Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: peFichgnpQTVcjC6VUw8BcfUIOtewAEDp2opZ0YbIsU=
Subject key identifier: 77:84:12:33:84:B3:8D:D1:47:E9:FC:90:32:F0:C7:18:2D:37:31:CC
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 0196748C2112BDA8AB1684D12E15CCC6B02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 00:01:02 +0000
Manifest this update: Sun 27 Apr 2025 00:01:02 +0000
Manifest next update: Mon 28 Apr 2025 00:01:02 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: YDNgQUn/mxvfd0lusqP6Rq43BGvQVq2zpeeTV6kRoq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:21:12:bd:a8:ab:16:84:d1:2e:15:cc:c6:b0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Apr 27 00:01:02 2025 GMT
Not After : Apr 28 00:01:02 2025 GMT
Subject: CN=7784123384b38dd147e9fc9032f0c7182d3731cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:96:3f:bd:04:41:1b:ee:62:62:f6:97:b5:
a9:5d:6b:31:70:da:74:e2:94:c6:dc:f4:75:9a:32:
95:6f:5e:b5:86:42:6b:24:52:31:02:f9:92:f8:fc:
20:b7:79:bf:0a:25:8c:eb:56:ff:d0:25:c3:27:3d:
67:9b:6a:c5:14:0b:ea:13:db:42:21:c3:e0:7d:c4:
0e:7c:0e:ba:37:a1:99:1a:6c:ed:1d:10:bc:d4:3f:
3b:dc:5e:db:68:f2:d3:55:a1:fc:6c:3d:08:61:d9:
a5:36:d0:59:04:8d:71:7d:44:c4:49:51:0c:89:b3:
a6:68:ad:17:a8:11:35:7a:c4:57:9d:1c:d9:1e:83:
c2:ea:4b:a8:11:be:18:42:3c:7b:10:dd:7c:c2:95:
af:9c:3d:c1:9f:d2:df:05:3f:ad:89:8e:e0:a8:fa:
55:ec:a6:20:7d:65:16:b3:1e:1f:99:42:34:3e:9a:
8e:34:45:70:2d:02:08:54:9b:8a:45:82:79:6a:95:
f7:66:11:87:f2:ea:f6:19:3b:65:ff:6d:b0:96:8c:
48:7e:85:9a:aa:27:2f:90:a6:cf:27:1c:53:6f:43:
7e:39:5c:52:ad:45:79:81:ea:0d:21:19:20:b5:a5:
62:2f:f1:d6:83:e5:e7:85:aa:7a:ea:b9:9d:5e:9a:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:84:12:33:84:B3:8D:D1:47:E9:FC:90:32:F0:C7:18:2D:37:31:CC
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ad:31:5a:1d:ae:8b:d7:a0:bf:6f:8e:cd:78:49:c2:f7:05:
af:1e:7d:3a:12:b8:e8:d3:27:ff:65:f0:74:2a:2d:d9:88:64:
56:eb:56:bb:7b:a5:31:62:3c:d6:b4:d2:ec:a4:48:b0:30:15:
47:1e:c5:45:03:d5:97:c4:1f:bf:40:db:23:ac:ae:74:e7:b5:
e8:1c:9b:6d:e0:71:db:f3:fb:0b:99:17:18:41:03:94:c9:92:
7a:b7:5e:70:4b:3e:b1:64:9f:7b:34:20:7f:2d:71:fa:0b:b5:
52:ab:53:94:7a:9f:58:7e:d3:e2:54:19:b3:87:1a:c4:1d:be:
6c:53:39:b2:67:7a:67:d6:e0:04:8e:6b:8e:30:43:ad:86:00:
54:b2:29:e7:1d:af:9c:1d:9f:e4:27:19:3a:f9:b5:ef:02:00:
89:50:bc:3d:5b:c3:6f:57:ef:0e:65:52:41:34:1b:b9:a7:85:
1a:07:7a:a6:6a:83:5a:fd:4d:43:0a:76:b7:50:12:e4:c2:9f:
fa:70:ea:6b:0f:7d:7e:3a:05:e2:cc:46:a1:c4:1a:4c:4a:73:
df:e1:a2:b3:1b:93:48:40:d2:50:3c:96:ce:94:7d:c7:09:46:
43:4c:a8:b3:b9:f8:25:20:2a:7e:19:78:76:62:6d:83:68:16:
39:ab:ac:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:42 2025 by rpki-client