
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: s66+9imqmpZRdhGYoSbB+1KCUS1dw5ybByIagOamQ3E=
Subject key identifier: 46:B5:63:97:C7:8E:A1:60:33:74:35:B5:F5:83:70:A2:12:4E:86:6C
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 0194BABBD659AF7A4BE45F30DCADD85D58B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 05:00:59 +0000
Manifest this update: Fri 31 Jan 2025 05:00:59 +0000
Manifest next update: Sat 01 Feb 2025 05:00:59 +0000
Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: 8YrUSBNbgHVYxcykwPYeI1TQAoS8K+xNIPrj/UIA0qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:d6:59:af:7a:4b:e4:5f:30:dc:ad:d8:5d:58:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Jan 31 05:00:59 2025 GMT
Not After : Feb 1 05:00:59 2025 GMT
Subject: CN=46b56397c78ea160337435b5f58370a2124e866c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:29:e0:b2:48:12:d4:06:bd:ae:ec:32:c2:
85:04:f1:03:a4:1f:73:31:a1:b1:a0:72:2f:cd:37:
09:1c:28:4b:01:65:c1:e9:76:ba:3e:59:cd:3a:c1:
15:b9:36:aa:ff:d0:6d:a5:ee:3c:96:23:7f:e0:77:
7f:e7:c0:31:9c:e9:1c:28:34:3b:1a:e8:24:ca:1f:
22:b7:83:85:9c:a3:a8:e0:6a:17:ca:76:b2:71:9c:
f5:54:a3:e1:38:71:1b:b8:37:08:58:68:d6:5f:d4:
da:7e:16:e7:2c:98:c3:77:0f:ad:39:bc:20:34:49:
52:01:34:33:88:4d:47:ab:29:46:c4:49:2e:5c:fe:
54:7f:cd:fc:a5:01:b3:dd:3e:4f:8d:35:bd:03:dc:
70:59:15:53:06:1c:17:21:16:05:cb:fe:bb:15:a8:
3e:ca:3e:65:c5:4b:f3:4e:58:ba:f0:f4:ad:3a:89:
aa:f1:c0:9b:57:7f:d6:be:35:01:92:e5:b0:7f:e9:
58:76:42:6e:a2:e7:23:49:28:78:7e:37:52:19:1a:
31:de:d4:1e:83:c7:e2:b7:a0:4c:b2:a8:30:be:45:
92:7c:48:06:21:a8:dc:94:79:65:3d:a2:16:2f:18:
e0:21:60:a9:b4:64:29:7a:67:4a:75:73:e3:7a:30:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B5:63:97:C7:8E:A1:60:33:74:35:B5:F5:83:70:A2:12:4E:86:6C
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8e:4a:56:4b:1b:43:7a:0d:dd:2c:f2:e2:88:91:43:b3:98:
4c:7a:18:fd:14:5f:7d:4c:a8:5e:fd:9f:a7:30:5c:94:13:44:
05:e3:ae:1f:4d:e0:6f:83:a6:be:68:4f:1a:d2:b2:de:00:49:
47:39:93:61:61:56:76:50:ea:62:bf:9b:2f:44:94:fa:11:55:
92:47:c3:82:c8:f1:d5:22:b7:c0:99:76:eb:af:fa:8e:51:f9:
97:37:50:13:46:49:2b:6e:39:66:61:c9:8b:8f:21:33:48:4c:
0c:16:ee:50:14:d3:44:eb:b1:eb:18:4a:bc:0e:e8:59:d9:39:
2d:33:2f:e0:22:e3:89:21:e0:11:5b:8e:14:3a:ed:b2:96:f1:
41:89:46:a9:66:42:e0:16:ea:4f:30:62:07:76:fe:30:75:a5:
b8:9c:f5:38:ac:07:28:33:eb:1e:57:bb:c9:d8:3b:36:a1:ce:
ba:e7:22:52:34:cf:c2:f9:4f:98:a2:e2:68:00:1f:86:03:34:
ae:c8:b2:9e:f4:4f:f3:68:12:d4:c2:0b:67:7f:ac:7c:a1:67:
4d:9c:f2:1a:25:d6:be:46:f3:ee:33:2e:52:b5:e3:1b:62:a8:
de:42:18:80:fe:69:c2:f3:ff:e0:4f:bb:10:73:0a:42:d1:40:
5e:48:3e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:34 2025 by rpki-client on console-fra.rpki-client.org