Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
File: i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json)
Hash identifier: a0Ih3YNSCPO9gETtlygnt9/0AZSqEycadAfvr5oJXVQ=
Subject key identifier: 16:C7:07:F6:B8:38:24:DA:15:70:8C:B8:D2:0C:CA:68:7F:4B:49:13
Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
Certificate issuer: /CN=8bf51b464614799976577d5ef7a8078ea80c1743
Certificate serial: 019655DCB0B7B8447FCBDB3DF664E600FD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
Manifest number: 03EB
Signing time: Mon 21 Apr 2025 01:00:48 +0000
Manifest this update: Mon 21 Apr 2025 01:00:48 +0000
Manifest next update: Tue 22 Apr 2025 01:00:48 +0000
Files and hashes: 1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: ylCbjYk7XLJJ9DcdOs8Gdh2IFOTn/DGFBJPSdMVoTRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:b0:b7:b8:44:7f:cb:db:3d:f6:64:e6:00:fd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743
Validity
Not Before: Apr 21 01:00:48 2025 GMT
Not After : Apr 22 01:00:48 2025 GMT
Subject: CN=16c707f6b83824da15708cb8d20cca687f4b4913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:93:42:6a:cd:a9:0b:84:7e:4e:e1:fa:57:
6e:98:3c:95:02:11:02:a6:5a:84:cc:95:0e:9c:f2:
6d:21:b2:50:04:11:f0:05:14:06:c7:dd:4e:01:21:
9a:11:b5:bb:f3:ab:f3:d9:7c:a1:10:b3:34:bd:5d:
d5:e4:82:b9:c9:6a:b6:1a:58:42:93:34:cb:66:4c:
ce:27:dc:50:66:18:af:89:fe:cf:7b:8e:9f:7f:da:
ed:63:7a:4a:28:ed:85:51:7e:dc:90:6c:50:8c:41:
07:5c:58:65:66:bc:f2:d1:2b:ba:91:17:d9:6a:0a:
c1:2a:6a:77:1f:1b:4a:46:af:68:b8:21:74:15:e1:
87:a9:16:ab:a1:69:ed:a6:35:51:82:cd:2b:62:a6:
eb:37:32:6a:16:43:ef:f8:0b:95:b6:f9:e3:da:6a:
b8:dd:bd:63:73:19:92:3b:f6:54:3c:a6:21:25:52:
54:72:55:45:30:2f:fb:bb:be:34:58:72:aa:ee:d1:
66:64:12:9b:e1:c4:b7:c6:10:6e:7c:03:48:9a:3b:
d7:dd:04:06:f9:75:cd:b7:65:95:f0:10:5a:c5:b2:
52:81:af:90:12:d5:62:d3:44:b6:27:05:9e:3c:7d:
f6:5b:e8:b7:f7:65:82:a9:a5:cd:f1:ee:80:90:1c:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:07:F6:B8:38:24:DA:15:70:8C:B8:D2:0C:CA:68:7F:4B:49:13
X509v3 Authority Key Identifier:
keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:86:db:47:68:ac:db:8d:96:fc:56:a7:9d:c7:80:7b:4d:ad:
09:e6:04:34:50:ac:04:d6:03:db:dc:56:cd:60:c4:35:c2:4d:
6e:9e:87:3e:25:38:37:23:aa:d6:50:51:6c:b8:b9:66:df:2a:
84:66:6a:9a:97:06:d1:6a:06:61:7f:20:31:3d:71:18:0f:ba:
ac:ea:bf:c3:74:14:0d:a1:4b:0b:39:2e:6f:c8:5e:92:57:46:
d8:de:7f:56:dd:e9:98:17:b7:ed:71:37:db:22:19:1e:df:4b:
ec:f1:fb:da:eb:38:53:fe:a1:12:ae:cb:a9:ca:b5:e6:76:0b:
44:19:63:4a:b1:5f:44:f3:5f:96:e2:fd:37:96:5f:e4:1e:ff:
63:f0:9e:23:6f:79:e0:ac:e4:e4:db:40:93:30:78:70:04:cb:
af:ae:8b:b9:e2:22:52:43:78:ea:6b:aa:45:ce:94:4e:97:1b:
55:aa:5a:18:74:e2:f6:eb:ca:41:65:52:17:96:5e:23:35:ef:
01:8e:ae:15:36:e9:bd:32:ca:9d:87:9b:b0:0c:94:82:67:15:
b2:ad:15:88:74:37:87:d9:6c:38:d5:60:ed:ac:74:e7:4c:c5:
5c:2c:e5:ce:c8:01:07:8e:38:30:be:e5:62:05:0d:b7:53:88:
56:9a:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:49:01 2025 by rpki-client