Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
File: UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft (raw, json)
Hash identifier: 5tm8JiR64zUVte+BaVw8cGUpCnoe2BpxjIIFVtIsx4w=
Subject key identifier: BD:C0:F0:85:52:AC:7D:18:76:47:AD:F5:80:EF:9E:1A:5B:F4:54:3D
Authority key identifier: 50:8D:6B:B3:0D:A0:E9:BF:F5:B4:BF:A2:46:21:72:C6:B6:DC:1B:C5
Certificate issuer: /CN=508d6bb30da0e9bff5b4bfa2462172c6b6dc1bc5
Certificate serial: 0194BABBC55D847898446AD9F1CACD6D3EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
Manifest number: 0F92
Signing time: Fri 31 Jan 2025 05:00:55 +0000
Manifest this update: Fri 31 Jan 2025 05:00:55 +0000
Manifest next update: Sat 01 Feb 2025 05:00:55 +0000
Files and hashes: 1: UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl (hash: czKhBYaefYw2gu6Her+wfcAQv/JCl/iEsAofuBzidRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c5:5d:84:78:98:44:6a:d9:f1:ca:cd:6d:3e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=508d6bb30da0e9bff5b4bfa2462172c6b6dc1bc5
Validity
Not Before: Jan 31 05:00:55 2025 GMT
Not After : Feb 1 05:00:55 2025 GMT
Subject: CN=bdc0f08552ac7d187647adf580ef9e1a5bf4543d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:20:5d:9a:af:69:5c:9a:cd:33:a9:4e:c5:
07:97:a0:e6:09:98:06:9c:5a:78:bd:6d:56:53:78:
97:33:c6:51:69:45:29:ba:0d:63:86:54:d4:ca:9c:
7f:49:ca:4b:41:01:be:1b:42:bf:de:d8:33:00:5c:
b6:59:c7:ac:0e:18:12:b8:f0:4a:23:d4:07:99:9c:
de:4d:0d:98:bd:9f:75:7a:10:55:23:f8:a9:59:75:
b9:50:6a:b9:40:79:90:d2:ff:3b:3a:48:d2:5b:c9:
06:75:ef:c0:6c:3a:14:c7:ff:fb:bc:88:6c:85:96:
93:af:d6:a8:02:d1:0e:0c:a1:0c:0e:04:8e:75:c0:
a2:c1:e0:9a:0f:e6:ea:51:ab:7e:2c:25:2f:a8:de:
87:ce:b7:dc:db:33:49:e4:b4:59:79:68:1e:d3:4e:
5c:74:e5:da:32:9d:42:54:ce:ca:2b:0b:3e:9d:c1:
8e:35:37:3f:13:4d:2d:01:ee:41:da:63:fb:2f:19:
60:3f:7d:13:e5:50:b7:80:06:dd:a6:03:10:c6:a2:
d3:c0:c3:64:50:96:d4:cc:6f:1b:7a:fa:b2:ad:2f:
07:85:96:b7:1e:95:ec:dd:21:2a:59:41:c4:24:ea:
ba:a7:61:a3:1d:9d:81:19:83:bc:c5:e3:78:c6:48:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C0:F0:85:52:AC:7D:18:76:47:AD:F5:80:EF:9E:1A:5B:F4:54:3D
X509v3 Authority Key Identifier:
keyid:50:8D:6B:B3:0D:A0:E9:BF:F5:B4:BF:A2:46:21:72:C6:B6:DC:1B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UI1rsw2g6b_1tL-iRiFyxrbcG8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/87c365-c5fd-4d71-92af-76ba14254491/1/UI1rsw2g6b_1tL-iRiFyxrbcG8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:05:0f:41:42:f2:4c:0e:23:04:a9:a0:ef:05:33:7f:84:1e:
ae:cc:e6:d1:a9:c8:c8:65:13:e2:30:11:ab:8a:d5:76:25:76:
09:9e:55:f4:6a:7c:74:42:53:5c:12:5a:1d:0d:2d:0c:fd:d3:
d5:22:e6:32:58:19:6e:34:fa:e8:4c:eb:c4:82:fe:53:96:3e:
b0:a5:25:f8:bd:03:49:4a:d4:d5:c8:86:60:0c:ad:73:08:33:
53:40:75:b7:87:3c:92:fe:92:d6:81:98:4b:29:a7:d8:61:09:
95:03:9a:e1:0b:24:25:ab:f2:78:cf:1c:15:99:76:77:0e:eb:
70:21:d2:52:6f:50:34:b6:38:b2:f5:a9:d0:17:e7:f4:9a:0b:
98:49:b1:a8:a3:4f:d8:59:b7:f8:e2:c1:9d:97:b8:1a:2d:3d:
09:f9:0f:da:2d:7b:cf:a9:00:48:4d:21:97:1a:89:9c:57:4e:
0c:dd:d7:fc:ea:a1:04:b5:75:e8:6f:ff:57:ec:f6:3d:1e:0e:
6e:41:39:02:60:e6:fe:4f:87:18:54:d9:58:68:97:90:34:8f:
fa:cc:16:18:60:c0:34:fa:f6:dc:d6:3a:43:29:71:da:7b:f1:
35:13:54:81:2e:2e:14:1e:c9:4b:d6:c0:1a:89:e9:c5:00:32:
3c:f7:b2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:07 2025 by rpki-client on console-fra.rpki-client.org