Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json)
Hash identifier: uP1MtR8v8tJ/vDoFvXtMB015YoXUkQ3gC5XjU6xxF5E=
Subject key identifier: 03:87:C0:80:85:C9:01:0C:72:06:77:EC:04:CC:D9:BE:7E:C6:6C:0A
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial: 0194C3BE9B417F9A7A16148B04DBEE6D7845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
Manifest number: 0F69
Signing time: Sat 01 Feb 2025 23:00:36 +0000
Manifest this update: Sat 01 Feb 2025 23:00:36 +0000
Manifest next update: Sun 02 Feb 2025 23:00:36 +0000
Files and hashes: 1: gmoUpsRbFiMA-YVm7rfIcmrKKCY.roa (hash: f5UVu1D2xToivyREz3dQQgbmn+Oo7D3EEy08Tqhgqrs=)
2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: 8tNhNflhrTrc5DAlz3/rxfHlml+dwyGzeapW22IXvqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:9b:41:7f:9a:7a:16:14:8b:04:db:ee:6d:78:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Validity
Not Before: Feb 1 23:00:36 2025 GMT
Not After : Feb 2 23:00:36 2025 GMT
Subject: CN=0387c08085c9010c720677ec04ccd9be7ec66c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:c1:0b:40:d5:5f:77:ee:94:ed:0a:d9:0a:
7b:f9:20:82:30:42:5f:48:a3:93:a6:bd:1b:3a:fd:
3a:cc:e5:88:5b:ea:02:ff:a6:43:31:22:4b:fa:7e:
18:d8:15:52:74:5e:5b:b7:c1:57:43:00:be:0c:60:
43:67:3a:2a:56:b3:65:aa:3a:c4:95:d3:26:0d:8a:
64:8e:05:e1:7a:be:bf:f7:31:8c:3b:64:38:29:97:
dd:28:e9:51:37:e9:f3:77:62:cb:58:34:39:84:b6:
0a:a1:51:85:aa:a0:ea:57:f4:72:e4:ba:f2:ff:e5:
6d:5b:ff:43:84:97:34:98:95:57:1d:30:d6:ec:e1:
40:b8:3e:45:a3:28:0f:b0:e9:0d:6a:cc:6c:03:db:
34:dc:6a:66:12:55:eb:b3:e9:d5:a9:f1:16:ba:82:
e7:1e:45:f5:ff:ba:8e:f1:f8:25:6f:a8:79:9f:d0:
fd:70:6b:46:e9:32:89:f7:a4:b0:dc:84:3b:bf:b6:
58:a8:1f:bf:7b:53:81:cc:d1:16:f4:b8:67:3f:a0:
95:e7:33:4e:e8:27:80:d2:b5:61:2f:11:f0:37:19:
59:3c:d3:83:e7:f9:37:d6:81:75:f5:45:ce:fc:dc:
3c:79:21:fd:89:fc:22:c8:2a:06:5d:02:bb:6b:00:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:87:C0:80:85:C9:01:0C:72:06:77:EC:04:CC:D9:BE:7E:C6:6C:0A
X509v3 Authority Key Identifier:
keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5e:db:a6:ee:cd:5f:69:b9:4e:e4:57:a7:76:a0:ea:59:ac:
b2:65:3f:d8:8f:7d:2b:3a:14:28:99:83:8f:1e:c6:ff:8b:e9:
af:aa:94:0a:7d:cb:c0:42:39:76:c6:81:11:94:06:2e:07:33:
fc:10:5e:f8:3e:39:13:a1:99:bc:33:c8:1f:3b:2b:f5:09:a5:
39:94:b4:9c:c5:ce:c1:20:a2:65:0e:34:58:86:61:13:37:8f:
eb:5a:ca:d7:c4:c8:7c:94:91:fa:a4:8f:a0:9e:05:25:21:11:
97:b6:fc:3f:ac:78:9d:2e:0b:06:9e:a9:d4:ce:87:35:3f:31:
df:f9:c7:59:dc:95:26:27:83:d4:02:41:ed:95:23:0b:81:fe:
92:86:6f:3a:d7:5f:ff:ce:b6:79:e3:8f:a8:81:ae:ca:ec:8f:
18:31:07:51:8d:49:a5:6d:c0:19:36:ce:f0:33:ce:8c:ba:2b:
a0:f9:00:70:69:df:df:8d:76:0f:ec:58:7e:1b:e8:99:36:33:
b9:c6:9f:fd:5f:8f:a9:37:77:2a:c0:ce:4b:64:9b:4b:8e:3f:
41:62:31:dd:36:06:18:85:38:41:4e:6d:55:5d:6d:66:15:b4:
cc:ba:35:a5:51:03:51:fc:53:e8:35:e9:b7:4a:1c:be:af:55:
66:8d:6a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:36 2025 by rpki-client