Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
File: UKiPmoNBAa34dwN6UcgdEzqpRuw.mft (raw, json)
Hash identifier: UmAOWneuXIwDwIBNNWuJtgsVQpnIljaq/94YbkXikug=
Subject key identifier: D4:5F:86:4A:1C:13:D9:78:C7:0A:60:72:FF:96:CB:6C:8A:D5:4F:14
Authority key identifier: 50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
Certificate issuer: /CN=50a88f9a834101adf877037a51c81d133aa946ec
Certificate serial: 01901D45FA88A56E0F3BDC42A70E0764E7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
Manifest number: 0950
Signing time: Sat 15 Jun 2024 19:00:43 +0000
Manifest this update: Sat 15 Jun 2024 19:00:43 +0000
Manifest next update: Sun 16 Jun 2024 19:00:43 +0000
Files and hashes: 1: UKiPmoNBAa34dwN6UcgdEzqpRuw.crl (hash: eXCtdev2LUcRqWFEP3UiUvYrmEeyblEtGLH4ne3BpQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:45:fa:88:a5:6e:0f:3b:dc:42:a7:0e:07:64:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a88f9a834101adf877037a51c81d133aa946ec
Validity
Not Before: Jun 15 19:00:43 2024 GMT
Not After : Jun 16 19:00:43 2024 GMT
Subject: CN=d45f864a1c13d978c70a6072ff96cb6c8ad54f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:cc:62:33:2a:31:4e:5a:e9:b7:48:83:1a:
16:38:77:b3:93:fd:98:79:c2:b5:a1:af:dc:1c:70:
59:02:f2:0f:27:56:e0:7b:ad:f3:fb:51:43:46:3d:
f6:af:dc:aa:ce:db:c4:6a:cf:f3:fc:f7:fe:67:de:
ef:27:42:15:10:2d:bd:0c:c4:17:b8:6f:bf:ab:3f:
8c:41:96:cf:12:3a:90:55:e5:4a:ef:c6:57:bf:6b:
49:66:ab:90:33:ce:64:62:fa:5a:c7:8a:16:d6:56:
72:44:9c:3c:41:f7:72:d3:d3:87:79:1f:60:b4:ac:
36:69:fd:96:44:69:3a:57:79:b5:1d:16:40:65:4d:
77:dc:a1:4f:f3:82:ea:c0:8d:84:ee:c0:8f:9a:17:
f6:48:9e:2c:6e:a1:76:ce:80:fc:e4:c0:35:1c:70:
64:ce:b3:1b:2a:9c:c2:e4:ca:30:75:d4:33:12:f8:
96:1a:28:93:9e:a4:c8:20:b9:b9:87:ca:47:6e:d3:
11:9c:5f:ee:ba:85:96:98:7a:ac:c4:ad:cc:20:5b:
af:fb:25:6e:2c:6c:1a:df:37:ab:f0:a1:c7:65:e1:
40:b2:cf:63:91:1f:9c:a5:41:7e:6f:c4:ce:e7:c2:
5a:d7:7f:58:bf:f7:0d:40:2d:82:79:c9:36:97:84:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:86:4A:1C:13:D9:78:C7:0A:60:72:FF:96:CB:6C:8A:D5:4F:14
X509v3 Authority Key Identifier:
keyid:50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f9:f4:0c:90:b1:7a:29:6c:95:17:5d:ea:93:f4:b6:16:20:
c2:8f:60:90:b1:f0:c1:ce:a2:77:36:32:86:c1:62:df:21:a7:
21:ae:b7:de:a5:a4:40:ef:e9:51:98:ed:6d:a0:08:40:17:31:
3e:89:58:d7:37:d8:35:68:d1:ea:fb:ac:36:0d:32:5c:e6:5b:
1d:a0:37:d4:d5:3f:bf:a1:2a:ef:02:bb:9e:96:d6:e1:82:ca:
14:42:8c:7d:0a:1b:c4:e7:b4:0c:cb:eb:b7:51:cc:38:7c:08:
ee:e3:c9:7b:d0:df:5d:5d:38:e1:d1:97:43:db:c1:ec:e4:16:
2a:8c:99:d6:67:19:e1:93:ad:92:48:05:97:6d:13:08:54:fb:
dc:13:e0:ee:6f:6a:f0:51:43:3e:cc:f8:5b:e6:70:e1:41:ff:
2e:89:54:c1:cc:d3:ab:fa:82:b7:e6:57:e9:79:57:31:e2:e8:
17:81:89:cf:dd:70:2d:87:c5:4a:dd:3a:b8:35:69:a8:a8:78:
b3:95:a3:9a:1a:05:cf:d1:e7:ca:35:ed:a1:86:1b:3a:e3:a4:
1c:ef:48:4e:f9:ce:db:cf:e2:fc:1b:77:e2:20:07:11:df:ab:
97:af:5a:fe:11:a1:21:83:42:b7:7b:fc:a8:a2:fb:5f:e2:77:
5f:01:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:03:25 2024 by rpki-client on console-ams.rpki-client.org