Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
File: uglQnQRuXLar5boZqxurpUPTffg.mft (raw, json)
Hash identifier: k6eCBlJcOJJG2moAgGqepyefgm4hKip4zuOjXL0hGlI=
Subject key identifier: 12:47:DF:28:38:B1:34:79:C5:BA:79:FE:E5:2E:FA:D3:45:47:24:9F
Authority key identifier: BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8
Certificate issuer: /CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
Certificate serial: 019677FB4CB9D461FBBED5C0D77CDB0EFEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
Manifest number: 0895
Signing time: Sun 27 Apr 2025 16:01:19 +0000
Manifest this update: Sun 27 Apr 2025 16:01:19 +0000
Manifest next update: Mon 28 Apr 2025 16:01:19 +0000
Files and hashes: 1: uglQnQRuXLar5boZqxurpUPTffg.crl (hash: t5qWbdSLMeEqMjEAs7ZXoicJanK6sIS3Nw+A4EXHRds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:4c:b9:d4:61:fb:be:d5:c0:d7:7c:db:0e:fe:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
Validity
Not Before: Apr 27 16:01:19 2025 GMT
Not After : Apr 28 16:01:19 2025 GMT
Subject: CN=1247df2838b13479c5ba79fee52efad34547249f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:62:6a:d3:b0:f6:55:92:51:79:15:7f:59:
53:1c:15:e1:11:8d:68:78:d2:94:45:1a:e5:c7:84:
ab:3e:a7:4a:ee:54:e2:56:fb:d9:b9:fe:aa:31:b4:
7d:bf:97:88:ab:85:4c:f5:07:55:42:30:05:28:a2:
87:b9:7d:60:95:ea:07:c9:80:0a:7d:30:68:e0:85:
8b:08:84:05:43:36:c3:56:66:1d:6c:e8:02:80:1d:
44:a4:ce:ef:88:45:d4:2b:b4:0d:8f:2e:36:13:e8:
01:11:08:cd:c5:89:88:6c:15:ba:42:6f:ec:b9:ee:
8c:2f:4e:0d:1d:73:c5:29:4f:a3:27:c1:61:0a:6e:
00:1c:c4:6a:b9:17:f8:b3:bc:b5:75:53:e4:0a:42:
b5:66:25:cc:d4:f8:49:4f:35:6b:02:53:81:22:79:
0a:aa:7d:dc:2b:9c:c1:72:67:9c:74:16:7f:b1:39:
5d:60:b0:45:ef:33:92:86:00:10:25:bf:2d:b4:da:
4c:3b:88:aa:b1:3e:5c:f6:e1:9e:b9:86:1a:e7:23:
f7:20:ac:d2:d1:48:a9:3f:1c:38:af:a1:bf:ac:bf:
a3:c1:38:d8:d9:08:0b:16:c5:a5:33:63:e7:15:97:
bd:80:52:f4:be:e6:cb:ac:40:1d:5f:7b:f1:28:27:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:47:DF:28:38:B1:34:79:C5:BA:79:FE:E5:2E:FA:D3:45:47:24:9F
X509v3 Authority Key Identifier:
keyid:BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e5:57:4d:2e:2c:ab:84:9a:b0:dc:d6:bf:c6:5d:4e:cc:e4:
d0:47:f9:26:48:0f:b6:5d:b8:06:16:a9:43:42:e0:e2:40:cd:
c5:c6:2f:ad:1a:f0:e6:ee:03:08:f7:43:fa:8f:aa:c4:b2:e7:
59:b4:9c:a4:1b:70:59:9a:dc:1d:0b:c1:52:b0:c8:f7:b5:2d:
7b:b0:ab:b4:10:b6:94:3c:6e:d2:17:6a:ec:f9:78:0a:f0:4b:
9b:7a:b6:6d:76:e1:ed:6c:66:ea:51:8f:d0:b3:54:3e:76:64:
79:e4:77:e0:8e:a7:66:68:79:71:9a:df:45:8f:e5:5b:4f:68:
1b:66:0b:4d:34:36:63:f2:9d:dd:f0:a8:af:fa:59:a3:cd:01:
b7:4e:7a:c7:54:61:97:d5:5a:41:b9:ba:b6:f5:7b:96:a8:b1:
dc:18:60:0e:8a:e4:db:7d:19:4c:a3:14:02:ae:82:84:bb:2c:
f3:7c:13:f6:9d:5f:82:25:1e:2c:ce:36:af:7d:ff:df:cc:82:
2a:15:05:ba:e6:0c:4a:4c:be:f5:c6:a7:7e:e9:67:fc:f3:ad:
bb:18:39:40:02:c2:fc:54:4a:ce:12:70:78:8d:7a:63:74:ef:
4c:d5:a3:b0:27:50:09:a5:72:0f:59:eb:25:9a:f6:02:1c:e8:
a8:98:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:16:14 2025 by rpki-client