Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
File: UvYp80zQg7xoBUBpscxe55cfi7s.mft (raw, json)
Hash identifier: zbF6v+GJp+1QkjHfmXs1qJQ3qtCHkhnceAWrHYmbk1M=
Subject key identifier: 2F:1F:04:1A:DF:57:5A:06:3A:EB:AB:54:92:FF:96:9F:5E:BA:1C:FF
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial: 0194BB2959FBFF571F059184DD674D0016E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 07:00:36 +0000
Manifest this update: Fri 31 Jan 2025 07:00:36 +0000
Manifest next update: Sat 01 Feb 2025 07:00:36 +0000
Files and hashes: 1: 9Ljs6ePMXf76Xf3jjnZS1_jYods.roa (hash: Vw9UmLxmNUyNOAabfPVlvcJQ3CkdXDMT04j3t1Hv0OU=)
2: UvYp80zQg7xoBUBpscxe55cfi7s.crl (hash: SbL7LGbULRIM/Y+aE0Iq4nr8lt8SE43lVAWjzsExIkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:59:fb:ff:57:1f:05:91:84:dd:67:4d:00:16:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Validity
Not Before: Jan 31 07:00:36 2025 GMT
Not After : Feb 1 07:00:36 2025 GMT
Subject: CN=2f1f041adf575a063aebab5492ff969f5eba1cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:6d:d4:74:b1:0f:fb:e0:04:c1:6e:72:19:
29:10:99:09:06:d1:62:bf:57:50:64:48:06:76:2a:
ff:17:c4:ef:f6:4e:f0:39:85:22:04:55:03:78:1b:
71:f6:0f:1d:c1:2e:ee:8e:aa:38:7d:fc:7a:10:0c:
ef:30:71:1d:6f:40:f2:92:f4:de:f6:56:34:55:8d:
d6:9e:19:48:9a:15:0f:36:ab:c1:37:7b:bd:67:82:
4c:97:95:1e:8e:b5:78:c1:bd:9a:8c:31:17:1c:2c:
53:0b:ba:05:f7:30:c9:9d:fc:de:2b:28:0d:01:28:
4f:fa:27:fe:ce:cd:d1:fe:2b:0d:a8:db:b1:d1:86:
df:f9:5a:37:32:47:02:c6:6a:0e:0b:a6:e5:fd:21:
db:f5:26:ff:87:f1:5a:04:41:9d:81:b0:e4:fc:c3:
38:cf:ce:f0:ce:be:78:90:05:b4:05:1e:49:45:60:
7c:ab:84:14:0f:0a:c9:be:aa:e3:7f:24:01:59:f0:
02:b3:6e:4a:48:98:0d:7c:c1:22:f8:2d:a8:41:9f:
3e:42:03:54:47:cb:9f:ca:3f:f0:f9:2c:8b:4b:46:
97:2b:1c:3b:17:06:06:ca:c6:18:2c:02:8e:29:28:
99:59:9b:b2:3c:f6:0a:58:52:5c:f4:ee:06:7a:21:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1F:04:1A:DF:57:5A:06:3A:EB:AB:54:92:FF:96:9F:5E:BA:1C:FF
X509v3 Authority Key Identifier:
keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:29:23:db:d2:74:bb:19:4b:4f:7a:92:f7:7d:b6:cb:95:6a:
6c:9f:81:ac:55:f7:1f:74:c7:33:de:0a:f6:4d:e1:eb:e2:c4:
e8:b5:f9:c9:51:52:4c:31:01:6c:7a:17:45:fc:9f:58:3f:d2:
d2:ca:80:db:57:33:33:18:31:53:ed:26:77:cb:16:83:15:11:
38:42:ce:94:a3:e7:9a:d4:7e:7e:55:a0:b2:64:97:b8:56:1a:
76:f3:68:3a:67:44:d0:be:bc:87:ee:0b:9e:21:e4:76:5b:11:
b2:4c:b0:5b:f8:19:9a:9d:42:da:d5:ba:39:ea:93:57:72:69:
b7:bb:48:15:9a:a5:c5:f2:dd:57:71:88:77:68:8b:d4:61:bb:
97:1d:81:5d:6c:2d:82:20:36:eb:d7:33:c9:f1:bf:f3:98:c9:
8b:c9:27:45:9e:29:50:9b:8e:87:c7:11:6e:bc:e8:d5:d0:63:
9a:88:cf:c8:b5:87:15:76:da:55:46:b0:98:62:23:30:9a:ee:
17:54:95:33:29:f6:b4:83:39:af:62:0b:98:5c:aa:26:5c:10:
7e:4a:cf:22:5c:78:a8:f1:f6:84:a0:14:04:78:7a:20:a9:ef:
c9:47:68:db:42:cf:7b:f3:b8:1d:88:3a:ee:83:27:31:db:be:
e1:06:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:19 2025 by rpki-client on console-fra.rpki-client.org