Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
File: uLhsyEeC6kEMbYfCzTv4agaqF7s.mft (raw, json)
Hash identifier: 68jCZ2UFQqPrF1scHB6BatTE3sdM+tlG79bDyuBjicg=
Subject key identifier: C4:B1:09:85:F6:54:5C:69:CD:5A:53:29:FB:3E:46:F8:E2:62:60:49
Authority key identifier: B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
Certificate issuer: /CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Certificate serial: 0194BABBA61CF5EDDAB73C0FD3B7CB8C5E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
Manifest number: 0ABA
Signing time: Fri 31 Jan 2025 05:00:47 +0000
Manifest this update: Fri 31 Jan 2025 05:00:47 +0000
Manifest next update: Sat 01 Feb 2025 05:00:47 +0000
Files and hashes: 1: uLhsyEeC6kEMbYfCzTv4agaqF7s.crl (hash: onunnmFx4OYpRhhOj3ESkDjO3+q471pxHr6MOz/CPJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:a6:1c:f5:ed:da:b7:3c:0f:d3:b7:cb:8c:5e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Validity
Not Before: Jan 31 05:00:47 2025 GMT
Not After : Feb 1 05:00:47 2025 GMT
Subject: CN=c4b10985f6545c69cd5a5329fb3e46f8e2626049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:a4:33:5b:9e:2b:e4:3e:d0:d5:4e:75:28:
4b:c8:45:9d:43:00:28:e9:3d:7c:f0:d6:01:9b:e1:
4a:d1:aa:82:5b:a7:30:1e:4e:58:46:5e:df:39:dc:
84:ed:06:92:0c:3c:4c:21:f2:05:10:b5:13:bd:20:
85:91:e7:0d:e4:fc:89:9f:00:fa:ab:5b:32:eb:d2:
09:6d:bd:aa:2c:14:a8:d5:f7:4a:33:f7:7b:d2:bf:
17:3b:74:57:f5:b9:7e:fd:46:0a:9c:cc:f1:ef:17:
04:b7:52:73:a4:14:98:f6:c1:54:61:b2:c1:85:ee:
6c:68:bc:9c:a0:7e:04:32:ab:8f:ab:fc:b0:0c:34:
52:43:bf:8a:d9:ae:df:47:0c:24:36:a4:eb:cf:2a:
2e:03:53:a8:d7:67:37:23:9d:ba:0e:68:43:37:db:
43:7b:6b:38:e0:7a:43:f6:8a:93:21:14:ea:04:51:
11:96:dc:21:92:3e:38:d7:66:e2:e8:9a:34:82:71:
d1:d9:27:ff:2a:15:d3:cf:23:3e:88:ae:88:ec:d3:
12:bd:bc:65:04:95:66:1b:ea:30:b7:14:2a:30:82:
41:f8:d1:72:e5:3e:d6:b4:07:c3:7c:7a:6d:52:35:
2e:0a:aa:8d:7c:7a:72:23:74:4e:9a:8f:e7:73:13:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B1:09:85:F6:54:5C:69:CD:5A:53:29:FB:3E:46:F8:E2:62:60:49
X509v3 Authority Key Identifier:
keyid:B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:80:cf:58:ec:51:60:6c:ea:51:36:ee:31:6a:77:ee:a4:37:
64:11:c8:81:56:e4:fd:4a:c3:87:93:e6:fe:1c:d3:17:22:99:
1e:1d:0c:bf:75:2d:d9:f8:7f:e4:d3:0c:c5:9c:0d:18:98:11:
26:0a:52:2a:8a:2f:f2:3b:e7:ac:f8:cd:60:4d:95:33:99:cb:
be:be:d0:3e:a5:42:4d:39:6c:52:ca:94:91:76:14:31:08:e2:
35:ba:f9:63:a7:d9:ea:54:1b:a7:79:3b:83:4b:be:25:45:e6:
cd:18:f1:0c:13:86:71:00:ae:e9:88:6a:66:2f:e7:55:82:75:
ae:bd:35:7b:23:64:31:da:11:57:e9:0e:21:2a:5c:cf:f0:c6:
fe:f3:49:49:67:e2:20:6b:37:b1:d1:78:b2:bb:10:c5:d0:fe:
13:00:ed:6b:00:2c:ff:7f:0f:34:63:bf:9d:97:6e:c4:06:8d:
67:8a:e1:4b:12:ff:d3:9e:e0:58:4e:2e:4d:87:a7:4c:56:25:
63:72:83:cd:f7:8d:ea:f3:b1:39:2f:86:c5:03:2b:67:bc:cf:
3c:18:64:e9:f3:01:76:79:05:80:f2:e8:8e:fd:4b:75:bb:b6:
c3:d2:ee:f5:3e:2e:c5:87:a3:2c:b1:88:d5:53:de:fe:bc:bb:
1d:1b:1b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:40 2025 by rpki-client on console-fra.rpki-client.org