Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
File: UvbBEDFTJEhSvLPiO23ioWuqen8.mft (raw, json)
Hash identifier: ZBs7fb1vb+ynOQqVlr3Ij+z/KeBjpJxOuDiih+kE8cI=
Subject key identifier: 3A:AB:CF:EB:94:BA:D4:AE:33:A1:68:BB:1D:45:6D:95:89:D0:C2:48
Authority key identifier: 52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F
Certificate issuer: /CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
Certificate serial: 0196775578314C3E1AF82BBBD23E6049473C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
Manifest number: 0F5C
Signing time: Sun 27 Apr 2025 13:00:12 +0000
Manifest this update: Sun 27 Apr 2025 13:00:12 +0000
Manifest next update: Mon 28 Apr 2025 13:00:12 +0000
Files and hashes: 1: UvbBEDFTJEhSvLPiO23ioWuqen8.crl (hash: qq/+tgwOloSb6SiSU+6f2XkNyz91mbk7cTPyCPtMxjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:78:31:4c:3e:1a:f8:2b:bb:d2:3e:60:49:47:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
Validity
Not Before: Apr 27 13:00:12 2025 GMT
Not After : Apr 28 13:00:12 2025 GMT
Subject: CN=3aabcfeb94bad4ae33a168bb1d456d9589d0c248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:3e:91:98:a7:61:fa:64:b0:45:40:69:45:
93:67:04:d9:d3:46:48:1e:e0:ad:63:0e:7b:1a:b7:
af:ed:cd:23:20:8a:3e:4e:15:80:3f:ac:17:36:12:
6e:22:e7:cb:f1:59:00:88:de:27:95:f2:8f:7e:30:
76:2f:2f:5d:85:6d:44:97:d0:20:a5:54:c9:83:23:
de:f6:de:3d:e0:cc:a7:e1:fb:ef:79:bb:72:93:9f:
b8:d9:fa:4a:07:b3:a3:ba:6f:dc:e1:06:81:0b:e9:
a1:a0:38:fb:6d:ad:49:d5:9b:af:63:3a:6d:22:b9:
d4:9b:8f:da:aa:73:0e:4e:02:12:15:d0:0f:4b:4b:
3f:c2:d5:bf:5c:3e:fb:04:f4:d9:b3:05:9b:b9:49:
0e:e5:a8:32:96:47:8c:c4:fa:4f:0f:b7:ea:9d:e3:
5f:ad:cc:64:11:70:e6:cd:3f:bf:08:8b:f7:e0:16:
bd:c8:67:0b:68:c9:af:78:fd:7b:bd:57:0f:cd:20:
41:68:55:56:ed:89:d1:23:c4:53:15:82:3c:c8:81:
aa:f5:b0:29:72:fe:35:ce:7a:9e:50:fb:28:ba:d1:
80:c4:7e:6e:29:2c:67:a1:40:c5:68:54:36:7b:fd:
fb:83:bf:0f:46:11:e3:de:7c:84:8d:e4:12:86:f3:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AB:CF:EB:94:BA:D4:AE:33:A1:68:BB:1D:45:6D:95:89:D0:C2:48
X509v3 Authority Key Identifier:
keyid:52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0a:82:34:d1:47:3a:c2:69:48:18:85:b8:c3:4b:ea:4b:67:
3c:47:d2:8c:74:57:32:01:af:2b:c5:57:91:62:16:62:63:9b:
9f:23:ae:1e:2a:f4:05:d9:2f:3a:04:49:8e:bf:4d:bd:38:04:
99:c4:b5:f0:c7:e2:cb:48:57:43:aa:3b:9e:3d:74:82:f6:4b:
25:b9:0c:ed:ef:42:99:96:cd:f5:c6:9d:e6:57:26:f1:b7:6c:
44:44:ac:a5:1f:de:85:90:40:e3:94:b1:18:75:3e:f3:0d:1d:
10:09:23:af:3e:a0:fb:99:64:73:29:97:7b:4a:7c:d1:f5:86:
13:fb:00:48:37:11:59:d3:19:35:d3:35:5a:34:bf:83:6d:a6:
1c:16:2e:e1:2d:01:12:48:93:3c:4c:6b:29:93:08:f6:34:4c:
16:05:96:7c:55:b4:38:4f:76:c2:88:b0:36:34:ea:13:f7:d0:
66:51:9a:91:32:f4:26:01:ab:6e:34:54:29:56:3a:33:e0:59:
72:9b:eb:67:16:47:29:5b:50:88:31:11:39:d3:9e:21:1c:0c:
74:e2:f7:c3:87:9a:fa:34:d4:ae:3f:26:91:29:a5:3b:41:f4:
80:c6:b5:2e:8b:b4:82:5d:79:17:5e:b5:54:58:5b:e0:10:df:
22:cf:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:21:20 2025 by rpki-client