Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: z7GkqNFDbYezVZn+ZWfqaFZkPFivrX8A21kHFtT2B7I=
Subject key identifier: A4:23:D5:7A:E7:17:9C:32:1A:67:DC:55:7E:0B:87:8C:68:F1:33:53
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 018FA25269C5592A54D9FC9CD3B53E6B5BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 09B4
Signing time: Wed 22 May 2024 22:01:00 +0000
Manifest this update: Wed 22 May 2024 22:01:00 +0000
Manifest next update: Thu 23 May 2024 22:01:00 +0000
Files and hashes: 1: H-pgjFcQeQzLJxX020KIAa5fs4c.roa (hash: NCo1lK95914RKJd8/j7poyn6ltsC13NWqAmFrixBkRE=)
2: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: syz+tkaRoBWAO5KUgV7jpY+N8g0VOmkWQiBwNpFt1Mc=)
3: u-7Ax-P0RJBUALJR2-rc8YHhafA.roa (hash: r7YW2Yul1b+QD9YX+fbjaIbU53H1SrlgGNRHvv8fZeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a2:52:69:c5:59:2a:54:d9:fc:9c:d3:b5:3e:6b:5b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: May 22 22:01:00 2024 GMT
Not After : May 23 22:01:00 2024 GMT
Subject: CN=a423d57ae7179c321a67dc557e0b878c68f13353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:3e:83:ba:36:54:e3:76:50:e9:b9:e9:92:
c5:b2:ce:06:13:e6:3c:ad:54:16:bf:f7:fc:fc:9f:
78:0e:6e:45:42:bf:50:98:b0:81:a1:85:dd:71:30:
a6:6d:d5:48:fa:31:a9:73:a2:d3:f9:e9:b9:a6:3e:
4a:c9:85:14:10:65:58:c3:e3:83:7b:0e:ac:09:d0:
d6:1b:0f:68:bf:7b:58:df:9a:06:13:5a:0e:51:ee:
14:fe:89:37:0c:1f:2a:c0:0b:83:e6:c6:35:6d:f8:
90:7d:83:18:32:b3:a6:34:c0:93:f5:e9:5f:96:c5:
37:a1:bb:03:3f:3f:f2:e3:91:63:db:fe:99:5a:05:
bb:38:92:d4:a4:b9:00:c1:c6:c8:9a:4e:61:da:70:
a3:f4:91:87:22:93:92:e1:a2:f7:8e:22:d8:6d:7a:
e1:23:6e:66:0e:46:1d:0a:36:a8:25:28:17:cb:c8:
04:46:16:b7:8e:37:36:bf:2b:b2:5a:a1:0f:f6:cd:
c6:57:11:35:32:8a:57:4e:6a:1b:ac:a4:87:43:46:
6f:cd:a3:d3:94:d9:7b:f7:87:4e:8e:49:ed:60:75:
9c:d1:55:e8:42:53:6b:34:6a:99:b4:fb:25:95:68:
bd:00:0f:97:98:76:06:90:6a:80:09:ed:47:bd:f8:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:23:D5:7A:E7:17:9C:32:1A:67:DC:55:7E:0B:87:8C:68:F1:33:53
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c9:c4:7b:81:57:94:5c:09:5f:a1:d1:f3:d9:33:ac:f5:d4:
d8:08:eb:d1:59:61:17:b4:1e:8c:e6:a8:49:e9:45:fa:17:cb:
6b:09:56:70:02:ca:30:f4:87:23:87:29:57:29:b7:05:08:aa:
cd:d3:e5:71:a3:af:53:c0:80:61:62:5a:38:62:ae:55:19:86:
5b:2f:0a:e1:a2:e5:c4:c9:e2:4e:d1:bc:2b:48:ab:24:45:48:
72:3c:e2:af:d0:60:b3:ce:b1:3f:52:ca:aa:26:f1:69:5d:80:
77:90:a6:d3:b7:75:d1:2d:8c:5b:38:44:70:0b:8b:79:db:e5:
4c:45:c6:f7:70:ed:88:12:75:8f:ca:11:ef:fa:cf:09:87:0c:
2a:a6:5a:ce:84:0a:80:1f:de:63:64:f6:c0:be:c7:ae:6f:52:
67:2e:c2:06:07:50:6a:2c:30:b5:06:a0:2a:c9:10:1a:a0:0c:
13:53:60:49:c7:ca:31:18:72:dc:ab:48:10:69:e5:25:7f:92:
07:b3:40:67:69:fc:a0:69:e7:e3:c3:93:01:e3:3d:1b:02:22:
5f:18:75:6e:ca:13:9e:d0:fc:a9:ef:0f:0d:ec:c8:68:91:85:
d4:72:50:0e:5f:10:11:24:aa:0b:cd:14:e8:53:be:e7:74:fa:
21:aa:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:05:55 2024 by rpki-client on console-ams.rpki-client.org