Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
File: UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json)
Hash identifier: BsT9hSN7atCkBGqi55SFhSsK5CTFD1dPu6RCyABgshE=
Subject key identifier: FA:58:1A:81:22:03:B3:B7:12:BF:95:E5:24:4F:BD:C2:60:CE:A6:B9
Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
Certificate issuer: /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Certificate serial: 0196808FD41CA8F016628B8313A393A0AEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
Manifest number: 10A8
Signing time: Tue 29 Apr 2025 08:00:31 +0000
Manifest this update: Tue 29 Apr 2025 08:00:31 +0000
Manifest next update: Wed 30 Apr 2025 08:00:31 +0000
Files and hashes: 1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: tb36ojCzMV1HNygTqqfEMFHaaYPWupi65VJzq9QlQ2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:d4:1c:a8:f0:16:62:8b:83:13:a3:93:a0:ae:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Validity
Not Before: Apr 29 08:00:31 2025 GMT
Not After : Apr 30 08:00:31 2025 GMT
Subject: CN=fa581a812203b3b712bf95e5244fbdc260cea6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:76:ed:02:28:5b:3f:8b:48:46:6f:85:81:
7f:db:d3:e2:7c:28:82:25:d7:2b:4b:b7:00:38:fc:
3c:e1:89:e8:81:b6:e5:1c:90:49:13:62:8f:0b:69:
d4:c0:4b:ec:1e:f2:f7:4d:26:9f:bc:8c:80:89:d0:
fc:15:b9:62:8f:23:ae:4a:ac:2e:8d:2b:a2:44:d1:
2a:a7:39:ad:f8:68:a0:5a:bf:cb:ba:81:2e:18:54:
58:be:8b:87:77:1d:a9:3b:48:05:56:cf:c6:97:58:
b4:27:3a:4a:71:81:f2:62:d4:e9:12:d1:2a:0c:b4:
60:7f:41:48:12:00:f9:1d:4e:3c:52:6f:18:af:0e:
55:11:b5:f3:6b:1e:a6:92:04:75:55:0a:32:36:97:
a0:d5:c2:5a:04:5c:e0:a2:8e:eb:6f:a5:f1:b6:da:
b7:87:f8:28:4d:8b:5b:c2:1b:aa:e6:f4:e6:e4:46:
13:00:f8:46:26:7e:96:26:c8:83:22:cd:e7:95:1d:
10:49:d9:3d:6c:a9:81:c7:cd:66:f9:f8:1f:5d:a8:
be:34:6d:f5:53:2d:bb:95:fd:b6:c3:83:b6:a6:af:
e4:ec:99:3b:b7:3c:64:93:bf:56:07:d1:4a:19:7f:
ff:6f:36:23:44:5b:ec:18:41:08:4e:b7:b3:a0:ab:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:58:1A:81:22:03:B3:B7:12:BF:95:E5:24:4F:BD:C2:60:CE:A6:B9
X509v3 Authority Key Identifier:
keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2e:f8:b5:27:a6:c7:22:11:12:89:d9:a3:64:ae:27:00:44:
35:af:77:dc:64:1f:fd:72:e6:60:3c:00:e8:4c:59:d5:69:b7:
15:41:c3:de:85:9b:70:13:ec:01:f9:0b:6a:fc:91:8c:7c:6c:
ad:f7:99:62:f0:ba:32:70:bc:90:c9:97:28:51:38:f7:42:d4:
ad:87:bb:24:de:5e:f4:25:fc:fd:02:83:86:62:c1:f6:01:e8:
7b:24:65:c2:3a:41:40:fd:3e:75:ad:a2:ba:a8:81:dc:f0:20:
d8:b6:c2:c2:9f:3e:97:3f:ba:fd:6e:ac:76:67:d7:5a:11:e6:
73:37:46:d5:19:eb:9a:d0:54:35:4e:b4:ba:e9:94:af:b5:e2:
22:09:d5:89:bd:b9:64:75:ef:b7:ae:20:ce:da:f1:ee:6b:92:
1b:64:1d:29:aa:c6:a3:ea:d0:d8:db:44:b1:e2:a5:ff:22:37:
79:01:ca:50:f8:dd:47:71:5f:d9:15:65:66:3e:05:23:6d:d0:
71:03:45:c6:f8:30:ee:42:9b:32:1e:12:29:92:2b:9d:bb:6c:
f2:bf:e8:fe:3e:b0:34:f5:23:a2:d9:2c:a4:12:69:d4:1a:a7:
af:32:24:83:47:f0:4e:81:9e:98:dd:29:0c:9d:4b:28:45:34:
f6:ca:a4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:55:34 2025 by rpki-client