Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File: UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier: ANYs05eJx7dL6nbaSUrGaQGjNei6ON8SMmGOt1tyUDo=
Subject key identifier: A4:EC:3F:6E:D4:DC:6E:BB:52:C3:36:A5:B0:46:D4:86:EF:33:77:AF
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 0194BA84A0BC6870AEABBF223C1D15323316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number: 137B
Signing time: Fri 31 Jan 2025 04:00:41 +0000
Manifest this update: Fri 31 Jan 2025 04:00:41 +0000
Manifest next update: Sat 01 Feb 2025 04:00:41 +0000
Files and hashes: 1: FEtsoc8GhVwS-itqE7wFwW_E2l0.roa (hash: wzhGlUkDAVqaCjdqlX0sPOVL6b9f0X/6vMu8NbyqVQo=)
2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: tUtprHZNAvoVxVePFEtet5gF71hzLpxnEMllo+q4ZKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:a0:bc:68:70:ae:ab:bf:22:3c:1d:15:32:33:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Jan 31 04:00:41 2025 GMT
Not After : Feb 1 04:00:41 2025 GMT
Subject: CN=a4ec3f6ed4dc6ebb52c336a5b046d486ef3377af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d4:b6:9d:a7:24:9a:39:db:85:18:41:01:ad:
11:e0:08:81:97:14:7e:21:1e:66:4c:f9:47:10:a1:
e5:ff:17:1f:9b:4e:49:ed:8d:5e:9e:65:68:7a:98:
2d:5e:63:fa:dd:aa:93:cd:9e:cd:29:85:02:44:3d:
9e:88:d3:05:13:9f:22:1c:83:a4:3d:5c:76:e6:30:
0b:76:0c:6f:51:c6:18:40:fa:88:07:9c:78:6f:e9:
f7:4c:ee:c9:14:a6:c3:84:f7:62:e0:21:34:51:4d:
9a:5e:1e:ae:ed:6e:09:36:37:a7:3a:ac:f3:17:72:
98:56:b1:2a:d6:60:d2:61:97:d7:14:4d:86:08:fd:
5f:99:2b:39:2c:4d:77:cc:4e:dd:30:48:9a:fa:eb:
c5:6a:57:56:3c:bd:a0:34:82:0f:3c:b7:11:e9:5c:
6c:cd:18:f3:1c:7a:e3:b5:5d:00:d9:b5:69:4d:9f:
f8:6d:7a:d9:ea:5c:f2:6b:63:22:42:d2:39:5a:36:
6e:0d:51:66:b1:41:36:5a:da:38:3b:f3:7f:31:29:
b6:8a:4a:23:41:45:42:c4:8a:41:b6:ac:61:45:81:
b6:aa:3f:86:46:b4:99:98:3b:f9:89:73:34:19:bb:
4d:28:bc:3e:c0:3e:58:2d:28:0e:f9:12:31:ce:17:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EC:3F:6E:D4:DC:6E:BB:52:C3:36:A5:B0:46:D4:86:EF:33:77:AF
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:80:d9:40:12:85:aa:4d:a7:88:7b:49:e6:bd:b7:8b:6e:ce:
20:82:53:6d:07:f9:f8:c7:da:fb:c5:f6:20:cf:ff:e1:a5:7f:
11:d5:8b:16:55:4e:51:98:3a:e2:e4:5d:3f:b2:a1:ee:c7:f3:
7d:70:60:38:e7:1a:72:aa:83:6e:35:35:e8:26:43:68:5f:fa:
3b:ac:33:cc:4a:a0:80:fa:ec:5b:ab:72:af:e7:fc:34:12:d4:
45:f5:f2:fe:20:5e:39:25:4c:f3:99:fe:88:02:57:6e:39:c7:
7d:8e:01:55:a1:46:02:f6:a8:17:88:2f:77:e2:78:b5:0d:e8:
7a:0a:0a:3c:75:a7:32:c9:21:a0:77:10:85:97:ab:e4:bd:da:
94:f6:90:87:f6:a5:f7:cc:37:6a:00:bb:f8:e4:32:22:6f:15:
24:d3:90:14:f4:10:8c:dd:bd:5b:16:b7:6a:9b:38:d0:af:09:
51:df:15:ea:04:1a:fd:5b:8d:8f:59:e7:44:7d:c7:c9:09:21:
69:85:df:40:67:c8:df:19:d4:47:e7:16:ec:27:f3:28:55:41:
b1:2e:0c:87:4a:ce:cb:c5:31:3f:cf:5f:99:94:8f:54:fd:ee:
f5:bd:10:06:24:d5:34:61:9e:83:0f:bd:6a:73:d5:10:92:ec:
fd:5c:fc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:53 2025 by rpki-client on console-fra.rpki-client.org