Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: m1k6zIgARXx8ssXv+YDE16XvEQoZ55qAZE3oCMJlUQM=
Subject key identifier: 7C:2C:E3:E9:72:A2:E4:23:8C:D5:08:80:96:51:47:B5:F9:9E:40:9B
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01901EFDB4C5018BE359D90A59FEE8FA780C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 11CE
Signing time: Sun 16 Jun 2024 03:01:01 +0000
Manifest this update: Sun 16 Jun 2024 03:01:01 +0000
Manifest next update: Mon 17 Jun 2024 03:01:01 +0000
Files and hashes: 1: DazDJ2e9jzNzW-57MLb4NmWNc1o.roa (hash: zlV/vdc2q2yo89jNGtYUQOG4X4PxzkF0mW4UeVoHgl8=)
2: IwmiSc4K8JZ3ySv-uBA2Jtm3Sfw.roa (hash: hCeujAYG7yruHOaL3uRYm0LEPME0hIHY4rbYfMFvJ1o=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: 32FmWRCUfL0lUT7Q5fnHeNoe8F1uSY9QRfxZqOfMAQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:fd:b4:c5:01:8b:e3:59:d9:0a:59:fe:e8:fa:78:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jun 16 03:01:01 2024 GMT
Not After : Jun 17 03:01:01 2024 GMT
Subject: CN=7c2ce3e972a2e4238cd50880965147b5f99e409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:9f:42:2d:58:97:5e:2a:54:ce:47:b5:22:
c4:9b:0d:ec:69:3d:ed:bc:27:10:6b:1e:02:1c:54:
1c:26:46:29:04:3b:31:4f:b7:01:d9:62:51:4f:a8:
cc:e3:a2:d0:24:f7:57:c2:65:a6:7e:33:8b:a9:77:
9d:23:cb:36:96:0f:1d:67:f7:b9:09:f8:c5:f7:67:
e0:9a:f9:6e:86:9f:e8:54:c8:a1:dc:42:a6:42:29:
f2:89:de:bc:5f:b6:9d:ed:15:f7:0f:d2:b7:de:bd:
ea:0d:6e:03:1c:c0:b6:51:51:87:9a:c6:d9:22:0b:
0a:a5:ad:d6:58:ca:42:ce:bc:ae:80:c0:31:e2:43:
88:7b:e7:ec:52:28:06:4e:2a:33:95:23:3b:de:81:
d9:a5:3e:14:15:fc:77:5c:08:f3:2e:7a:d4:c5:46:
ec:ba:84:fc:e1:7b:f5:47:2b:e0:be:67:e3:1f:49:
df:0b:7c:58:bc:cf:ba:c0:51:99:e8:5e:2d:66:09:
f5:c6:69:ff:f5:b5:ca:f5:3e:ff:4a:0f:84:8a:95:
7b:59:7c:70:91:4f:0c:f3:08:b2:0b:04:7b:4c:83:
19:97:5b:94:2e:bc:ca:59:8d:bd:4d:bf:a1:84:42:
26:7f:21:e4:80:50:17:83:b0:88:99:d6:e9:ad:22:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2C:E3:E9:72:A2:E4:23:8C:D5:08:80:96:51:47:B5:F9:9E:40:9B
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:36:03:87:81:92:bb:3d:d4:0a:65:bd:17:f7:72:aa:09:59:
6e:83:c4:b7:56:0e:27:9a:17:d5:33:6e:ed:2f:25:0b:95:4c:
56:a3:b6:94:49:25:dd:90:6c:3f:0d:33:52:19:a5:26:ff:d3:
28:bc:c4:dd:d9:65:c5:c8:de:7e:b1:95:f3:60:f7:a8:4b:9c:
f7:52:e1:fd:a5:e6:c0:10:8d:f9:7d:1c:9a:f8:8b:ed:64:d0:
13:9c:1a:9b:5c:0e:1d:98:44:cc:bc:b3:3e:9b:6f:b2:28:55:
03:3b:e7:89:ea:db:ab:27:fa:15:e0:b4:6f:44:8c:01:b8:f6:
aa:fc:1e:42:a6:bb:76:5e:82:d3:ff:8a:b1:97:bf:e1:ae:7a:
8b:57:c5:91:23:3a:50:9c:d7:95:97:19:e1:c2:29:92:84:75:
72:b8:60:70:ce:9d:00:2a:89:73:ed:be:75:bf:c7:bd:90:48:
b4:1d:51:c6:c9:09:58:0c:a7:65:f7:ba:73:5b:f8:3d:e6:71:
86:26:45:d6:07:4c:25:ab:b5:3b:cf:66:70:84:9e:67:20:6d:
5f:9e:48:b5:ff:1e:68:d3:3f:e1:1e:1f:3f:ee:c6:09:fe:e8:
19:93:99:cf:bc:2b:07:8a:ce:de:7e:fe:ad:d3:9f:0a:b2:bb:
a2:b2:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:31:51 2024 by rpki-client on console-ams.rpki-client.org