Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
File: UEwHY-3Lox64nwmD3djdGIkYwu4.mft (raw, json)
Hash identifier: Ha5KdBNBuRa8H1J0qUjK3qVaF0AZipt16V/tYq3gyuA=
Subject key identifier: 7C:B9:6A:2F:D0:F1:9B:DA:E5:91:BA:55:D1:15:0E:1F:37:D9:78:59
Authority key identifier: 50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
Certificate issuer: /CN=504c0763edcba31eb89f0983ddd8dd188918c2ee
Certificate serial: 0194BABB6F87DDDB477C193060F362B0DB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
Manifest number: 0752
Signing time: Fri 31 Jan 2025 05:00:33 +0000
Manifest this update: Fri 31 Jan 2025 05:00:33 +0000
Manifest next update: Sat 01 Feb 2025 05:00:33 +0000
Files and hashes: 1: UEwHY-3Lox64nwmD3djdGIkYwu4.crl (hash: QQprYi5xQWsOFFBiWs2cShaT9EGohq08sjlkJp8IH+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:6f:87:dd:db:47:7c:19:30:60:f3:62:b0:db:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504c0763edcba31eb89f0983ddd8dd188918c2ee
Validity
Not Before: Jan 31 05:00:33 2025 GMT
Not After : Feb 1 05:00:33 2025 GMT
Subject: CN=7cb96a2fd0f19bdae591ba55d1150e1f37d97859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:5a:1e:f6:ec:91:ce:12:5a:40:af:81:9e:
0c:d7:bf:b6:1a:f9:1a:e4:ce:30:fc:ab:7d:6f:43:
2a:a1:85:2e:42:de:3b:dc:72:de:4d:b6:64:dc:b9:
d0:3e:81:49:35:ee:37:b9:38:c2:16:eb:08:5d:3e:
7f:89:47:07:83:20:e8:86:03:eb:34:d1:78:1c:cf:
8d:6a:cb:06:c0:2a:4b:ee:72:c4:d6:c2:90:b3:d2:
2d:96:fe:67:5f:80:da:98:d6:44:82:e4:95:7e:c7:
ea:d2:a2:1d:c9:e6:d9:e4:e5:80:cb:55:82:8a:7b:
df:e5:3f:a1:08:dc:de:10:2e:a0:06:1e:95:12:ad:
d5:3c:f8:34:9e:66:92:5c:e6:01:f2:ef:cd:9a:98:
2c:a0:53:f8:5f:89:4e:7f:fb:5f:60:0a:f0:27:7f:
5a:ea:34:a9:e5:c7:72:92:54:69:70:f8:52:48:45:
25:cb:8a:d8:36:84:aa:28:83:0a:0c:71:e4:09:ec:
cb:d9:82:a2:78:53:8c:15:87:c8:18:77:96:97:bd:
cc:bd:ea:f8:1a:fa:0e:2e:1b:40:dc:bb:3e:d8:34:
c9:99:5f:3a:e5:9f:cf:68:a1:1d:00:ce:2f:82:41:
c3:29:41:50:02:96:b0:f8:13:5f:54:bf:67:04:13:
2e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B9:6A:2F:D0:F1:9B:DA:E5:91:BA:55:D1:15:0E:1F:37:D9:78:59
X509v3 Authority Key Identifier:
keyid:50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:07:74:20:89:76:0d:28:29:2c:22:8b:e4:15:01:b2:16:3a:
d6:1a:c3:21:4c:27:b4:b1:96:cc:ba:25:e0:e1:70:26:66:68:
ea:42:07:be:00:62:20:f8:57:51:53:a3:a9:04:f6:ba:0a:89:
69:4e:9b:49:d8:c8:ad:ec:7f:3e:7e:48:42:36:ea:b0:6e:36:
95:d9:df:cb:76:b6:4f:e9:14:70:f5:3e:6b:9d:da:f5:b8:17:
3d:ef:3d:b4:ed:23:5c:73:0c:a4:0d:d2:38:46:e2:27:d1:a7:
88:be:20:bd:99:91:cf:c1:17:dc:4f:8a:f9:16:ca:c9:f5:64:
3e:6d:9f:76:38:d9:90:2e:26:5a:f9:e7:9f:a2:88:bb:a5:40:
4f:e7:de:26:00:5e:c1:c9:08:01:a8:0e:2f:46:cc:3b:bf:fe:
a5:29:46:1d:8d:f8:2e:45:c3:ab:6c:71:73:6a:9f:ac:b9:5a:
d0:08:08:c5:61:69:01:84:22:9b:63:62:b9:ce:9e:82:66:58:
bd:2a:a5:02:74:f4:57:38:77:4d:c2:1b:00:14:8a:9e:7e:81:
4b:4d:cf:73:73:fd:8e:33:fb:c2:66:ff:03:f8:cb:3f:66:3e:
d5:c7:41:84:c3:65:eb:60:81:d4:c1:70:5a:59:6c:a7:a7:aa:
e3:ff:4b:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u2+H3dtHfBkwYPNisNuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNGMwNzYzZWRjYmEzMWViODlmMDk4M2RkZDhkZDE4ODkx
OGMyZWUwHhcNMjUwMTMxMDUwMDMzWhcNMjUwMjAxMDUwMDMzWjAzMTEwLwYDVQQD
Eyg3Y2I5NmEyZmQwZjE5YmRhZTU5MWJhNTVkMTE1MGUxZjM3ZDk3ODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIZaHvbskc4SWkCvgZ4M17+2Gvka
5M4w/Kt9b0MqoYUuQt473HLeTbZk3LnQPoFJNe43uTjCFusIXT5/iUcHgyDohgPr
NNF4HM+NassGwCpL7nLE1sKQs9Itlv5nX4DamNZEguSVfsfq0qIdyebZ5OWAy1WC
invf5T+hCNzeEC6gBh6VEq3VPPg0nmaSXOYB8u/NmpgsoFP4X4lOf/tfYArwJ39a
6jSp5cdyklRpcPhSSEUly4rYNoSqKIMKDHHkCezL2YKieFOMFYfIGHeWl73Mver4
GvoOLhtA3Ls+2DTJmV865Z/PaKEdAM4vgkHDKUFQApaw+BNfVL9nBBMuaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHy5ai/Q8Zva5ZG6VdEVDh832XhZMB8GA1UdIwQY
MBaAFFBMB2Pty6MeuJ8Jg93Y3RiJGMLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUV3SFktM0xveDY0bndtRDNkamRHSWtZd3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lMTlhM2YtMDVhYy00ZGNhLWE4OTUt
ODY2MmM3MTE4NmM2LzEvVUV3SFktM0xveDY0bndtRDNkamRHSWtZd3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lMTlhM2YtMDVhYy00ZGNhLWE4OTUtODY2MmM3MTE4NmM2
LzEvVUV3SFktM0xveDY0bndtRDNkamRHSWtZd3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwd0IIl2
DSgpLCKL5BUBshY61hrDIUwntLGWzLol4OFwJmZo6kIHvgBiIPhXUVOjqQT2ugqJ
aU6bSdjIrex/Pn5IQjbqsG42ldnfy3a2T+kUcPU+a53a9bgXPe89tO0jXHMMpA3S
OEbiJ9GniL4gvZmRz8EX3E+K+RbKyfVkPm2fdjjZkC4mWvnnn6KIu6VAT+feJgBe
wckIAagOL0bMO7/+pSlGHY34LkXDq2xxc2qfrLla0AgIxWFpAYQim2Niuc6egmZY
vSqlAnT0Vzh3TcIbABSKnn6BS03Pc3P9jjP7wmb/A/jLP2Y+1cdBhMNl62CB1MFw
Wllsp6eq4/9L9w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:36 2025 by rpki-client on console-fra.rpki-client.org