Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: E8ZV255qfbtCUWZ0C/Jp68k6HA9QILdE2LaLFmvBhc8=
Subject key identifier: 86:D4:9C:DB:C4:35:CC:AE:F1:70:6B:6F:B4:50:D1:AF:29:38:F7:12
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 0194C4D171D61BF5C1F85B0CB20BED986B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 6A
Signing time: Sun 02 Feb 2025 04:00:47 +0000
Manifest this update: Sun 02 Feb 2025 04:00:47 +0000
Manifest next update: Mon 03 Feb 2025 04:00:47 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: lX/a+gPtjw7GSYPRkfYKGEDFuwXKbe5kecGk28dMBP0=)
2: iNwGfbYLkAH2rlFCulSAPqnTH9w.roa (hash: 6euWHB8ZjdeynJTDJCoVrf3EUVPGr55MZ7m5C1/4N/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:71:d6:1b:f5:c1:f8:5b:0c:b2:0b:ed:98:6b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Feb 2 04:00:47 2025 GMT
Not After : Feb 3 04:00:47 2025 GMT
Subject: CN=86d49cdbc435ccaef1706b6fb450d1af2938f712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:c6:f1:d6:de:7a:ee:fa:23:1f:df:69:3d:
ad:25:f3:a2:9a:d0:a7:5c:38:bf:07:88:41:0a:12:
49:da:ba:cb:6d:9a:44:dc:64:04:4f:51:d4:d8:c9:
41:06:19:7b:e4:01:bd:04:c2:2c:f1:a6:4d:81:f6:
1e:c8:ca:4c:8f:02:ed:71:31:8c:5b:9e:f4:20:81:
b1:4e:58:e0:4d:8c:2e:4c:c3:03:cb:82:44:37:46:
d6:c0:67:e1:d8:29:56:02:b8:b1:99:68:87:5e:59:
e9:43:0c:e8:65:69:8a:9b:ca:d3:18:8b:24:77:81:
38:a1:5f:e6:3e:e9:34:3b:7c:a2:0e:14:48:c3:d7:
f8:1f:32:93:58:6f:10:e0:ef:20:74:69:e5:45:d7:
68:0a:31:08:c2:83:b3:a2:ad:2a:22:39:c2:fe:6a:
91:2d:cc:38:39:19:df:7b:69:fc:0b:8c:37:16:a2:
14:51:cd:ec:be:db:38:5a:f6:1e:2e:7c:12:46:1b:
96:fc:00:17:46:b8:7c:78:cc:35:7f:78:1f:76:16:
b7:3f:4d:32:65:62:e5:7c:49:f5:a5:06:68:39:05:
42:4b:d0:3e:ee:b6:4e:05:2a:91:90:33:8e:e1:1c:
49:5f:61:0b:ff:b9:cc:42:fe:d8:f4:8a:64:36:ce:
a7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D4:9C:DB:C4:35:CC:AE:F1:70:6B:6F:B4:50:D1:AF:29:38:F7:12
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5e:9c:94:aa:c3:71:62:83:2d:7f:1c:ca:f0:70:5a:75:20:
9b:9d:53:09:6d:ec:75:b0:6c:ad:d6:05:27:ea:2b:8c:ca:07:
a8:f5:bd:97:87:68:be:89:0b:49:ce:c2:25:a7:2c:03:79:68:
b0:a7:1e:c3:c2:5a:20:fe:59:da:db:02:9d:aa:ae:1c:91:b4:
02:8e:dd:a3:27:bb:04:fd:3b:bd:2d:1d:85:cf:b0:bc:c2:57:
f1:42:bc:5b:b5:09:21:c8:d1:d0:7e:42:b0:41:da:26:5c:59:
20:5d:8b:18:fd:98:94:85:06:54:27:9a:0e:ce:8d:4c:20:64:
e7:63:0e:bc:d3:74:f6:79:9e:8e:4f:d2:78:5c:0d:99:fc:55:
4d:7d:5a:8f:62:89:b8:55:84:ff:35:28:95:86:d2:65:ab:09:
0d:c7:27:41:31:85:5b:df:e5:fc:9e:31:d5:f3:21:51:e6:1e:
b2:06:17:ba:01:e9:e3:e6:a4:27:dc:99:29:9b:b2:24:56:50:
26:9a:b1:04:32:d2:2d:31:34:6d:16:a2:86:55:79:78:86:e5:
6f:20:f4:5e:13:4e:4b:25:f3:18:b5:b9:2c:c0:46:6f:14:50:
65:b1:3d:5d:2c:04:98:9e:13:58:25:b9:e2:36:7b:a5:1b:60:
75:e4:08:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:19 2025 by rpki-client