Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier: pEjTLifVB1Q6jL2IDVpkxbegAFDJQF06TQSQQkHASXA=
Subject key identifier: 9F:05:03:D2:21:D1:26:DD:81:80:1C:0C:B4:8C:D8:72:36:BD:ED:B6
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer: /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial: 01967643268506B9F59993CD0652EFF67D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number: 1288
Signing time: Sun 27 Apr 2025 08:00:34 +0000
Manifest this update: Sun 27 Apr 2025 08:00:34 +0000
Manifest next update: Mon 28 Apr 2025 08:00:34 +0000
Files and hashes: 1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: uyriwoIZZGFfjxdgwxa6+tfARu2BW1udEAXX5ae6WTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:26:85:06:b9:f5:99:93:cd:06:52:ef:f6:7d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
Validity
Not Before: Apr 27 08:00:34 2025 GMT
Not After : Apr 28 08:00:34 2025 GMT
Subject: CN=9f0503d221d126dd81801c0cb48cd87236bdedb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:b1:dd:aa:3b:45:b0:4e:0f:2d:47:e8:45:
6f:02:fd:41:04:5a:68:3b:03:e3:54:8f:0e:2d:f7:
85:d4:b2:b6:0e:c2:d0:44:48:08:37:ff:86:7f:d4:
b1:a9:f0:d8:15:5d:8e:9f:14:3e:aa:2a:8a:fb:01:
98:0f:c7:27:d5:6f:3b:e7:d1:58:e1:1d:a4:f5:72:
0d:4e:67:71:e2:5d:b3:e6:38:57:05:54:1c:b8:8f:
ec:32:ed:3b:33:55:ac:b2:83:3a:13:42:28:4f:17:
39:db:e5:1b:a9:db:26:e9:3c:56:bf:aa:91:68:28:
24:41:2b:6e:e2:2d:41:bb:57:52:11:56:27:c5:3e:
c4:35:89:d0:ea:69:5f:09:f3:c0:1c:99:b1:da:7b:
78:b5:23:f1:51:ef:92:26:79:71:f5:83:14:18:4d:
4b:ed:57:cd:80:6d:14:45:fb:62:2e:8e:1a:ad:d0:
4e:5b:24:41:3b:fa:fd:63:bc:27:de:13:5e:03:63:
75:e1:2b:9f:5d:b0:be:78:4e:e3:7e:60:2f:f1:d7:
3b:4d:1c:4b:02:5b:43:21:8c:49:7a:6b:f9:c8:62:
92:f1:80:ae:17:8a:dc:5d:e1:1f:12:4c:f8:71:c0:
8e:64:48:2d:5f:78:a7:d7:fa:74:06:8e:bb:c0:63:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:05:03:D2:21:D1:26:DD:81:80:1C:0C:B4:8C:D8:72:36:BD:ED:B6
X509v3 Authority Key Identifier:
keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:97:69:b2:7f:3a:88:1c:3f:19:22:e3:ce:f7:e6:0f:76:a2:
ea:60:8d:57:b3:a8:42:58:43:f4:7d:4f:93:77:a3:45:be:5c:
4c:7e:ca:16:d1:85:17:59:69:32:b0:8f:c7:fa:f7:6d:03:f0:
51:55:01:d2:14:d2:75:f6:32:67:14:b4:06:91:bd:1b:cf:6c:
70:6a:b4:45:59:5e:24:76:60:0b:cc:24:51:b3:57:a7:45:b8:
c9:32:33:31:c4:87:bb:d1:8a:37:7c:0f:34:ed:24:b1:45:6d:
42:f1:df:d1:55:54:1f:70:54:fe:b8:88:9c:cb:43:43:5d:bd:
a3:a8:2b:3d:01:6b:5a:08:dc:bb:6a:99:fe:27:02:72:3f:1d:
08:43:fa:93:87:5f:1c:53:b7:71:90:53:82:46:9d:cb:26:39:
c6:34:06:b3:60:43:2f:1a:8c:7e:11:60:44:b3:0f:53:f7:f5:
1e:a9:4e:11:dc:39:00:4f:e9:5c:fb:c3:99:bf:57:11:7d:1a:
40:0f:97:c4:ba:de:11:07:71:75:20:49:93:53:bb:dd:29:2c:
12:74:82:8d:c0:07:de:c0:3f:49:b3:e1:d4:e1:1d:f5:e7:c9:
0d:66:7e:cc:07:bc:e9:5a:f6:8b:a9:18:9c:f5:51:65:5c:59:
89:1e:5d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:55:50 2025 by rpki-client