Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: EsCuiPGBBWBGiIQG7rtsDMiCimT9/qEh1BoDOWPFlR4=
Subject key identifier: 3D:50:88:C3:6D:A4:88:AB:5E:32:5F:73:2B:1F:CE:8D:4E:7A:18:69
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 0193523E0CBF731776B9279C5A24A3BA9303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 137B
Signing time: Fri 22 Nov 2024 05:00:18 +0000
Manifest this update: Fri 22 Nov 2024 05:00:18 +0000
Manifest next update: Sat 23 Nov 2024 05:00:18 +0000
Files and hashes: 1: Ia2imnkgDvUqgUJVU1h1_R93WKM.roa (hash: jh+DBG9lrOL2UWX07dehqzqliA+Ge3OYH3iifdS6p20=)
2: IwmiSc4K8JZ3ySv-uBA2Jtm3Sfw.roa (hash: hCeujAYG7yruHOaL3uRYm0LEPME0hIHY4rbYfMFvJ1o=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: 7KAH4sntp5z7Dbv6wAhnt09j/w31SCgCpiDu8zleH9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:0c:bf:73:17:76:b9:27:9c:5a:24:a3:ba:93:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Nov 22 05:00:18 2024 GMT
Not After : Nov 23 05:00:18 2024 GMT
Subject: CN=3d5088c36da488ab5e325f732b1fce8d4e7a1869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:34:63:3e:0f:7b:b4:95:c2:f3:72:42:52:
e2:c7:31:c4:72:f5:04:c8:53:be:b6:94:2e:04:11:
6f:ee:c1:9c:2c:88:e1:09:f7:8e:6a:c4:ae:55:4c:
c0:0e:65:2a:4e:5f:8e:07:1d:5e:0e:1d:29:20:8d:
43:44:39:24:b5:0f:3d:a2:be:de:55:ea:17:9a:98:
5c:82:e9:35:10:94:7a:47:cb:5b:7e:ae:ae:7e:ef:
57:77:e4:ab:58:70:91:a9:30:f7:ef:ed:07:76:18:
e2:a6:9c:a2:e0:c9:4d:31:2a:75:c5:92:a1:7a:b2:
c3:22:1e:86:9b:bd:fa:38:4e:df:c3:22:25:f7:94:
6f:63:9c:12:84:56:53:62:9f:3f:83:6e:ae:fa:04:
ea:a0:1f:4c:71:cc:54:fa:57:76:cd:91:ff:dc:c0:
4c:e6:ac:cd:e2:e9:8b:6a:be:c4:b9:8e:24:e8:f8:
8e:a8:d3:6a:c4:f3:b3:45:15:9b:72:bf:68:bf:6a:
2a:35:8b:c8:d8:d7:35:6c:bc:e5:52:f5:a7:58:54:
00:d7:82:04:70:e4:21:19:e9:bb:f2:d7:53:76:a8:
ed:ea:ed:b2:60:cf:75:25:0c:f1:59:e8:b0:ef:b3:
68:a1:4f:93:4e:ff:99:13:b7:a8:01:6b:23:33:c4:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:50:88:C3:6D:A4:88:AB:5E:32:5F:73:2B:1F:CE:8D:4E:7A:18:69
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c8:a8:53:64:06:9d:29:c4:09:5d:d1:20:a2:8a:15:cd:4a:
59:05:90:d7:82:0d:00:97:0f:f2:65:d2:5f:8a:18:68:22:4a:
74:4e:5c:44:9e:e3:c9:ff:a7:c5:ca:ab:af:b3:45:46:9e:55:
69:f5:68:91:fe:98:40:62:7c:11:63:bb:ed:b4:be:7f:a1:07:
1b:a3:ed:5b:65:3a:47:c2:f7:16:06:0b:a0:ed:d2:c7:2a:c7:
4e:97:60:b2:2a:43:f6:85:46:2a:e0:26:9c:6b:85:01:d4:ad:
cb:00:25:6a:5e:ca:ad:1d:81:bc:ef:8f:08:3e:bd:d5:61:e4:
bd:0b:15:f7:a0:c3:25:8f:83:5b:7f:53:7a:6e:88:99:d2:67:
08:64:d3:6c:71:af:38:1c:d5:93:a3:da:72:d0:b5:46:81:35:
2b:fe:dd:20:75:e9:d4:0a:d1:f5:e2:06:95:b2:f0:73:5b:80:
47:a9:d4:02:76:9c:4a:d9:15:af:50:6d:e9:25:7a:ec:a3:5f:
72:ed:40:1e:f9:b4:a7:83:70:1a:55:68:a0:94:7a:d5:c5:97:
2b:1c:ff:f7:8c:0c:ed:77:d3:80:25:95:d2:05:18:15:11:14:
01:55:14:e5:a8:77:83:da:04:03:14:74:a9:f7:b9:ef:a9:d3:
0c:91:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:22:31 2024 by rpki-client on console-ams.rpki-client.org