Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
File: UTIqxJAgylfHTzsUi8BBAsq63IM.mft (raw, json)
Hash identifier: eNl8eecnpWXNYPLWZJQQSmdYMjk3PMVLzEHELxv3qiA=
Subject key identifier: 9A:CA:11:17:56:E6:06:64:A3:72:F4:12:12:C1:46:46:48:47:34:BA
Authority key identifier: 51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
Certificate issuer: /CN=51322ac49020ca57c74f3b148bc04102cabadc83
Certificate serial: 01967944829ABFE9FE3AFF221AA4DADD1AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
Manifest number: 0FEC
Signing time: Sun 27 Apr 2025 22:00:54 +0000
Manifest this update: Sun 27 Apr 2025 22:00:54 +0000
Manifest next update: Mon 28 Apr 2025 22:00:54 +0000
Files and hashes: 1: UTIqxJAgylfHTzsUi8BBAsq63IM.crl (hash: pn2dqDku2arbvnVp9LnIM2tUC+t7511WxE4fx7OREwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:82:9a:bf:e9:fe:3a:ff:22:1a:a4:da:dd:1a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51322ac49020ca57c74f3b148bc04102cabadc83
Validity
Not Before: Apr 27 22:00:54 2025 GMT
Not After : Apr 28 22:00:54 2025 GMT
Subject: CN=9aca111756e60664a372f41212c14646484734ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:0b:eb:5b:75:e9:f1:de:d9:33:86:dd:03:
0a:64:f5:9f:26:58:c9:ba:0c:77:98:86:ad:5b:5d:
82:d8:82:a3:c5:09:3e:87:1e:b3:5f:43:59:65:f3:
9d:a0:7b:b9:fc:ca:8a:c7:f0:2c:66:66:67:32:c2:
4f:46:5f:a5:9e:54:1b:38:99:95:bf:57:a0:71:67:
f4:8a:bc:6b:27:54:8e:b9:69:1f:4a:4e:fc:59:f2:
ad:27:49:2b:b1:88:f0:f2:01:ca:35:03:34:c9:97:
bf:30:b8:ca:1a:3b:23:9d:dc:26:75:09:78:7f:25:
7a:ff:21:d5:61:8e:ac:cb:d4:61:6e:06:a6:12:87:
5a:a5:ff:f3:e6:e5:8f:67:1a:d1:f9:d2:03:e3:c3:
ca:9e:fe:63:71:f3:c8:fd:e3:3a:fd:5b:ac:d5:c6:
e6:50:80:44:4a:8b:b3:98:59:76:dc:0f:39:4c:36:
10:ba:ca:8d:2b:35:fc:db:be:4d:98:ea:ff:ff:66:
d8:cc:b7:f2:d7:22:b3:ed:6d:2f:9b:b8:b4:03:62:
1a:33:7f:27:64:d6:93:65:eb:ed:e6:18:50:c9:cf:
fc:c0:80:f0:19:6e:c5:66:b9:48:5e:50:d5:da:34:
f6:08:78:ca:c4:34:71:7a:e1:44:09:32:b6:48:1d:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CA:11:17:56:E6:06:64:A3:72:F4:12:12:C1:46:46:48:47:34:BA
X509v3 Authority Key Identifier:
keyid:51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f8:a8:d7:ca:dc:b0:48:0a:36:1c:b9:4b:03:bc:26:ac:2e:
54:ed:13:ea:d0:78:f0:d9:c1:63:f6:6c:3a:79:ac:dc:70:b8:
3d:72:18:a2:4e:ed:70:af:63:db:25:d4:eb:e9:8b:07:ee:64:
6e:a7:65:ad:fd:44:4f:ab:5e:ba:93:35:98:40:48:27:12:6c:
c0:c7:56:9e:a0:67:d8:2d:59:97:e2:11:83:a4:42:ba:9c:82:
e5:2a:97:3b:7e:6c:5e:a5:7f:e7:18:06:b6:c9:56:21:ea:f9:
4a:d1:36:00:e2:57:23:96:cd:af:52:85:b0:38:b9:78:e0:36:
f6:d6:18:cb:be:d0:2e:b8:64:96:82:a0:72:f5:5d:a8:eb:7d:
35:f0:41:c3:ef:b7:f4:0e:d6:8d:39:18:b8:53:36:74:09:33:
91:19:b8:0c:76:69:96:5b:2c:71:11:c0:d7:60:5b:04:d1:51:
ea:a9:14:0c:de:57:55:fe:79:4a:7f:88:05:0f:46:c8:3d:8e:
8a:c4:6a:6f:13:5c:e8:23:71:a9:d0:c8:5c:4e:50:08:ef:52:
1f:26:b5:f0:6f:70:34:2d:91:d2:cb:ac:ba:b8:e2:12:98:07:
ae:3e:21:e3:e3:d8:0a:2e:e4:80:03:10:e3:d0:0e:22:a9:cd:
ca:9a:88:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:25:05 2025 by rpki-client