Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json)
Hash identifier: 3R5KeWyl1W2qyf5Xf/ttPSREic8KCoxt0rS/IuL7bnQ=
Subject key identifier: 6E:E1:AC:87:66:DF:57:2A:D7:35:7C:FE:77:B8:50:AB:64:6B:E9:0F
Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Certificate serial: 0194BB9704AEC5E069E0096898AB7802688D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
Manifest number: 1127
Signing time: Fri 31 Jan 2025 09:00:23 +0000
Manifest this update: Fri 31 Jan 2025 09:00:23 +0000
Manifest next update: Sat 01 Feb 2025 09:00:23 +0000
Files and hashes: 1: CNzkiSB6aHtzY0O727sE464QSi8.roa (hash: jl53RICMTSEcHClA6hdGIYAm+qbxdQWju025NBkPLn8=)
2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: SODoWzStBzOTbyynPk6/naKPsj5tB/u2kx2uVOs+t7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:04:ae:c5:e0:69:e0:09:68:98:ab:78:02:68:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Validity
Not Before: Jan 31 09:00:23 2025 GMT
Not After : Feb 1 09:00:23 2025 GMT
Subject: CN=6ee1ac8766df572ad7357cfe77b850ab646be90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:cf:1e:77:f0:4a:8d:2b:dd:e7:57:ea:68:
f0:f9:a9:ba:e5:78:80:52:7b:55:cd:1e:6c:68:c6:
d4:74:b7:1e:6c:4a:8c:51:3b:e0:24:e9:36:43:02:
b8:de:35:33:b4:21:d7:6d:74:bc:3f:11:c5:d9:13:
96:65:32:65:0e:a4:a0:59:30:c2:f6:d9:31:38:08:
d8:29:2a:e2:8f:b0:a3:7c:49:9f:e9:64:b0:f1:45:
d9:47:e1:d1:7c:2b:c6:ce:07:e0:de:bf:25:6c:46:
72:7e:af:d5:de:57:eb:3a:d9:6a:70:ec:ee:e0:cf:
ce:a1:6a:23:22:41:bd:3f:b4:f3:10:57:09:fd:15:
42:25:20:9a:cf:0c:af:9d:1d:3c:10:68:8a:7e:de:
c6:2a:be:c5:af:f2:c0:52:45:39:e7:0a:3e:65:26:
af:d4:63:6b:a8:f3:cd:4b:cc:be:73:d1:1f:eb:05:
97:00:1a:67:9f:a6:4f:9a:e1:80:c3:40:af:d8:9a:
4b:24:ba:ce:00:cc:e2:01:c3:ab:e4:69:83:60:48:
8f:74:2f:c1:43:02:d6:55:0f:bf:ff:90:4e:27:80:
b3:f0:0a:01:d0:c2:1a:76:11:3e:17:c4:90:78:1a:
bb:e8:dd:6e:ad:a8:8f:6e:a8:e7:56:de:e4:7f:ec:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E1:AC:87:66:DF:57:2A:D7:35:7C:FE:77:B8:50:AB:64:6B:E9:0F
X509v3 Authority Key Identifier:
keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:27:c5:b8:9e:2f:d0:23:1c:45:0a:9f:cb:d2:e3:64:ed:68:
f0:cb:cf:e5:fd:1d:e8:7b:87:6b:7c:1c:6d:d9:13:21:96:67:
8b:ad:cb:60:9c:c9:e8:c2:7b:2d:5b:19:aa:4a:ac:2e:9e:e4:
79:b9:61:d0:3e:67:fa:4d:ae:a8:3e:68:60:4b:e4:81:6f:60:
2f:a8:f2:2a:e6:69:d8:11:86:3e:4d:66:4f:d8:27:ea:0a:36:
67:22:f3:fc:89:d0:6b:c1:87:10:0e:6e:3c:bc:ae:73:77:41:
a2:42:70:ff:e9:52:b0:4c:a4:fa:cf:00:15:a4:ea:f8:0d:9f:
81:02:ec:b0:10:02:fc:08:2a:7d:b6:8c:6b:e3:88:47:8c:50:
39:3e:97:c1:55:6a:a3:bc:c7:aa:a7:d4:d9:32:7b:20:ac:64:
49:2d:b4:c2:60:02:fa:99:3f:91:68:15:15:f4:fb:44:13:2d:
1b:14:3d:06:cd:18:1f:e5:4f:eb:9e:50:93:3b:6b:b6:0f:bc:
68:0e:25:fb:c9:b4:dc:45:46:ea:67:46:90:02:15:bc:86:1e:
80:1a:28:f2:1e:f4:7b:11:f8:69:54:d1:e1:ae:bc:96:1a:a2:
35:e1:0c:e4:cc:97:01:d5:6c:62:21:68:d8:14:99:72:c1:de:
aa:6c:db:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:59 2025 by rpki-client on console-fra.rpki-client.org