Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
File: U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json)
Hash identifier: Cr7+MKR6hAnAZNU2uQgq3o4Ebv5aci2kn855murtXw8=
Subject key identifier: 4A:A4:41:84:D7:3C:E8:58:C0:BD:D6:09:F0:67:A0:D2:18:43:AA:CF
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial: 019041897651524526CB878BF9B71989E9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
Manifest number: 11D7
Signing time: Sat 22 Jun 2024 20:00:46 +0000
Manifest this update: Sat 22 Jun 2024 20:00:46 +0000
Manifest next update: Sun 23 Jun 2024 20:00:46 +0000
Files and hashes: 1: A_ZWXFS7hnva8o0uCHwWMp9dsNo.roa (hash: HLyp1enyS+az7jH4yxniLoyPOKwY0AONts1jSFEt290=)
2: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: pJWzGqAIrrfR2jr/imIdf9+HQOOnKq/DGIjbcnqr/JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:89:76:51:52:45:26:cb:87:8b:f9:b7:19:89:e9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Validity
Not Before: Jun 22 20:00:46 2024 GMT
Not After : Jun 23 20:00:46 2024 GMT
Subject: CN=4aa44184d73ce858c0bdd609f067a0d21843aacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:46:73:2f:38:13:36:f8:ac:4c:fc:d3:ea:
01:20:fe:58:2f:f9:2e:0b:22:4b:b6:10:c2:77:54:
55:46:9a:74:4b:f7:c6:fc:91:84:15:f5:66:cc:1f:
6f:aa:aa:10:b7:c6:0d:10:12:83:8c:6c:f0:b9:23:
71:57:03:54:69:57:36:82:5e:13:72:1e:80:04:36:
bb:39:22:7f:f5:d4:c0:ea:cf:74:77:76:80:26:65:
ef:55:e9:9c:f9:9f:32:cc:24:53:d2:9e:ec:79:84:
52:67:46:19:19:c5:f7:ba:2b:e1:e2:28:2e:31:25:
8c:ac:8c:6b:c7:a0:92:a5:3e:f6:57:b6:cc:2b:0d:
cb:02:19:bb:de:ee:9b:25:a2:1d:ca:d6:41:25:26:
89:49:6b:61:11:7a:3d:b2:f5:48:2d:b3:1e:66:bb:
68:f1:0a:c8:09:22:9f:65:95:b7:e2:a0:21:d7:7e:
88:61:2f:84:7c:56:93:66:b9:54:25:65:fe:52:31:
30:0d:cf:52:eb:75:4a:53:d3:30:76:d6:b6:5e:04:
9d:5b:76:1b:34:b3:e3:a1:0e:cf:a3:90:c4:95:de:
0c:7c:34:55:70:09:51:0b:75:f5:c4:5b:08:62:1d:
8e:00:7f:3c:9b:92:fc:3a:86:dd:ce:e2:41:c1:58:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A4:41:84:D7:3C:E8:58:C0:BD:D6:09:F0:67:A0:D2:18:43:AA:CF
X509v3 Authority Key Identifier:
keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:75:3e:a6:28:89:5e:33:b9:e3:70:d8:b3:61:43:ca:1f:d7:
22:b4:ef:eb:25:c1:ce:42:d4:f9:7b:56:f2:89:81:b2:0e:82:
ac:63:e3:b0:8c:ba:cb:55:07:0a:98:16:f2:e0:e5:cd:fe:50:
17:6e:01:c4:e5:1f:f8:88:e7:a7:27:36:f3:0f:e0:50:07:eb:
f3:9a:33:c4:bd:aa:e9:e3:1b:fc:14:dd:63:24:07:70:20:0b:
67:33:1c:74:0b:98:c0:70:90:25:84:95:c8:8b:79:f8:ea:f4:
38:42:16:8f:10:e0:cd:10:2f:b7:1f:a4:c3:5b:b1:24:a3:30:
04:59:06:ea:ce:fc:62:d4:74:3e:31:4f:3f:ab:99:27:86:b1:
95:53:ff:b0:66:37:d8:3a:bf:c7:d4:71:5c:8d:93:d5:1e:50:
2b:a5:c1:3e:43:2c:0a:3f:96:ac:82:6a:b8:d4:c6:70:f0:b5:
63:06:11:a9:1d:91:dd:4e:2e:59:e1:03:d3:5e:ac:34:52:2a:
01:1e:a1:e6:2a:99:d3:3b:7c:03:0f:03:63:1d:e5:1b:55:ba:
72:7f:d4:0e:86:30:b1:48:69:25:f6:82:bc:af:93:8e:05:db:
d6:11:71:d7:ab:b6:2c:47:c4:10:91:33:9f:f3:8f:3c:4e:d2:
c1:e6:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:58:20 2024 by rpki-client on console-fra.rpki-client.org