Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
File: UdspKXLBDGn5fs0k8vtptPZ3beg.mft (raw, json)
Hash identifier: UpQG00fgtWpXc7VNvj3KFj7ffP03gh0/LEXjLiqiN+8=
Subject key identifier: B8:E6:3E:0B:76:B2:18:FA:01:32:78:A7:B4:41:CA:CA:3D:B3:38:B9
Authority key identifier: 51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
Certificate issuer: /CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Certificate serial: 0196857FC78CF8C961549465C87F4DA168BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
Manifest number: 1514
Signing time: Wed 30 Apr 2025 07:01:05 +0000
Manifest this update: Wed 30 Apr 2025 07:01:05 +0000
Manifest next update: Thu 01 May 2025 07:01:05 +0000
Files and hashes: 1: UdspKXLBDGn5fs0k8vtptPZ3beg.crl (hash: uqmlAYijhc7uyWM3iwcN+hPp9l6dHlz6cCOi/bCvlX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:c7:8c:f8:c9:61:54:94:65:c8:7f:4d:a1:68:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Validity
Not Before: Apr 30 07:01:05 2025 GMT
Not After : May 1 07:01:05 2025 GMT
Subject: CN=b8e63e0b76b218fa013278a7b441caca3db338b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:09:14:d1:d8:6f:98:dc:8f:17:6a:eb:47:52:
f8:15:b5:a1:ee:71:55:0f:40:0d:01:f3:62:49:04:
2d:ee:8a:92:97:cd:d2:50:fb:d5:b4:74:0c:5d:dd:
2c:8c:d6:7d:dd:60:0b:62:74:46:1e:a9:85:12:da:
af:20:e7:2b:6b:3e:dd:08:c6:4b:a6:61:10:c8:cf:
09:b1:38:d5:88:d9:0a:1d:99:d2:77:2c:74:90:7a:
98:e8:11:ad:97:fe:b0:71:0f:f7:6b:1f:8e:ef:2e:
13:09:ec:1a:1c:06:e0:73:8f:f3:31:2c:fe:b7:7e:
0e:37:da:50:73:9a:09:d3:15:29:71:4d:29:1a:8d:
60:56:88:07:22:88:ae:d5:31:3f:ef:90:78:9d:3b:
22:d6:60:57:01:c4:82:af:f5:24:80:4f:04:84:97:
b3:22:3f:ae:4c:63:81:12:4c:99:98:1b:b2:aa:7f:
01:3a:53:48:7b:a7:32:0e:1c:90:17:dc:52:c0:13:
fd:b5:5b:69:c0:5c:46:4a:a5:3f:52:42:e9:53:34:
82:39:41:ef:df:46:d1:8a:15:5f:b2:c0:2e:4d:2a:
bd:82:54:12:85:5f:33:0a:58:d1:94:15:59:95:2a:
63:22:38:73:92:f9:8b:a8:f7:86:ac:a7:2f:1a:61:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E6:3E:0B:76:B2:18:FA:01:32:78:A7:B4:41:CA:CA:3D:B3:38:B9
X509v3 Authority Key Identifier:
keyid:51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:8b:1f:aa:bf:79:a9:3e:05:e5:3b:d5:69:bb:96:19:7e:4d:
c7:96:94:0a:8d:1d:4e:47:7d:7f:31:f1:4d:38:8b:f3:91:5d:
0b:17:99:66:a2:e4:ea:49:04:42:5c:e4:63:fb:f0:1b:2d:f8:
9b:08:ad:a2:1a:07:b9:d9:ab:cb:2b:13:b6:c9:3f:ed:49:1f:
4a:b9:59:12:39:c2:a5:0d:8a:a2:79:f9:7c:d1:a8:40:d9:f6:
be:5d:c5:a9:7e:c6:52:97:95:c7:4b:2c:4e:a3:af:39:46:c6:
b6:0a:98:41:5c:1a:86:64:1f:57:b1:65:a5:a9:20:02:0e:c8:
bc:a8:19:80:e1:53:6b:d3:2c:6b:6c:07:69:7a:84:aa:6d:78:
c2:94:1b:80:d7:f8:30:ab:bf:39:bf:85:c4:de:f1:62:81:fb:
b0:29:2c:28:75:c6:5a:7b:98:9a:84:df:f7:e7:c7:f8:b1:a7:
1f:cf:b7:90:e7:59:5b:22:d9:00:c1:00:ab:9c:bb:0b:32:bd:
71:3a:35:62:35:01:9b:65:3b:3d:43:ec:9b:82:21:a9:57:4b:
a8:b6:16:4d:4e:64:2a:c2:44:ad:59:47:3f:ab:c3:4c:2d:26:
9b:d1:36:04:c1:8e:6d:d4:ac:eb:e9:6e:46:88:8c:72:4d:3b:
ad:1b:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:39:23 2025 by rpki-client