Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier: bFcgmYVmK+2tYvuKgXbJPWRhOQZkZ3XpVV/IzMQcXbI=
Subject key identifier: 41:5B:23:E6:62:13:53:BF:8D:39:4D:88:D6:D0:13:64:3F:6A:09:4C
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 0194BB9703F1D469AD0180210900803A6003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number: 0C35
Signing time: Fri 31 Jan 2025 09:00:23 +0000
Manifest this update: Fri 31 Jan 2025 09:00:23 +0000
Manifest next update: Sat 01 Feb 2025 09:00:23 +0000
Files and hashes: 1: 1aChBwHFn_Y97wW3zOT_TrzY-Gg.roa (hash: UAL0yJmtt1KwlB4MWHvUW6aFddSK59lFtlh2TR20NAE=)
2: PfJvGEuaav1QrKJkIZkHA6XmHus.roa (hash: Y1aIQgr+i9d0hMb4pqYLXmETQRV+DCr/9PVrQ2Inhs4=)
3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: IRMsFx/uSRpSX05FPzBWV/RSYbMXm3a6O2ZwY+CJd/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:03:f1:d4:69:ad:01:80:21:09:00:80:3a:60:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Jan 31 09:00:23 2025 GMT
Not After : Feb 1 09:00:23 2025 GMT
Subject: CN=415b23e6621353bf8d394d88d6d013643f6a094c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:77:57:7d:4b:2e:77:e5:a0:30:cd:58:c7:
7f:44:24:f6:7a:d4:4a:57:f2:58:f6:75:b7:00:a1:
2b:c9:93:dc:f5:4f:33:95:7b:40:e6:ce:c7:c0:49:
14:a1:61:ab:ae:ff:4a:b4:66:dc:6a:69:b9:29:ba:
89:d1:95:16:8f:21:20:80:a5:18:5f:f5:6c:91:e0:
f3:aa:f2:35:38:35:ed:b5:6e:19:43:dd:b2:9b:7a:
7b:08:86:7f:4b:e3:f5:b1:2e:01:b8:f8:5c:f4:6a:
73:7a:a6:8d:d6:73:db:65:86:a0:34:7a:ad:2d:cf:
43:6c:01:f2:89:79:58:96:1b:ca:1b:34:7f:a4:0f:
c8:15:1d:1e:f0:78:0b:6d:28:97:01:99:f2:50:6c:
d5:bb:5a:63:98:eb:09:b9:de:7c:5d:e3:fa:f2:37:
b3:9d:7e:1f:0b:c0:26:1c:58:be:d3:e9:67:24:4e:
55:fd:95:d1:4f:fa:73:4a:b8:ca:6e:39:76:d2:e9:
a5:78:18:a6:7e:8b:c5:19:ec:52:19:d3:c5:92:f4:
28:33:9b:ca:a5:28:45:15:62:34:bf:fb:74:5c:6b:
85:6e:36:5d:24:2a:0e:56:8c:56:a2:08:c6:57:18:
03:56:c4:8e:a5:a8:5b:ac:39:00:fa:dd:b3:95:98:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5B:23:E6:62:13:53:BF:8D:39:4D:88:D6:D0:13:64:3F:6A:09:4C
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:4c:9b:c3:07:e4:d9:df:ea:d9:93:e5:56:69:fb:56:ec:f0:
46:8f:12:33:c1:94:76:41:bb:9f:72:0e:88:a9:f3:3f:b3:94:
de:6e:98:aa:b5:a6:32:27:d0:44:48:62:d4:d9:a4:80:6e:83:
81:c7:41:ab:4e:c4:c9:a4:fc:70:e9:3e:c4:ba:d1:4d:64:da:
3e:a6:e7:79:39:01:2a:e0:46:19:a0:84:26:86:b3:91:55:22:
e7:55:8b:93:71:6b:5b:89:90:53:65:43:cc:19:4a:62:82:34:
82:fe:f8:94:2c:dc:7c:96:c5:e7:88:f6:c9:2e:d2:b1:c4:01:
e6:68:28:cd:26:d6:ca:ac:ac:f4:a1:75:3c:71:fd:ef:9b:27:
a7:6e:03:0a:4d:24:c0:3e:54:50:e6:2d:e9:8f:64:a5:9c:8b:
69:a4:f5:26:a8:89:33:1c:7b:f3:62:f4:0e:95:85:55:dc:86:
dd:fd:09:4b:4e:94:d1:bc:de:ff:9c:9a:c5:1b:d7:32:bf:89:
74:66:4b:e2:0a:0b:e1:81:73:51:aa:ff:a3:13:66:d9:5f:fc:
cc:1c:e1:03:be:d3:91:7f:fb:8f:9a:c5:ec:a9:5e:0d:9e:cf:
f1:40:bc:69:c9:c7:93:28:71:c7:28:f9:92:c3:70:f2:e2:ad:
74:de:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:26 2025 by rpki-client on console-fra.rpki-client.org