Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
File: U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json)
Hash identifier: H7IPP73WZBD9JP82cXH6FYxtKvrXrPhmm37051HZC3g=
Subject key identifier: 7E:E4:F1:57:50:97:B2:12:C4:0A:07:98:EB:E7:BD:87:90:5F:99:92
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial: 01901EC6F6AD50D2AA15FDBA9DE14FCA9A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
Manifest number: 11C5
Signing time: Sun 16 Jun 2024 02:01:14 +0000
Manifest this update: Sun 16 Jun 2024 02:01:14 +0000
Manifest next update: Mon 17 Jun 2024 02:01:14 +0000
Files and hashes: 1: A_ZWXFS7hnva8o0uCHwWMp9dsNo.roa (hash: HLyp1enyS+az7jH4yxniLoyPOKwY0AONts1jSFEt290=)
2: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: jDlYVmV8CvuxopE+pWeCFWin5surCndwQEccEHQMrvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c6:f6:ad:50:d2:aa:15:fd:ba:9d:e1:4f:ca:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Validity
Not Before: Jun 16 02:01:14 2024 GMT
Not After : Jun 17 02:01:14 2024 GMT
Subject: CN=7ee4f1575097b212c40a0798ebe7bd87905f9992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2e:70:e2:f8:34:f4:50:d8:e3:a1:23:87:33:
b9:fe:54:3e:b2:b3:f0:0e:99:4f:9f:71:e4:05:ff:
a4:07:b5:af:5e:ae:b9:5a:94:b8:35:42:f9:07:57:
50:16:a3:79:55:fa:39:e9:3f:81:06:12:04:68:a6:
92:c9:82:78:84:cf:a7:35:4f:4c:57:21:2b:f7:be:
b2:b5:f5:61:c4:11:57:36:f0:00:5d:87:b4:e4:d1:
6d:50:10:d8:fd:b1:7c:4d:a5:9d:34:fb:68:1c:fe:
b0:0e:bc:2a:fa:7b:50:21:90:83:ca:39:6a:c3:a4:
65:a4:05:03:33:1d:44:33:6f:1d:8e:7b:a2:7e:28:
c6:10:1f:93:03:4e:b0:57:cd:b9:e2:e6:a3:de:fd:
ec:aa:bf:f0:3d:41:8e:e0:96:0a:85:08:09:f2:b4:
38:ca:82:05:79:ff:de:14:3e:6a:be:65:31:09:02:
41:46:3f:4d:b9:e2:e4:21:99:89:67:96:4d:e3:cb:
bc:e4:9d:5f:a2:b6:37:75:97:84:33:dc:ca:6f:e8:
8b:01:51:08:f5:86:00:4b:f2:90:3c:b1:7c:57:73:
61:8c:55:00:91:8c:1a:ca:7a:5c:3d:34:1a:c0:79:
7c:a4:52:fa:69:93:7a:22:8c:c2:b8:35:ee:5e:c1:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:F1:57:50:97:B2:12:C4:0A:07:98:EB:E7:BD:87:90:5F:99:92
X509v3 Authority Key Identifier:
keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:01:83:56:88:43:ec:1f:e4:6a:12:01:9b:9c:4c:e8:2d:18:
86:c2:2b:42:90:1b:5a:c3:e1:97:e9:8b:3a:ae:c9:2e:13:88:
90:79:fc:7d:2e:af:ed:8c:59:d7:49:42:0d:47:54:2a:52:be:
05:06:02:3d:28:25:88:a9:78:b5:65:f3:ce:0a:90:95:68:42:
de:84:be:d1:dd:d7:57:36:36:33:79:df:c0:66:e8:9e:1e:83:
8d:3d:ee:8b:c5:f3:58:5d:ee:85:81:68:6c:e2:cc:28:61:c5:
72:38:bc:23:a0:67:68:ee:ef:4a:22:ba:aa:72:f6:77:a4:62:
a1:b0:27:1a:7f:a1:0b:0f:27:44:a6:85:15:d8:f6:d0:0d:b4:
5a:9f:c1:4b:ef:84:50:07:1d:ea:d6:5f:46:bd:6c:a2:92:6b:
5d:93:92:66:1a:62:5b:56:a8:e2:56:82:1a:e3:a5:db:db:6e:
4d:79:bd:9c:00:67:7e:ce:13:40:61:79:36:67:b0:8c:10:a6:
46:b3:03:fc:5d:b5:c4:af:da:f0:88:3b:d0:6d:4d:b5:4b:0e:
fc:7b:88:2c:45:46:b6:c6:9e:37:e0:57:dd:58:3f:92:ed:1b:
2b:c3:52:07:55:c2:46:8f:77:1f:7c:28:96:9b:bd:ae:f3:3c:
e9:b3:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:01:38 2024 by rpki-client on console-fra.rpki-client.org