Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
File: UlvgKcsyyovigKZJcDcY09iLtHU.mft (raw, json)
Hash identifier: heXbVWhhuGjTUWc5h0AUpwq2I3Hq2Hm4FDF2thErdUE=
Subject key identifier: AB:74:8F:74:AA:9E:C9:E5:37:A0:26:65:94:28:6E:EE:38:A4:82:6E
Authority key identifier: 52:5B:E0:29:CB:32:CA:8B:E2:80:A6:49:70:37:18:D3:D8:8B:B4:75
Certificate issuer: /CN=525be029cb32ca8be280a649703718d3d88bb475
Certificate serial: 019578341BF1D5DC1C7C5277A2DB69BB0898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlvgKcsyyovigKZJcDcY09iLtHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
Manifest number: 040D
Signing time: Sun 09 Mar 2025 00:00:35 +0000
Manifest this update: Sun 09 Mar 2025 00:00:35 +0000
Manifest next update: Mon 10 Mar 2025 00:00:35 +0000
Files and hashes: 1: UlvgKcsyyovigKZJcDcY09iLtHU.crl (hash: bs/dZrT8Og2maIgxo2KnJcqpZDQDYq8XtJ4MhXjYcKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlvgKcsyyovigKZJcDcY09iLtHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:34:1b:f1:d5:dc:1c:7c:52:77:a2:db:69:bb:08:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525be029cb32ca8be280a649703718d3d88bb475
Validity
Not Before: Mar 9 00:00:35 2025 GMT
Not After : Mar 10 00:00:35 2025 GMT
Subject: CN=ab748f74aa9ec9e537a0266594286eee38a4826e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:5d:81:d7:b6:20:72:67:93:a6:d8:bd:17:
26:16:61:08:13:9d:74:29:0b:14:21:7f:88:47:da:
c4:bd:30:4d:57:35:c6:35:2b:46:2b:0f:14:d9:b0:
88:da:cc:f3:7b:00:a1:84:26:eb:72:62:c6:f5:e5:
a9:bc:6d:6a:70:20:62:bc:b9:11:6f:3d:3b:eb:a7:
2b:7f:0c:51:de:ed:a1:76:30:1d:c9:bb:9f:00:c3:
cd:fe:13:1c:13:47:41:e4:c7:c3:14:e5:a8:32:bc:
cf:5e:ac:08:61:81:66:9d:22:de:a1:c8:bc:03:79:
0e:56:92:0e:ea:1b:d0:04:ef:01:0e:f6:73:a0:ce:
f4:2a:af:43:25:ca:ae:bb:2a:2a:48:d6:d0:9c:79:
fa:c5:62:db:a1:60:8c:09:a4:57:41:e7:9c:9a:0c:
e4:84:30:e0:55:fd:4b:19:e4:56:6c:7b:c5:15:92:
bf:c2:e4:2a:9d:7b:37:31:d9:ef:61:fc:fa:f1:76:
16:90:a2:c6:3b:03:bf:52:80:0c:84:02:48:94:6d:
98:db:f9:ca:3c:e0:38:b7:1d:ef:dd:d8:cf:83:28:
91:f8:55:d6:f5:a7:2f:4d:92:da:4d:cb:84:ff:a1:
db:3a:14:a2:38:68:3c:03:62:4f:ed:8e:5f:49:13:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:74:8F:74:AA:9E:C9:E5:37:A0:26:65:94:28:6E:EE:38:A4:82:6E
X509v3 Authority Key Identifier:
keyid:52:5B:E0:29:CB:32:CA:8B:E2:80:A6:49:70:37:18:D3:D8:8B:B4:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlvgKcsyyovigKZJcDcY09iLtHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/06476b-3cb1-455f-bcd3-d1db9647179a/1/UlvgKcsyyovigKZJcDcY09iLtHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1a:03:c6:e8:f0:fa:be:e4:61:70:c0:a3:94:78:d3:06:b1:
ce:f4:0e:f0:b3:45:bc:62:ea:7a:0b:b3:86:67:c8:79:af:81:
81:5f:25:e1:dc:3d:09:b5:65:d7:3d:f1:ae:bb:9d:dc:5f:26:
05:90:9a:ee:af:72:57:8f:af:28:0c:0b:57:9b:c7:18:47:3b:
13:32:f9:5a:ec:93:99:6b:89:de:f1:b2:cc:41:a3:8a:bf:75:
b1:fb:14:21:29:6c:99:71:eb:e9:8d:27:4f:86:d0:93:57:b3:
59:a5:ec:e3:3b:3c:bb:e8:54:4c:c7:56:92:8f:8d:d3:71:66:
df:df:9d:46:2d:98:c0:7b:96:c1:6c:65:e0:19:05:2b:07:85:
21:6f:08:8d:2b:30:31:ea:ee:c7:a0:d3:f6:90:5b:0e:e3:3e:
ff:28:f5:5d:d2:04:55:5c:e6:f3:16:2a:7a:3b:1c:23:2f:06:
35:09:0e:75:74:68:1f:ba:ae:3c:67:e9:6c:27:3c:51:b5:e0:
13:64:b2:4f:63:24:f4:9b:82:bb:de:a3:b8:f2:e1:4b:14:69:
2f:64:39:8d:8d:67:2d:ac:44:a0:47:f6:a1:a2:c5:45:9e:5b:
53:49:ce:e0:d4:f9:2b:ee:8e:de:7e:15:c8:0f:08:eb:37:c3:
3c:cc:27:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:16:45 2025 by rpki-client