Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
File: Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft (raw, json)
Hash identifier: w2ZyFAktHnZsz9Oav31AY3AnKmUaYNyPbO1lTJvCi7w=
Subject key identifier: ED:B8:1A:D6:F4:5D:5B:00:6A:06:00:95:A3:D0:A6:ED:80:CA:42:EC
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Certificate issuer: /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial: 0194C387A0ACC0BA4CEF3E4A850E92ED48B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
Manifest number: 05E7
Signing time: Sat 01 Feb 2025 22:00:33 +0000
Manifest this update: Sat 01 Feb 2025 22:00:33 +0000
Manifest next update: Sun 02 Feb 2025 22:00:33 +0000
Files and hashes: 1: Jwm-Y1gLbkw4UaAdwxRZjNwmTZo.roa (hash: Q969PgNrXLr8Br8ONSHHTQG/i49jEw6PhYCVXnskszU=)
2: Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl (hash: e3c8Fl7QZF14rTS6KNGbreSiNgzy8VJ2xL42RwESDtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:a0:ac:c0:ba:4c:ef:3e:4a:85:0e:92:ed:48:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Validity
Not Before: Feb 1 22:00:33 2025 GMT
Not After : Feb 2 22:00:33 2025 GMT
Subject: CN=edb81ad6f45d5b006a060095a3d0a6ed80ca42ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:e8:ea:ab:6a:a7:7f:16:e6:d7:d4:e9:2e:
07:3f:80:c7:31:2c:40:e9:e1:af:31:77:6b:66:85:
9a:91:5d:ef:d5:49:04:79:2c:4a:26:aa:5a:17:9e:
a2:cc:2f:92:cf:40:4b:f9:d4:e7:17:23:7d:43:72:
e4:97:ba:84:1e:47:73:11:d9:98:13:69:6f:4f:f1:
c8:86:29:c1:d0:da:d6:40:39:31:82:2b:97:6b:46:
8b:f1:8a:42:72:49:c5:de:8c:f7:02:85:c6:9a:25:
97:5f:c6:49:8d:36:1f:6b:af:fe:1e:ce:ff:70:e5:
e4:78:88:f0:0b:89:ba:d5:4c:fc:36:76:ca:9c:9e:
f9:35:90:59:25:5b:91:00:c9:9b:8f:3f:d5:a7:bc:
59:35:72:f1:ee:5a:3b:8d:f8:02:9d:84:a8:90:60:
6f:51:33:8b:db:51:2f:b9:e2:a9:0a:01:ec:61:09:
ee:70:3d:b1:88:5b:06:30:c4:dd:11:fa:2f:82:c4:
9f:a7:7b:c7:86:d9:b9:36:b8:4b:a9:43:6d:87:49:
ef:f1:07:68:a0:ea:f7:d9:a4:3c:ad:7e:52:6f:15:
c5:5f:e8:dc:3a:8d:5d:67:df:6c:0f:03:19:12:c5:
04:3c:e1:62:c7:b2:5d:f6:31:c0:3a:c0:68:44:20:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:1A:D6:F4:5D:5B:00:6A:06:00:95:A3:D0:A6:ED:80:CA:42:EC
X509v3 Authority Key Identifier:
keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:58:28:ce:77:ab:02:2c:59:43:d8:60:f3:cd:ab:ed:33:f1:
20:27:9a:6b:f7:75:33:99:ba:30:72:49:e9:13:05:cc:a8:ac:
f9:a0:bc:8c:71:83:2a:3a:34:32:d5:84:23:4d:ee:fe:1c:e9:
58:3f:89:c7:9b:a2:22:fa:d5:aa:82:92:45:7b:b0:ab:78:6e:
19:ad:ba:d5:58:88:20:b1:50:52:1a:c2:84:15:56:02:f5:b3:
92:11:9a:c3:b2:94:58:56:13:4d:36:76:88:f9:6e:0f:d0:a3:
68:95:14:17:c0:4f:87:2a:04:c6:8b:1b:2a:bb:7a:12:e9:3a:
91:7a:57:34:56:f9:f1:2a:10:61:a4:5f:dd:1d:e8:e7:af:3d:
a4:a5:9a:b0:fb:08:23:a2:03:fa:65:ff:8d:fb:19:29:80:5c:
9f:24:73:ca:52:95:75:1c:d8:df:79:d4:94:9b:49:d6:70:aa:
38:9a:a4:5b:6f:ff:fa:32:48:1c:e9:89:aa:56:08:77:f5:ca:
72:f4:f0:06:11:6a:7e:a0:f8:07:62:bf:1a:0e:85:ab:2e:af:
70:f9:3c:a3:a2:22:ec:81:7a:8d:02:05:7a:2c:a6:e6:9b:49:
c3:fc:af:b6:f6:1c:41:55:9f:2d:bb:57:3d:92:7a:d5:98:16:
98:56:cf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:42:43 2025 by rpki-client