Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
File: UdspKXLBDGn5fs0k8vtptPZ3beg.mft (raw, json)
Hash identifier: QGRF0smwi4XqeUUshvLN2ttltOn4fRUEo2E0ncuRgbY=
Subject key identifier: 43:6A:EF:0B:20:AA:3B:1B:CD:26:42:11:D3:B9:2A:42:AE:AF:2F:EA
Authority key identifier: 51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
Certificate issuer: /CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Certificate serial: 01963C1D3F9AEC3B992E8B0CE88E22E9E9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
Manifest number: 14EE
Signing time: Wed 16 Apr 2025 01:01:11 +0000
Manifest this update: Wed 16 Apr 2025 01:01:11 +0000
Manifest next update: Thu 17 Apr 2025 01:01:11 +0000
Files and hashes: 1: UdspKXLBDGn5fs0k8vtptPZ3beg.crl (hash: RvM0Guc4gmGC3xZsYMIJe73qijVys8AI9np6IjwtUBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1d:3f:9a:ec:3b:99:2e:8b:0c:e8:8e:22:e9:e9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Validity
Not Before: Apr 16 01:01:11 2025 GMT
Not After : Apr 17 01:01:11 2025 GMT
Subject: CN=436aef0b20aa3b1bcd264211d3b92a42aeaf2fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:2a:74:1c:07:93:dd:fe:91:6d:0f:eb:ac:
7e:4a:e5:a9:0d:c6:ee:4f:23:89:11:2a:27:9f:b2:
b8:bb:38:f2:e9:8b:b0:6c:05:a2:8d:5f:ef:cc:33:
4b:22:94:e4:9f:ed:25:76:f5:98:a6:0a:a3:25:50:
2f:e5:31:2c:11:1d:b3:e9:da:8b:55:8e:f0:03:39:
94:c7:28:ad:4d:52:0b:ed:44:d2:a1:2d:6e:db:ee:
68:b8:f9:b5:54:22:a4:31:a1:9a:dd:75:e2:f0:2b:
97:05:ac:f1:de:08:f8:ca:d0:4e:1f:78:4a:ef:5e:
9d:b2:fb:05:af:de:a6:5c:3e:b9:91:f3:bf:c6:37:
6c:c4:43:02:b7:b3:fd:1b:69:43:ec:51:69:c9:9f:
cb:3f:c8:19:bf:28:ba:ab:34:30:1e:20:77:25:de:
2c:2e:bd:fd:aa:57:92:d8:05:7c:c1:85:e6:85:ba:
90:6f:06:07:c6:6a:a9:79:67:4a:62:a3:21:ea:06:
3f:fd:b4:71:90:1e:07:e4:a1:10:8b:d5:56:59:61:
37:1d:f4:47:c5:f9:16:88:ee:76:87:94:ea:3b:79:
38:0d:ad:95:4c:99:ab:b6:ad:ea:e2:70:b1:45:eb:
e1:fa:da:43:c9:ef:90:8b:95:30:5b:41:59:53:ba:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6A:EF:0B:20:AA:3B:1B:CD:26:42:11:D3:B9:2A:42:AE:AF:2F:EA
X509v3 Authority Key Identifier:
keyid:51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c7:21:0f:6e:9a:29:c7:59:e4:e4:51:8d:c6:ea:94:f0:00:
83:7e:be:75:60:d5:1b:8f:47:58:fa:6e:22:2a:03:5b:f8:c7:
13:a1:fc:5d:19:7c:70:e7:27:3c:a8:bf:0d:7d:2c:76:93:4e:
14:6d:6f:2b:06:33:03:60:a2:cd:d6:89:e3:d2:4e:8e:bc:77:
ea:34:ed:f6:f2:73:cd:3d:26:1c:91:9d:6d:95:94:66:e3:b3:
eb:3e:a6:4c:90:fb:c1:92:ae:b1:10:cf:65:b8:fe:28:eb:73:
d0:81:ff:12:39:5c:ab:ff:bc:92:86:ee:66:7b:73:84:94:62:
1f:e3:7a:ea:dd:9e:c1:84:6b:63:e7:c4:b2:95:da:f9:90:ef:
b4:41:84:4f:c3:44:2d:d2:40:27:90:cc:db:35:21:49:e2:bb:
61:a8:5c:19:28:4d:ea:93:fe:39:07:96:25:bd:3d:06:e8:d9:
79:91:1e:bb:5c:7a:ee:67:8f:ae:49:ac:ec:a5:b7:4c:bb:f7:
d0:86:b9:b3:56:1b:5e:ba:ec:59:84:73:36:56:a8:0e:63:66:
fe:e4:e0:43:10:53:ee:3e:49:5a:a4:e1:52:30:ba:7f:a5:79:
cb:a8:30:8b:78:77:9c:2f:6c:f0:2c:1b:2d:70:3d:88:65:d8:
b0:d3:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:33:36 2025 by rpki-client