Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier: Ix7Yrs7RYqBCNjcasoJh60mNjULR16755iZacSvmacY=
Subject key identifier: 79:03:7D:F7:96:D4:32:B2:06:C4:D1:35:C0:02:C9:89:F1:64:73:82
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial: 0196760C90B28767DEDF7F9F43410E78BD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number: 1509
Signing time: Sun 27 Apr 2025 07:00:57 +0000
Manifest this update: Sun 27 Apr 2025 07:00:57 +0000
Manifest next update: Mon 28 Apr 2025 07:00:57 +0000
Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: Ki4GAEsvTgXPwGLvcDtn1BzD+ksr8zQnaEtg5HO66RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:90:b2:87:67:de:df:7f:9f:43:41:0e:78:bd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
Validity
Not Before: Apr 27 07:00:57 2025 GMT
Not After : Apr 28 07:00:57 2025 GMT
Subject: CN=79037df796d432b206c4d135c002c989f1647382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:06:0f:20:3e:3f:ef:98:65:6c:d2:6e:42:
33:d6:56:19:c4:78:b6:b7:7b:00:f1:1c:6a:f8:49:
77:ea:55:e1:6d:1e:c4:2e:f4:c3:cf:01:b9:d7:6f:
fa:38:07:0d:8a:0e:d5:7d:b4:3a:04:75:49:5a:80:
f9:8c:04:35:6a:a9:3c:02:4a:46:be:0b:0d:02:7b:
98:0d:5d:b2:94:93:94:be:98:f1:b6:fc:14:8e:ce:
9b:04:73:8e:b7:4b:c7:ed:e8:36:0a:86:39:3f:c0:
15:bc:c6:ad:fe:9a:84:98:d6:e3:3b:15:e6:29:54:
62:1f:0e:f9:6c:7b:22:f7:5b:a4:08:00:50:05:7d:
d1:54:44:45:ab:19:74:7d:4f:f3:b9:53:72:8b:33:
2d:7e:3e:fc:c3:4d:31:d3:d3:9b:b3:31:9f:cb:e1:
b2:1c:d0:87:54:9b:55:c8:f3:81:f3:11:a8:f2:13:
78:90:d4:be:3f:3d:c9:31:aa:7e:42:f9:56:23:5d:
29:c7:f1:a5:5d:57:9a:9b:c2:10:1c:0a:9e:6d:92:
b9:d7:1a:b0:d1:6a:c3:b4:61:a1:88:34:86:99:4e:
21:01:66:92:37:61:63:e8:de:42:0f:88:8e:2c:ab:
61:8c:08:95:b4:32:1b:c7:49:00:7e:f3:02:03:44:
b7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:03:7D:F7:96:D4:32:B2:06:C4:D1:35:C0:02:C9:89:F1:64:73:82
X509v3 Authority Key Identifier:
keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:26:ec:71:b6:d1:c5:e1:68:de:c0:0d:92:a6:3e:50:f9:d7:
78:b7:d1:3f:81:65:67:94:fe:74:4b:8c:93:3f:14:4e:e5:c7:
67:5c:3e:ce:b9:5c:b9:70:b4:99:d6:41:f8:a8:fd:c9:ca:cb:
32:96:39:d4:3a:94:89:03:f0:53:01:d3:92:23:9a:64:9d:b4:
b5:95:82:ce:63:f1:b6:5d:da:b5:04:cd:1b:55:72:02:0c:59:
ca:aa:51:6b:7f:cb:82:7d:20:7d:87:21:f7:33:9d:73:bb:e9:
71:b9:27:5a:0e:78:48:69:ed:04:88:cc:3a:c3:76:64:c7:38:
5a:07:c2:50:72:b8:2a:29:0c:da:fa:f7:54:ac:59:aa:66:28:
a4:40:47:21:64:7a:e1:f7:c5:22:79:61:42:88:64:a2:06:ed:
93:a5:b9:ba:88:f9:dc:f9:97:79:4e:08:9b:92:e7:59:45:92:
a6:c3:5d:53:54:3a:d6:6e:52:e7:3f:5e:3a:e1:c0:9c:49:a5:
f6:c5:8e:43:4a:cd:0b:fb:71:dd:9e:fa:d2:fd:39:cb:ef:32:
01:51:a1:43:92:49:c0:14:8d:2c:cd:20:98:95:c6:2c:e3:8a:
47:06:53:36:59:8e:3d:57:49:6b:c5:4b:2d:6f:fe:45:ea:4c:
3a:17:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:00:51 2025 by rpki-client