Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
File: UfsmDqHIG4GxkdCujcNkESHp65Y.mft (raw, json)
Hash identifier: jyws4+hnZbQyyWjwL340xoFl9NGgI6wegU1e8TZ0ZGM=
Subject key identifier: 29:46:A6:3A:6C:AB:E8:7A:D6:6E:07:91:91:83:53:07:81:5A:87:F5
Authority key identifier: 51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
Certificate issuer: /CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Certificate serial: 0193553F8C2C91C2F51B24A639FF43957564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
Manifest number: 0312
Signing time: Fri 22 Nov 2024 19:00:48 +0000
Manifest this update: Fri 22 Nov 2024 19:00:48 +0000
Manifest next update: Sat 23 Nov 2024 19:00:48 +0000
Files and hashes: 1: UfsmDqHIG4GxkdCujcNkESHp65Y.crl (hash: lch56s4V18kp3HzU+u92lYwQ/IUT6LIK6FN1MoDUPxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:8c:2c:91:c2:f5:1b:24:a6:39:ff:43:95:75:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Validity
Not Before: Nov 22 19:00:48 2024 GMT
Not After : Nov 23 19:00:48 2024 GMT
Subject: CN=2946a63a6cabe87ad66e079191835307815a87f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:97:65:df:d0:0c:89:95:09:6f:80:13:28:
1f:47:94:ae:9e:6c:10:5f:e9:a1:7b:a2:d1:b6:ea:
f5:00:89:f7:52:ea:c1:12:ef:2e:df:d3:44:5b:c2:
7d:2a:fd:1c:c4:af:7f:87:48:83:93:0a:c6:a4:af:
2d:43:cd:60:3a:79:71:28:5c:3a:ff:92:b8:bd:d5:
8f:2c:82:43:90:e1:02:5d:ee:4f:30:eb:7e:e7:bf:
c5:e3:ce:c1:89:6b:59:36:37:f0:43:26:c2:e0:9f:
98:06:ef:d7:fc:80:70:14:e4:cf:8d:d1:58:58:45:
1b:11:5f:d4:08:bf:bf:c2:1a:20:d5:aa:28:ec:76:
19:c2:d5:c9:d2:a5:3e:2d:ab:45:2e:fa:84:45:d3:
27:cd:31:82:01:09:ef:b9:7d:41:06:b5:99:c1:ae:
6c:e9:24:4e:f4:96:3a:63:03:89:f3:a1:de:ba:a2:
82:3a:69:4b:09:c7:bf:79:a2:eb:32:ac:e2:56:d9:
08:69:34:fe:f2:d8:fb:86:4d:15:db:ab:4d:f1:e0:
30:b0:e7:98:cd:af:85:c9:9d:80:54:07:08:93:d6:
ab:6f:0e:8f:82:5d:dd:45:28:d3:b5:7b:f8:06:c8:
9b:4d:d9:1c:4b:5b:ad:43:5e:0f:9f:0e:3c:55:6a:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:46:A6:3A:6C:AB:E8:7A:D6:6E:07:91:91:83:53:07:81:5A:87:F5
X509v3 Authority Key Identifier:
keyid:51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:99:e6:30:bd:ab:4c:38:c1:f8:f6:7d:1c:f0:5b:08:c4:1a:
25:9b:70:b6:56:51:4b:55:0a:6b:5b:f4:a2:f3:f3:c5:0c:f8:
16:bc:53:92:f4:1a:44:0d:6a:08:e5:d4:5f:6f:c9:aa:d4:3a:
3a:73:b2:f4:27:80:aa:26:af:89:e9:80:ac:86:b0:76:02:a0:
b6:73:52:10:6a:94:b7:69:5e:f6:c9:02:aa:43:e9:4e:60:85:
07:50:12:e7:46:b9:3a:48:86:77:57:af:50:a3:c1:82:18:00:
cb:4c:c3:af:9f:55:ea:c2:8a:50:37:24:fe:bc:41:1e:1f:fe:
39:33:26:92:25:3c:c8:37:55:0e:98:3f:1f:f1:ba:63:62:02:
e9:61:ba:9a:1c:a6:c8:a7:17:0e:dd:27:b1:2d:b2:29:21:b9:
23:d6:68:fe:cd:71:e3:ea:60:6d:7e:53:f0:0a:e4:07:ae:03:
06:a4:4f:01:76:1f:76:24:ed:7c:fe:73:49:21:9e:d9:92:3d:
20:81:fe:11:36:01:37:44:ce:48:a7:20:12:9a:2c:4d:41:97:
e2:48:7e:f3:58:18:83:54:15:6c:2d:5f:a5:60:69:4e:1d:54:
dd:57:b0:1d:7d:61:94:b8:4e:de:10:9c:c1:92:e1:95:64:1d:
aa:96:9d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:50 2024 by rpki-client on console-fra.rpki-client.org