Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
File: i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json)
Hash identifier: CjCc2oayK5XnoQjiTFwbg2jvCtRK+mLNbbI7ExVsorw=
Subject key identifier: A7:0F:27:CF:00:C0:4A:BF:06:3E:5C:BE:D0:1B:68:5B:04:91:60:57
Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
Certificate issuer: /CN=8bf51b464614799976577d5ef7a8078ea80c1743
Certificate serial: 0195116B9FB1186D126A590CA9F50DC09E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
Manifest number: 0343
Signing time: Mon 17 Feb 2025 01:00:20 +0000
Manifest this update: Mon 17 Feb 2025 01:00:20 +0000
Manifest next update: Tue 18 Feb 2025 01:00:20 +0000
Files and hashes: 1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: xOOw3QxvRnztt31CAUB25wqToa39UrKaq+4d6fTZQWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:9f:b1:18:6d:12:6a:59:0c:a9:f5:0d:c0:9e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743
Validity
Not Before: Feb 17 01:00:20 2025 GMT
Not After : Feb 18 01:00:20 2025 GMT
Subject: CN=a70f27cf00c04abf063e5cbed01b685b04916057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:90:5c:8c:2a:1f:85:6b:c0:ee:90:e4:28:
24:5c:a1:9d:fc:f7:db:8b:21:7a:1b:e2:2e:c1:c3:
c9:be:11:fd:37:4b:94:a6:47:c0:cc:9d:b2:d6:90:
d6:98:12:ab:c9:9e:08:23:43:71:c8:9c:e2:5b:cd:
83:65:12:79:65:b6:31:13:57:83:31:93:19:3c:7f:
73:c2:a1:37:f5:b1:36:cb:fe:e8:21:b9:ce:df:95:
56:9f:9c:40:96:88:f0:b0:26:51:fc:f4:ab:5b:09:
d3:04:0d:23:85:14:40:5e:b7:42:0c:8f:97:46:61:
68:a3:73:0e:dc:62:0d:00:c5:5f:1f:2f:9a:09:22:
4b:2a:34:e1:b2:ae:8c:98:f9:50:a9:d1:29:e1:80:
bf:35:5f:34:81:82:68:21:91:ee:c2:9e:0c:b0:75:
e9:a7:40:39:71:45:7f:a2:99:71:f2:6c:bc:06:50:
c2:03:24:48:eb:27:74:bf:aa:4b:86:4f:9a:73:89:
16:81:81:cb:ad:0b:6d:42:1d:0b:8d:75:74:a9:ea:
4f:93:2d:26:04:1c:15:a3:81:9f:f1:14:47:41:6c:
8b:02:09:2a:12:da:14:b8:3c:76:fe:e6:86:aa:c3:
fb:e2:3b:b6:11:44:b4:d9:73:99:fc:28:7c:3b:04:
3e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0F:27:CF:00:C0:4A:BF:06:3E:5C:BE:D0:1B:68:5B:04:91:60:57
X509v3 Authority Key Identifier:
keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c4:76:4a:74:2a:ec:65:8c:5f:53:39:b8:46:59:cb:6e:2a:
1a:de:c5:22:f0:03:13:e3:5e:95:75:1c:01:15:b5:db:9d:4e:
5a:5a:65:df:88:ca:fd:b7:80:fd:c9:1b:3a:fd:03:76:d6:81:
6b:07:ec:a9:a1:da:3c:ee:a3:71:18:43:f5:b0:1d:d7:e7:c3:
e9:5e:4a:dc:a8:a8:ec:d3:09:e0:4c:75:01:1c:af:dd:9d:83:
d2:49:5c:e0:7c:a4:85:aa:85:f7:1a:3c:5d:6f:8a:b2:d8:0c:
c6:e9:40:16:f1:37:c7:65:fd:fc:45:2d:97:39:da:10:39:f0:
c7:62:24:61:97:53:79:98:f3:aa:41:2b:34:0e:d4:19:19:e1:
4a:31:7b:47:20:07:96:63:eb:f8:20:d2:32:bd:2a:b6:e6:92:
21:33:a4:a1:87:35:94:44:51:71:95:07:e2:8b:47:94:f1:8c:
f1:ff:0c:83:b4:c1:c0:97:26:62:b9:6d:00:0f:f7:39:97:44:
9e:e0:c5:13:81:cc:e1:5f:be:d4:52:c7:00:b5:ed:bf:e1:49:
86:95:51:28:d7:e5:f8:1c:6c:b3:21:b9:9b:79:77:9d:69:b0:
d5:02:f2:c2:19:c1:c2:3b:4b:4b:78:8b:3d:55:1b:17:e4:85:
bc:e7:e3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:16 2025 by rpki-client