Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
File: uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json)
Hash identifier: kg0AfpX4nQ4oOObkJjhnu2kpSpdVw3pT8ArimFdD9VE=
Subject key identifier: 17:79:E9:A3:C8:9C:EE:04:A2:2F:96:7B:CC:57:4B:1A:71:47:94:B8
Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
Certificate issuer: /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Certificate serial: 0194BC04C4A9658C3E3016CE45C5C4A86686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
Manifest number: 0843
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: _M8jdVXBLepBqO_3Zez_e6x2zw4.roa (hash: eZyfLyYE2Xw4ZTr06KMTpykro4FTlkDr9TejnMS2e4E=)
2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: AVrngU5kRTVrqOHcMYwwAHPGXk9vCCvFF3EoC8tPGHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c4:a9:65:8c:3e:30:16:ce:45:c5:c4:a8:66:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=1779e9a3c89cee04a22f967bcc574b1a714794b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:da:34:f6:0d:70:1e:1e:e8:f6:7c:5b:9d:86:
61:25:43:5e:fb:c0:13:59:1f:a6:b2:da:78:40:18:
9c:d0:e2:4b:3a:52:1f:59:4e:01:4d:b9:75:0e:00:
83:f6:86:18:12:71:b2:bb:db:c4:33:81:19:b1:bc:
a8:d8:a5:25:f1:21:0f:5f:c2:c1:71:9b:77:84:b5:
ed:f3:86:8f:28:56:11:b0:b5:dc:2e:e3:2b:ee:7d:
c3:e5:f3:a2:2f:3c:c5:a6:8a:47:2e:69:e9:bd:af:
f8:f0:68:0d:4d:cf:a8:2b:ce:f5:c2:2c:75:03:2e:
9a:50:78:c2:9c:6d:1d:f3:99:fe:e5:a3:9d:57:c1:
d5:08:34:b2:af:a7:62:0b:37:1d:9f:22:fe:d9:a1:
df:03:f7:c9:2c:63:1f:aa:2e:3d:a8:6d:a2:8f:a1:
79:0a:4d:bc:ca:51:89:e7:2c:18:63:b0:7b:31:54:
74:1c:4b:ae:95:91:49:ef:44:b2:05:a9:7d:00:cb:
e7:58:7c:f5:77:e0:6d:97:0a:e7:0f:5c:30:4c:41:
5d:08:83:1f:f6:f5:9d:8d:a2:70:41:ee:19:af:90:
99:aa:50:7d:51:c1:64:a5:a8:29:c4:81:83:20:68:
57:e0:39:2c:67:95:71:2f:70:7b:ab:ae:8c:e2:7e:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:E9:A3:C8:9C:EE:04:A2:2F:96:7B:CC:57:4B:1A:71:47:94:B8
X509v3 Authority Key Identifier:
keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:65:30:00:e4:c8:bb:68:54:e8:81:49:3b:67:ba:64:bd:e0:
84:cd:dc:11:91:82:b4:e2:fb:d4:21:10:f0:62:c8:1a:d7:2e:
da:46:11:47:74:33:87:e1:74:69:ce:9e:0c:08:ac:1f:4c:be:
28:33:0a:85:7b:0c:2f:89:98:e9:72:1a:0e:96:94:01:d0:18:
77:34:64:7d:bc:39:ca:86:50:e5:cd:20:ab:7f:90:ae:d9:f1:
b9:93:5d:37:64:1b:f7:bc:0d:24:b8:b8:e3:9c:21:3c:9b:b0:
ce:bb:9f:8a:d1:6d:32:20:09:d9:eb:81:db:e9:b6:10:b3:ac:
9d:d8:9a:47:19:2c:dc:ed:94:61:de:2b:b4:a2:4c:10:e7:10:
9d:9f:f2:91:78:d9:a1:48:27:b9:10:68:4d:f8:6b:5d:98:27:
19:85:b3:72:28:c2:f5:0d:c7:20:bb:da:0c:70:65:2b:5d:64:
85:47:e3:45:11:48:8b:de:59:cd:e9:94:fb:26:cf:90:56:fb:
89:3b:f5:b2:5f:5d:5b:3d:a7:c9:77:fd:c7:cd:27:6d:7c:f4:
d8:f8:f4:a2:1d:88:8b:3f:ba:6f:03:81:0e:23:7e:87:ab:58:
83:9a:43:6c:8d:f3:f4:c2:c9:8e:7b:76:7b:9c:3e:d8:80:fe:
49:71:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:57 2025 by rpki-client on console-fra.rpki-client.org