Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: JKUl+ZiCxKkHlGRqy5YEaBzA81SfjDdGmmI+50TpD6o=
Subject key identifier: 43:9C:CB:58:19:F3:31:2F:07:32:9A:4A:DB:14:6A:80:E7:36:C5:0E
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 0194BA8463CEAB723E58F45E4F6AF74511CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:25 +0000
Manifest this update: Fri 31 Jan 2025 04:00:25 +0000
Manifest next update: Sat 01 Feb 2025 04:00:25 +0000
Files and hashes: 1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: bi4AEbvHfcgZwWdKrXKkb3fLqceviWpreR/j3JHRuTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:63:ce:ab:72:3e:58:f4:5e:4f:6a:f7:45:11:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Jan 31 04:00:25 2025 GMT
Not After : Feb 1 04:00:25 2025 GMT
Subject: CN=439ccb5819f3312f07329a4adb146a80e736c50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:1c:66:ab:94:0c:5f:00:79:2f:1b:1d:7d:
a9:43:af:d7:6b:08:73:bb:70:49:6a:d0:71:7d:7c:
cc:97:92:fc:e0:04:03:b4:82:bb:82:f2:02:f0:c6:
a1:3d:ee:a4:98:36:99:aa:62:3b:49:c9:0b:7e:89:
7e:1d:d3:a5:25:9f:98:28:fb:94:8c:f7:4b:b2:c5:
68:ac:09:69:b4:4d:68:a9:ef:4a:2d:75:70:0f:c1:
36:ff:77:c7:4f:8c:f4:a1:6d:35:ce:b0:f6:9f:d5:
34:db:96:6c:35:00:c3:c8:4d:e5:a9:ff:f8:20:94:
3b:04:28:cd:78:3e:a1:94:b9:e6:92:93:c6:72:ec:
a4:b4:9d:6e:f4:b7:db:3f:d7:17:be:b9:a1:80:97:
d5:89:b6:31:d7:ba:1e:f9:ca:d1:71:8c:bb:e9:58:
c5:9f:49:e2:d1:d2:59:0b:76:f0:c5:15:75:d9:21:
38:a1:bf:de:79:ec:21:1a:01:7b:f7:4c:50:ca:c1:
49:c8:ac:b5:82:73:b6:ad:3f:85:32:9c:11:85:ff:
9f:cb:a5:b4:ac:57:ce:b2:66:71:92:95:e3:7d:1a:
e8:5d:26:61:f2:ef:43:85:d5:c7:7f:c0:e2:68:c9:
25:01:fb:2e:ff:52:72:ee:7c:21:ea:7e:60:4e:2e:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:CB:58:19:F3:31:2F:07:32:9A:4A:DB:14:6A:80:E7:36:C5:0E
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f0:61:e9:c1:9e:47:db:fd:e7:ef:6d:24:12:c2:ed:b3:44:
56:d7:37:e8:a5:48:47:9a:43:bf:04:17:e3:61:51:a4:da:26:
db:13:4e:3a:84:78:fa:1f:62:b8:cf:16:69:cc:6a:b3:db:a5:
f1:12:b4:a8:04:66:81:f0:f1:e3:d0:90:97:fb:64:c9:ba:68:
11:56:f2:51:21:23:8f:4f:92:45:5d:ea:32:d6:22:e4:5d:c2:
f8:64:3b:3f:df:fd:f9:30:7b:f7:b7:82:cd:44:58:3f:9a:fe:
8c:8c:01:b9:24:bf:aa:87:a8:3b:ef:da:e9:76:82:85:79:56:
25:2b:37:29:29:1b:49:59:fa:84:fa:dc:7e:fa:49:93:52:e9:
c0:f9:21:19:48:1a:0a:c8:7f:1c:6a:2b:cb:ed:b9:ae:61:a1:
8e:c5:c6:e4:d5:2b:b3:0c:cd:36:f9:f1:40:7e:0e:37:1d:40:
67:b4:02:9f:29:28:f0:4c:a8:2c:06:0d:50:69:db:b0:35:53:
98:1b:ff:79:f5:cb:ca:b9:0b:7f:a6:bf:31:91:c5:c2:2f:ab:
68:0d:a2:72:a9:ba:1d:b4:4e:66:b1:a7:15:a9:3b:f8:c5:bd:
6d:d2:67:9c:21:17:02:d6:64:4c:f3:dd:e8:cf:01:85:27:22:
4b:ec:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:38 2025 by rpki-client on console-fra.rpki-client.org