Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: AtruyxlU+pmO954nPD/ruNsoYnpg5B8tpmlN/DWoX6U=
Subject key identifier: 2C:6B:59:71:6A:2E:9F:E5:C0:7C:B9:78:4B:4F:B2:47:FE:A2:B4:CF
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 019511D9D23DD8245CFB147C9C278C4AC4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0B5D
Signing time: Mon 17 Feb 2025 03:00:42 +0000
Manifest this update: Mon 17 Feb 2025 03:00:42 +0000
Manifest next update: Tue 18 Feb 2025 03:00:42 +0000
Files and hashes: 1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: bjR1yfdAeYpRGkCVCfEG94IFJZFxVm5mqhz+3g35EIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:d2:3d:d8:24:5c:fb:14:7c:9c:27:8c:4a:c4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Feb 17 03:00:42 2025 GMT
Not After : Feb 18 03:00:42 2025 GMT
Subject: CN=2c6b59716a2e9fe5c07cb9784b4fb247fea2b4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:59:b3:ea:11:bb:f0:fd:41:b7:72:84:29:
d4:73:46:d9:f6:ef:18:43:a8:a4:41:bb:68:df:9c:
e4:ec:ef:89:70:fc:ca:88:51:fb:37:6b:cc:a6:17:
c9:28:b8:63:24:9d:39:4b:ca:d3:4a:bc:2a:fd:21:
ff:01:55:d9:14:d5:f3:54:69:2c:fc:4d:17:ad:c7:
2b:77:db:64:79:ec:ba:f7:07:8e:97:c1:e2:c1:32:
b4:b4:5b:06:6c:a2:e6:28:ad:9d:a7:b5:4a:dd:ed:
03:bd:f8:fc:2a:3b:7d:5e:08:07:3e:e7:e1:ba:09:
d5:85:84:7e:a3:bb:af:4c:d8:1c:86:ed:82:57:ac:
84:27:0d:80:2d:b9:36:8d:b7:c1:d9:b5:86:18:77:
63:5c:c4:49:88:20:40:ad:c4:32:82:5f:61:88:df:
5a:2f:74:ac:54:5b:75:19:ac:65:bb:65:6c:8d:b3:
ec:54:57:c2:9c:fa:78:12:70:98:45:86:d4:a3:f0:
74:f1:41:d2:37:92:a3:ff:f5:41:f8:5b:a6:5c:75:
02:95:c9:98:e1:f3:57:96:3f:e7:fc:74:1c:d3:36:
9d:4d:12:72:05:90:c2:1a:6c:18:1a:6a:78:d2:2e:
a1:cd:f5:3f:8b:08:cd:64:a6:f4:ed:a0:8b:e5:ff:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6B:59:71:6A:2E:9F:E5:C0:7C:B9:78:4B:4F:B2:47:FE:A2:B4:CF
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bb:40:88:6f:9e:c8:35:5d:6b:c1:f7:5d:a8:71:d9:62:c7:
b0:1c:22:a2:21:4f:ec:02:89:37:56:74:a4:fb:b4:66:6a:aa:
81:01:44:7d:b7:52:8e:fd:c2:05:53:f7:87:21:8a:f3:59:36:
7f:6b:24:d6:e5:64:57:4e:20:eb:f7:e2:26:53:99:e5:c8:0a:
e7:ab:49:42:33:0c:18:81:2d:7b:2f:f8:2c:ee:00:0a:44:dd:
28:f8:dd:a0:50:c9:81:09:69:0a:56:30:46:b9:f9:46:a5:20:
c5:5c:32:4a:93:0a:1c:d9:e8:b1:b7:04:b2:13:03:77:2c:41:
ba:6b:b6:75:7d:51:61:6e:fd:cc:52:2a:91:59:11:78:0f:25:
e1:6e:3b:44:66:80:38:08:ec:a7:2c:e3:1c:52:58:b3:ea:ab:
5d:80:57:d1:a5:3b:35:b7:5b:10:e4:ac:21:ce:6d:2b:29:12:
a9:e7:aa:cf:95:2a:16:de:4c:16:e4:63:14:63:18:af:d3:5f:
61:c2:04:f4:ff:36:78:c0:b1:8d:8d:8d:08:30:3b:d8:86:2a:
9c:7a:27:a6:4b:0f:e6:bc:13:ad:c4:ef:e2:18:01:06:bf:b4:
ec:85:12:45:aa:9d:31:c5:af:2a:74:07:fb:ac:61:51:93:52:
6c:d9:ca:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:19 2025 by rpki-client