd:93:1e:91:e6:70:06:43:c9:07:69:fd:6b:8d:f5:93:67:c7:
9c:b6:52:e5:88:57:11:55:7c:a7:60:65:11:3d:94:96:1c:3e:
d8:c7:79:6d:59:6d:83:2a:ae:0d:88:4d:7f:7d:c8:37:bd:c4:
74:ff:34:86:61:43:23:f9:2b:a0:12:bf:d3:e6:36:38:56:8c:
4e:41:ab:57:56:51:12:19:c8:f7:e8:ca:64:c1:09:cf:b3:5d:
8e:79:13:09:ba:c1:6d:3c:73:6d:33:80:9b:cc:11:2c:d4:d9:
18:49:b0:de:b6:08:34:4e:9d:bd:b3:47:64:80:f6:0a:cc:14:
af:da:23:ca:84:42:5b:cf:32:30:69:04:b2:9e:2f:0b:a6:09:
ee:27:c1:b9:3e:6a:0b:d4:ac:2f:be:ca:2c:f0:9a:e3:0d:2c:
78:ad:b2:d8:a9:5d:98:a9:a9:f3:b9:2d:dc:11:32:a3:c9:3b:
d0:30:0a:e6:c8:05:ae:4a:8e:a4:8b:51:40:5b:91:73:16:e4:
7c:f9:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:51 2025 by rpki-client