Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
File: uByWUlV5h6KgWAzFxl42RrAdo7s.mft (raw, json)
Hash identifier: h/YSSIAasM2AwqUNnjWwwczj74/Bg/iJAHK5hgmfWYU=
Subject key identifier: 8D:AC:7E:91:B3:A4:57:DA:CB:A8:DC:71:C1:16:1B:6B:04:84:54:37
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial: 0194BB96DF6B490FD862A06BF16D5D1A70D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
Manifest number: 0B49
Signing time: Fri 31 Jan 2025 09:00:14 +0000
Manifest this update: Fri 31 Jan 2025 09:00:14 +0000
Manifest next update: Sat 01 Feb 2025 09:00:14 +0000
Files and hashes: 1: 1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa (hash: bNeeSn2K9PhEeXEHT+JPXfqKFFY067qwi6XfweStm4U=)
2: uByWUlV5h6KgWAzFxl42RrAdo7s.crl (hash: tgUZNeJPw5lGeojUjyKL0hcO9TFZvsyl9klqyLxtLGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:df:6b:49:0f:d8:62:a0:6b:f1:6d:5d:1a:70:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Validity
Not Before: Jan 31 09:00:14 2025 GMT
Not After : Feb 1 09:00:14 2025 GMT
Subject: CN=8dac7e91b3a457dacba8dc71c1161b6b04845437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:cd:61:df:5b:76:54:19:9c:fa:b1:29:3d:
67:99:bf:f0:6e:ac:44:b7:3f:a5:5d:ff:0f:a3:96:
9b:32:17:61:4f:72:82:b2:68:92:76:15:c7:50:4c:
e6:7f:24:c2:3f:f5:4c:ad:e4:ac:55:e8:e1:0f:58:
11:51:3f:f1:a1:34:d5:fb:34:29:5d:de:04:6e:c9:
9b:72:5d:93:19:1b:a2:3c:cf:bf:26:f4:1c:f3:59:
d3:12:d1:2f:24:68:2a:fd:48:e8:77:6b:04:9c:5e:
08:63:db:c6:b5:f9:98:84:af:ce:4a:a6:48:53:cc:
24:03:2d:b9:21:96:46:9f:73:2b:8e:6a:29:db:5c:
55:9f:da:8e:ff:4f:70:13:1e:b9:d3:46:27:d5:0b:
96:da:fd:fd:c4:ac:43:3c:26:82:ba:cf:2b:65:20:
76:e8:3c:d7:03:16:11:44:47:2d:9f:0e:fd:ab:53:
34:f8:3f:1c:20:f2:7b:67:75:70:71:cd:b6:5f:90:
23:5e:d0:4f:45:d9:51:24:58:9f:2b:14:42:5a:71:
50:37:86:36:bb:7e:8c:fd:a6:78:11:6f:97:66:1e:
27:de:af:45:93:e3:e6:80:3c:2b:bd:48:30:f4:d8:
f3:13:6d:da:81:76:b9:8a:55:1f:ca:0b:f2:55:5c:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AC:7E:91:B3:A4:57:DA:CB:A8:DC:71:C1:16:1B:6B:04:84:54:37
X509v3 Authority Key Identifier:
keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f0:fc:19:92:ac:2c:c7:89:5a:40:d5:de:a5:c4:0e:0f:fb:
43:1d:f7:9f:34:92:ce:9c:40:a9:64:a1:c1:74:1c:ea:9c:5a:
e6:5d:7d:15:85:cc:a4:5e:90:fb:26:97:14:bc:45:73:5d:20:
88:28:d5:96:19:b0:77:7b:6f:94:f7:aa:ba:a8:91:30:11:67:
a8:46:5e:ba:b1:e2:d7:f9:06:af:d2:b1:a1:ef:c9:4b:85:9d:
86:0f:6d:ae:a8:11:0e:03:8f:71:f3:2d:df:9e:07:13:b7:95:
c5:9d:07:28:a8:e3:03:59:20:2d:9d:e4:e4:a6:50:31:ab:0d:
6f:48:d9:d8:18:ca:a9:14:bc:e9:36:d2:72:a6:4c:f3:8a:df:
51:1d:34:db:c5:0b:75:79:d5:30:cd:08:18:03:68:e7:e4:0f:
37:43:87:d9:5c:07:79:f3:c3:1f:ec:44:04:85:cf:88:ad:c1:
42:43:b0:eb:48:57:a4:df:e6:7b:c2:e0:cd:55:d8:11:b2:5a:
87:e7:fc:c4:9b:74:d8:b6:3d:57:25:c5:56:eb:07:d5:29:c2:
e1:c6:d7:bd:cf:11:2e:72:8d:4c:29:5d:63:09:8f:c1:72:7b:
16:4e:ff:4a:c7:72:cd:84:00:bf:b0:00:aa:c2:a8:00:10:f5:
85:60:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:21 2025 by rpki-client on console-fra.rpki-client.org