Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: WhePcWa3nObyiH/ek0lqHJNh3sEzvScKus3HzFpSIJ4=
Subject key identifier: A8:D3:E0:01:60:4C:4E:05:9C:18:8C:DC:5F:64:19:86:68:59:B0:4A
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 0191F9D99A375C77057AB59A8FE0DA4D05F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: A7
Signing time: Mon 16 Sep 2024 08:01:13 +0000
Manifest this update: Mon 16 Sep 2024 08:01:13 +0000
Manifest next update: Tue 17 Sep 2024 08:01:13 +0000
Files and hashes: 1: PTkkSYzfweR_ck6bcq9eq6VkPuE.roa (hash: JTzJNRwnKAQgC5pMWvNgvs48p3R0igxleAErDYFN55Q=)
2: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: wri6DR72TnQjwzuPuQ1OAStp1KoD5QpyC7fT/sauufA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:d9:9a:37:5c:77:05:7a:b5:9a:8f:e0:da:4d:05:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Sep 16 08:01:13 2024 GMT
Not After : Sep 17 08:01:13 2024 GMT
Subject: CN=a8d3e001604c4e059c188cdc5f6419866859b04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:a0:c2:c4:e9:e1:63:fb:d0:70:df:e9:90:
c7:58:23:e7:31:da:c5:ff:33:09:48:8d:b6:db:92:
80:ed:70:31:1c:e9:ae:1f:5e:52:69:f5:eb:f2:37:
aa:1f:53:62:29:34:68:8c:af:d5:e6:58:ea:c2:17:
b4:f4:0a:04:f0:c4:89:ec:b5:ae:a6:5a:e9:a3:3b:
75:18:80:e3:97:18:c1:fb:d4:02:9d:f8:c3:67:3f:
d6:dc:74:3e:c0:1d:a0:77:eb:bd:b5:7c:47:f5:cc:
d0:45:f0:65:6e:59:a4:39:10:a3:8a:7a:bb:8e:80:
16:9e:fc:b1:eb:5e:1c:29:4f:21:2f:60:a4:1a:7b:
f2:b2:47:50:2a:33:4d:fa:fc:24:9c:dc:0a:5a:58:
73:e0:c5:99:5f:79:10:71:8d:a8:97:ce:27:dc:13:
8e:b4:0e:48:4f:ff:79:fd:91:8a:29:68:d9:51:f1:
21:d8:f3:d4:51:38:bb:d0:51:a3:a7:0c:1d:eb:30:
49:05:22:da:1f:cd:f5:70:49:23:78:94:8a:ac:f4:
3d:a0:1f:83:10:85:97:e6:d0:31:7a:a8:e1:2d:f7:
c1:19:1b:37:bd:a6:65:3f:b5:3c:d6:7d:11:56:bc:
68:10:df:bc:a9:92:5e:8c:02:49:de:82:e3:b7:62:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:E0:01:60:4C:4E:05:9C:18:8C:DC:5F:64:19:86:68:59:B0:4A
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:82:ec:ca:ca:7d:5c:79:ee:36:31:2a:26:5a:2e:be:be:a5:
70:d3:d3:16:54:93:66:c1:bd:19:5a:fe:28:2b:d0:54:c7:0c:
de:e1:58:29:06:d0:82:c8:5d:3f:e0:85:a3:28:49:8f:0b:e8:
93:f8:16:62:e4:ef:e7:24:12:d2:61:df:04:d9:24:35:39:e9:
8c:c1:6a:5f:db:51:36:aa:ff:a9:0e:d2:51:a2:81:48:97:41:
b2:bb:ca:7d:4b:a3:f8:6b:52:84:c9:49:8f:9a:98:76:d6:d4:
9a:16:d5:b1:fc:3d:a4:63:70:83:27:25:56:d0:13:46:ad:bc:
76:88:ac:f2:cb:c2:b7:7a:83:b1:4c:2a:d1:72:99:cb:33:b4:
aa:11:e0:e8:1f:9d:70:0e:2d:8b:dc:07:e3:41:cf:39:b9:7f:
60:05:6a:5f:11:84:74:9b:7e:86:a7:57:6f:e4:46:4c:01:1a:
87:6b:12:bc:ad:ca:39:d6:8b:48:f9:ba:27:a8:0e:0d:45:00:
2b:cf:fe:0d:f2:47:cc:61:f8:b9:7b:2a:b7:0c:a0:e3:60:07:
9f:48:10:cb:f6:d1:30:d8:2a:f2:f6:a0:cf:14:df:4e:ea:20:
51:3e:55:84:17:34:f8:39:b2:5a:bf:73:21:b6:e2:10:0d:98:
b7:5d:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:13:15 2024 by rpki-client on console-fra.rpki-client.org