Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/aca6e7-20d8-4f2d-adad-754413b98db2/1/UJFp9pOVg8wdvmUtulwMglBAoBI.mft
File: UJFp9pOVg8wdvmUtulwMglBAoBI.mft (raw, json)
Hash identifier: rz3IjPMiSeB5tEwOH0wU+yyIuFe9ayKaGMg/dMDkGbY=
Subject key identifier: 28:B5:D5:33:62:37:B8:2A:D1:1A:93:56:C1:52:6C:C4:3E:24:40:7B
Authority key identifier: 50:91:69:F6:93:95:83:CC:1D:BE:65:2D:BA:5C:0C:82:50:40:A0:12
Certificate issuer: /CN=509169f6939583cc1dbe652dba5c0c825040a012
Certificate serial: 0196458D7EBC3182ECB0381FFC7290038113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJFp9pOVg8wdvmUtulwMglBAoBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/aca6e7-20d8-4f2d-adad-754413b98db2/1/UJFp9pOVg8wdvmUtulwMglBAoBI.mft
Manifest number: 019A
Signing time: Thu 17 Apr 2025 21:00:22 +0000
Manifest this update: Thu 17 Apr 2025 21:00:22 +0000
Manifest next update: Fri 18 Apr 2025 21:00:22 +0000
Files and hashes: 1: UJFp9pOVg8wdvmUtulwMglBAoBI.crl (hash: wlmGzbzUWWmj0UUS4waqRVDMNb31fTf7hOns2Uto9Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/aca6e7-20d8-4f2d-adad-754413b98db2/1/UJFp9pOVg8wdvmUtulwMglBAoBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/aca6e7-20d8-4f2d-adad-754413b98db2/1/UJFp9pOVg8wdvmUtulwMglBAoBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJFp9pOVg8wdvmUtulwMglBAoBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:7e:bc:31:82:ec:b0:38:1f:fc:72:90:03:81:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509169f6939583cc1dbe652dba5c0c825040a012
Validity
Not Before: Apr 17 21:00:22 2025 GMT
Not After : Apr 18 21:00:22 2025 GMT
Subject: CN=28b5d5336237b82ad11a9356c1526cc43e24407b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:c9:e7:5e:ff:8e:3a:73:55:b3:3e:69:eb:
42:65:e8:61:f3:cd:3e:e6:c3:06:ad:f7:d6:83:32:
62:38:96:44:2b:1f:3b:69:a5:8b:ff:e7:3d:26:61:
f7:e6:af:a4:97:0d:68:15:d1:fd:12:74:e6:f2:a0:
26:bf:21:10:27:3e:c4:a6:43:76:1e:1d:15:ff:98:
a5:99:be:a5:75:0b:0e:fa:64:c1:73:2e:75:b5:ad:
0d:14:10:dc:ed:8b:ed:8f:df:ee:8d:59:ba:5a:a9:
f4:dc:f2:e9:64:25:e4:7d:2f:7b:97:c6:db:4b:eb:
ae:2f:67:2e:ec:82:47:61:ac:80:89:20:00:56:e2:
a7:0d:d2:74:c1:b7:d6:db:61:b3:b1:2f:6b:f5:e3:
a2:c1:3f:61:cb:fa:7d:8d:92:49:ca:30:e9:8c:07:
bb:0d:45:54:64:45:29:3b:5f:7b:1f:ea:c8:3c:a4:
d1:39:39:23:ac:66:32:37:11:c8:34:a6:ce:69:c3:
1a:a9:07:16:f7:07:e2:50:17:a1:be:6d:5c:73:8f:
da:ba:1d:38:68:ae:ba:ed:ae:c2:d7:f8:9e:6c:95:
07:67:6f:79:a2:00:21:eb:5d:71:be:63:36:f3:25:
f5:13:21:cb:73:5d:f2:90:66:6a:50:77:57:94:c0:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B5:D5:33:62:37:B8:2A:D1:1A:93:56:C1:52:6C:C4:3E:24:40:7B
X509v3 Authority Key Identifier:
keyid:50:91:69:F6:93:95:83:CC:1D:BE:65:2D:BA:5C:0C:82:50:40:A0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJFp9pOVg8wdvmUtulwMglBAoBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/aca6e7-20d8-4f2d-adad-754413b98db2/1/UJFp9pOVg8wdvmUtulwMglBAoBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/aca6e7-20d8-4f2d-adad-754413b98db2/1/UJFp9pOVg8wdvmUtulwMglBAoBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:29:d7:d2:b5:35:9f:67:0a:17:5c:ad:46:4b:04:7f:9e:39:
4b:58:20:91:a4:71:f0:cb:dc:58:57:de:cb:b1:79:4b:b6:cc:
f2:12:b2:d6:32:9b:bd:99:55:d9:c0:06:c8:c7:8f:23:0c:ab:
b3:88:66:f0:a9:44:49:16:01:69:9f:f0:a1:f6:e7:4e:10:2e:
c0:02:92:fb:cd:b3:49:07:21:52:97:dc:fb:da:cb:88:bf:60:
67:44:9a:1f:d9:79:b4:4a:f7:b5:67:c1:a1:b2:f3:f1:f8:60:
2c:66:83:95:db:e4:b2:b1:91:90:9a:51:a1:1e:8d:97:dd:b6:
28:64:67:00:1b:bc:93:50:28:60:b8:08:bc:29:65:b2:cc:5c:
ff:a9:d2:19:91:0a:5a:69:c9:54:90:b3:6c:c2:56:d9:3b:29:
b3:9f:69:f7:d3:0f:63:2b:78:77:18:4e:95:6e:23:33:99:ab:
72:50:56:2a:38:4f:8d:42:2c:fe:79:1c:bc:fe:08:88:ae:cf:
ea:b8:e9:35:5b:b1:02:7d:8f:07:a3:2d:3d:ef:58:90:88:82:
13:2a:83:da:fe:bb:3c:7a:f8:bc:d3:6f:94:26:50:45:44:37:
2c:da:de:b7:ce:e0:cc:20:87:6d:47:98:b5:80:de:4d:7a:8d:
55:8e:8a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:17:56 2025 by rpki-client