Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
File: ujWrXugfdPzKSgwT6XLsHP6WeTs.mft (raw, json)
Hash identifier: uXc0zQI2Ivzgm6BPT8Tdl7r1146QFKKiXLqFwxlwxI0=
Subject key identifier: 80:2F:00:7D:4D:D7:55:2D:FF:56:07:F1:7A:D4:A1:84:27:3D:33:8E
Authority key identifier: BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
Certificate issuer: /CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Certificate serial: 01967DC5A7D3953BE01FA9039A0FEA19603E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
Manifest number: 07EA
Signing time: Mon 28 Apr 2025 19:00:27 +0000
Manifest this update: Mon 28 Apr 2025 19:00:27 +0000
Manifest next update: Tue 29 Apr 2025 19:00:27 +0000
Files and hashes: 1: ujWrXugfdPzKSgwT6XLsHP6WeTs.crl (hash: nF8aAEdEOlMv5uNjm1A2iNImMpdCdpRt4WXu9bvSK6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:a7:d3:95:3b:e0:1f:a9:03:9a:0f:ea:19:60:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Validity
Not Before: Apr 28 19:00:27 2025 GMT
Not After : Apr 29 19:00:27 2025 GMT
Subject: CN=802f007d4dd7552dff5607f17ad4a184273d338e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:0c:91:dc:6a:d7:ea:a4:9b:4e:91:88:13:
9c:73:1a:51:cb:93:d9:0a:34:d6:5f:b6:60:b1:35:
bc:d6:48:24:36:4c:7a:02:7f:8a:fd:e3:0d:11:5e:
b5:06:cd:76:6e:b6:4b:80:58:ad:86:d3:3a:b9:e8:
dd:36:8b:bf:a1:08:46:3f:a6:80:b9:b6:80:ba:0b:
4c:57:34:98:cd:da:34:bb:b5:6e:18:cb:70:cb:32:
af:30:37:70:18:3a:16:5a:0e:8b:50:6b:04:9d:b4:
67:8d:4e:7a:21:93:3a:f7:16:29:86:a8:03:e0:cf:
49:07:de:e3:24:35:79:87:0a:0a:e6:48:a6:38:73:
ef:47:18:e7:47:18:ea:74:d8:1b:17:1e:09:60:2a:
b8:b0:12:c6:f7:4b:48:93:08:2c:13:5c:67:12:bf:
9f:54:67:c1:dc:f1:d3:ee:8f:18:98:56:db:a7:b6:
92:55:9c:af:ae:b3:42:43:78:6a:07:38:50:cf:dc:
9d:ba:be:29:ed:e3:21:ee:c5:2f:67:de:cb:0a:a9:
b1:48:7a:83:75:8a:d7:a7:b2:a4:c3:cf:c2:36:15:
f4:a5:61:3d:1d:67:53:5f:4d:1c:e7:04:68:11:83:
5d:64:29:44:bf:bc:12:b6:28:23:66:d1:e3:4d:f5:
c9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2F:00:7D:4D:D7:55:2D:FF:56:07:F1:7A:D4:A1:84:27:3D:33:8E
X509v3 Authority Key Identifier:
keyid:BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cf:6a:66:4d:d2:b5:8c:a8:80:64:1d:a0:93:a4:bc:bc:ed:
36:32:3b:2c:9d:ef:6a:22:00:3b:76:1d:56:3c:ff:82:c2:52:
8d:bb:aa:4d:06:bb:9d:02:a2:f3:65:47:86:42:f2:6e:5d:9b:
95:10:36:58:df:5b:c7:c3:5c:0d:b5:c4:13:03:0a:95:e5:50:
d1:63:1f:0f:e7:fd:49:69:72:52:af:ed:ca:36:c3:64:d2:1b:
fa:12:e1:3a:c9:cb:46:07:1b:4f:68:25:05:cc:95:78:a7:c7:
87:7b:3e:ec:ae:29:b4:03:59:80:c0:0b:4e:de:b6:a2:c7:3b:
67:be:af:3a:1e:03:80:a4:b1:95:19:3b:dd:1d:f2:3e:79:27:
8d:b9:37:4c:f7:04:d3:34:58:87:f1:82:c7:3c:9a:f4:3b:ad:
cb:7c:cc:2b:68:59:0f:70:73:a9:29:1f:b5:78:ae:c6:ec:a8:
a1:25:59:d5:58:78:99:e3:e8:4e:00:53:66:60:64:14:6e:1b:
24:e3:38:85:63:1e:7e:30:d9:9d:43:63:a7:ec:d6:d7:94:43:
f2:23:44:02:54:eb:5e:c1:b0:9e:da:7d:14:c1:72:07:8a:f2:
a6:6d:08:50:38:3c:cc:97:46:78:75:d1:c1:7b:77:56:5f:e2:
1e:92:69:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:34 2025 by rpki-client