Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: G8HkpRKMPTb0AQ/RTtv0yChbNRexX2ukVCJFkhk9IAo=
Subject key identifier: 49:C4:99:17:D1:DE:82:5B:0F:95:47:01:8F:B4:C4:F8:D4:64:18:63
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 019512103EF49ED76F52C5AF377C6616B9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 141C
Signing time: Mon 17 Feb 2025 04:00:09 +0000
Manifest this update: Mon 17 Feb 2025 04:00:09 +0000
Manifest next update: Tue 18 Feb 2025 04:00:09 +0000
Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: Jsb7+HGNR24lj2z54tPzMdioNHQJIEUJEnzo+SdSl7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:3e:f4:9e:d7:6f:52:c5:af:37:7c:66:16:b9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Feb 17 04:00:09 2025 GMT
Not After : Feb 18 04:00:09 2025 GMT
Subject: CN=49c49917d1de825b0f9547018fb4c4f8d4641863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:37:cb:43:93:ab:71:3c:3a:00:7e:28:e2:
f1:b9:a4:79:2e:71:3d:7e:55:1c:ac:f2:e3:aa:7d:
df:4c:30:9b:ff:8b:a3:90:a0:02:18:c6:c2:ea:27:
d4:41:c8:32:a5:67:9f:6e:a1:18:42:c6:32:5f:21:
a7:e6:d2:08:d4:2e:7e:a0:5a:fc:08:0d:18:45:c3:
cf:54:46:40:cc:ed:cc:26:ff:d8:e9:7f:c8:36:2e:
36:7a:dd:b5:6f:c4:cf:58:17:39:88:39:75:d1:a0:
f4:c3:4a:df:08:14:81:b8:52:e1:14:c1:c9:73:a2:
5e:43:f6:64:de:c5:b4:bc:71:25:51:8b:cc:d7:ae:
01:4b:c9:9c:38:76:b8:10:66:90:ea:ca:da:11:1f:
e8:94:db:e2:04:d1:dd:e1:95:d4:ba:91:18:53:c1:
29:60:e5:9c:ee:85:bb:0f:27:3d:96:91:b6:b5:18:
ea:5f:a5:f2:7e:3d:c0:a6:47:9f:4b:90:a2:48:fe:
cb:63:3a:bf:f5:fc:0d:ce:23:fe:3f:4e:4e:97:f9:
bd:6f:54:a6:c6:a7:f7:b2:8d:34:55:8f:93:c7:44:
62:f8:24:20:f5:80:6d:67:6f:02:8d:4e:e4:11:fb:
3c:d1:6c:9c:5e:8b:6e:a9:9f:be:4b:e6:e1:00:60:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:99:17:D1:DE:82:5B:0F:95:47:01:8F:B4:C4:F8:D4:64:18:63
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8a:59:ab:13:40:42:1e:c0:14:42:10:da:f7:12:f1:7b:93:
b3:df:62:96:0a:9f:32:52:7e:6a:f2:09:2d:90:43:5e:d1:cf:
d2:0c:53:99:cf:f8:9d:8f:92:cd:ac:ff:28:b5:cb:90:b1:e5:
37:57:2c:65:44:26:37:6d:ae:8f:3e:b8:df:56:7c:7e:b2:fc:
75:ca:f4:e7:aa:37:6b:26:52:cc:3f:3b:d3:ee:3b:06:7f:57:
d4:09:58:8b:77:ea:b5:e7:2f:f5:a6:e9:b4:1d:67:d1:ed:52:
e4:2a:8e:d9:91:b9:77:b9:85:ae:bf:be:ee:8a:29:8b:47:8e:
8f:84:4b:dd:41:9f:c0:8c:64:e5:80:14:fe:cd:b0:b0:62:b3:
a7:84:79:cb:09:7c:bb:a0:45:bd:b6:5b:21:31:14:df:5e:14:
73:63:d0:de:62:55:96:7c:6e:9e:e5:e7:07:7e:df:26:e4:bb:
1d:48:98:fa:d7:ac:26:68:3e:c3:d0:ac:1a:ff:77:42:75:a8:
e9:92:bf:e7:56:3d:d5:d9:3f:8c:22:ad:42:1d:4d:e7:d8:3c:
27:f1:da:79:c8:09:ff:9f:ec:0a:f8:17:46:78:e5:42:79:19:
49:79:c8:c1:77:69:e3:6b:9f:37:0b:0b:ca:4f:74:c0:83:a8:
ac:3c:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:17 2025 by rpki-client