Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
File: URG_0pCvtSDrpBT3ijl1C36Z9MU.mft (raw, json)
Hash identifier: 0cQz/sTWifTo5wmPzd+pHkc9uFRScf+n4eYhlrqVV98=
Subject key identifier: 8F:8D:2D:41:B5:5A:C9:15:BE:DE:30:59:97:3F:25:20:A8:2F:B1:9D
Authority key identifier: 51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
Certificate issuer: /CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Certificate serial: 0194C3197105C9AFE9889B9B15FC07253A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
Manifest number: 013A
Signing time: Sat 01 Feb 2025 20:00:11 +0000
Manifest this update: Sat 01 Feb 2025 20:00:11 +0000
Manifest next update: Sun 02 Feb 2025 20:00:11 +0000
Files and hashes: 1: QjbD0Mv43Mggjnv1dD3aQlZ_dnQ.roa (hash: wA7EasBNLkMqkW9XYIKGBOp/xluoqSrHxbZPHdScXQ4=)
2: URG_0pCvtSDrpBT3ijl1C36Z9MU.crl (hash: r78j7R93MhpMmhSgZElD9N0X05LF12L2h/F6/y5vAnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:19:71:05:c9:af:e9:88:9b:9b:15:fc:07:25:3a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Validity
Not Before: Feb 1 20:00:11 2025 GMT
Not After : Feb 2 20:00:11 2025 GMT
Subject: CN=8f8d2d41b55ac915bede3059973f2520a82fb19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:c5:1a:06:a0:ea:4b:78:bc:c0:45:f8:db:
9e:d2:17:62:ea:3c:81:78:b9:a7:f9:96:83:aa:8d:
79:79:60:63:06:2c:ce:46:a6:56:2a:42:7b:0a:3f:
29:24:0d:07:e1:40:e7:88:35:ea:4e:5c:68:bd:c4:
34:55:ee:f7:96:25:0d:9c:81:27:ec:3d:05:e8:a0:
7a:4d:f5:90:32:5e:58:f3:3a:62:74:da:40:33:43:
76:00:85:d4:95:af:3a:d4:90:13:f3:6b:b9:8a:f2:
8e:3c:a8:93:1f:c0:8e:50:e8:13:85:11:9a:91:58:
a0:e9:75:ba:97:cf:8b:aa:af:be:6a:47:2f:a4:45:
e3:5c:8b:48:6d:00:fe:2f:08:1b:ea:1f:66:bd:db:
78:37:d2:cb:9c:b6:e0:78:aa:2b:f0:b3:42:07:1e:
b4:9a:e7:41:90:39:f2:89:b2:6a:0b:eb:23:53:6c:
d7:3a:e0:4b:97:98:d4:72:11:cc:62:ed:6a:4e:ae:
1a:33:bb:42:f7:8f:09:07:cb:89:36:ba:5d:68:0b:
60:8a:97:fa:60:40:d6:98:d8:8b:fe:e7:a9:c3:43:
96:a8:3c:ae:ea:c2:07:38:53:42:11:ca:dd:c6:1b:
86:53:5e:7e:02:c1:60:ee:f8:be:82:9a:32:c6:3b:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8D:2D:41:B5:5A:C9:15:BE:DE:30:59:97:3F:25:20:A8:2F:B1:9D
X509v3 Authority Key Identifier:
keyid:51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:69:10:70:a5:27:29:19:bd:c3:45:d4:d5:ab:e3:f6:f1:a5:
8b:84:9d:79:98:9e:87:d7:f5:59:db:0e:44:5b:9c:d1:e5:ba:
74:16:51:35:ce:f5:43:99:5b:fe:88:2a:75:22:c6:bf:67:cd:
7f:0e:01:6f:77:b4:4b:dc:d7:5a:bf:f7:21:8e:83:ac:d0:0d:
93:e5:29:c0:e9:b3:11:8e:86:98:a1:3b:2d:a6:7d:a1:01:2a:
29:ba:2f:ef:96:03:4c:32:6e:d4:12:a2:ae:50:06:ee:40:c5:
78:c9:aa:94:10:7e:6d:9d:74:bb:db:19:97:2c:a5:fe:f4:b9:
ae:d2:25:38:67:79:a9:7d:b9:67:59:aa:f0:51:dd:17:44:87:
42:06:87:82:3e:e4:0a:9e:0f:60:38:e6:24:4a:7c:83:d6:45:
68:e5:34:dc:88:bb:70:af:9c:86:66:e1:bb:79:95:e1:a4:b1:
37:af:10:a8:de:bc:b6:fb:9b:38:76:4b:08:12:27:b6:58:e9:
e2:0e:ff:3c:b0:b3:b6:1c:8e:0c:3c:6b:ba:ec:3a:f5:22:66:
e8:ba:a8:5b:a9:6c:84:5a:c5:29:39:d0:3d:c2:b7:d8:87:25:
7f:ee:f9:10:d7:6e:f9:6d:b0:7c:7c:00:88:9c:18:7c:5d:e9:
10:42:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:52:08 2025 by rpki-client