Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: ZqDJ0G10Vnhxa5lU1HKiNQWvoXo0RG/1wUSB6lxCSHk=
Subject key identifier: 41:2B:CA:FD:8D:BE:8D:A1:E2:5F:3B:AC:12:AF:A6:AF:14:44:5C:3E
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019358782D91B865CA0F6557999F305D817D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 09C1
Signing time: Sat 23 Nov 2024 10:01:31 +0000
Manifest this update: Sat 23 Nov 2024 10:01:31 +0000
Manifest next update: Sun 24 Nov 2024 10:01:31 +0000
Files and hashes: 1: 5TmLENOolAmWX-AQVeLDq5hWUOo.roa (hash: 4fVFR8VE8yMtviU1+p95XWeRbl81CnF+YOKSkt0ZP0o=)
2: JJVhCW803ae93WVyMGRh1jXvMlM.roa (hash: lVzI7nmNO0sGSAtzBTqChRPj1ZSNr2d1GL0UYPPXfVI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: 74Xb+XkUtmHObgXI6z8BWAnCIFF4PLMM98RZgDeYVzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:2d:91:b8:65:ca:0f:65:57:99:9f:30:5d:81:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Nov 23 10:01:31 2024 GMT
Not After : Nov 24 10:01:31 2024 GMT
Subject: CN=412bcafd8dbe8da1e25f3bac12afa6af14445c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:42:2c:2a:9e:16:17:1c:42:27:dc:1d:4e:
82:fc:e7:5b:87:7e:41:ab:6e:2f:6c:42:d6:45:9b:
61:c9:d4:64:02:a5:8b:ad:c6:ca:77:0e:fb:b5:b1:
0e:e4:68:b3:59:ad:7a:e4:3f:5b:a1:66:ab:42:46:
70:4a:6b:3c:fb:85:99:0e:b7:ec:d7:40:c4:38:ea:
99:ae:8a:34:95:69:bd:70:2a:26:13:85:65:51:71:
12:98:14:ff:18:22:96:a7:7d:4f:63:28:49:a5:a4:
25:26:17:52:fd:1e:88:8f:f6:05:0d:07:2d:fa:f3:
61:08:80:de:72:cf:2c:65:1a:ef:37:fc:18:b0:55:
81:92:48:96:81:3c:a9:0a:1b:39:a5:84:b7:78:24:
e8:31:29:d1:db:26:20:de:c2:71:79:69:22:9f:f8:
b4:a0:6b:e0:3b:3b:1e:fa:1d:f0:f2:ec:88:cf:09:
1a:ea:eb:0a:53:85:bb:52:57:c4:ad:e4:13:9c:07:
3b:59:30:83:fd:a8:cb:de:ac:88:3a:73:10:c7:ba:
6f:59:92:6d:6d:da:25:ce:50:df:4c:2c:6f:6b:2f:
1e:53:30:23:75:e6:e6:4c:d3:97:f5:5f:32:f8:97:
88:31:e4:10:7e:14:30:b5:66:8b:fe:f5:40:c5:2b:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2B:CA:FD:8D:BE:8D:A1:E2:5F:3B:AC:12:AF:A6:AF:14:44:5C:3E
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:02:12:1f:5c:23:30:5c:7d:df:86:06:c5:a6:71:22:c0:9c:
ff:70:fe:8c:85:92:52:4a:f0:f4:77:60:4a:da:a2:14:e6:d9:
c7:1f:10:ed:96:0a:e7:e9:b8:20:b9:b9:7b:9c:0b:c9:7f:e4:
87:10:d8:d2:bd:96:53:8a:91:cb:f7:7b:03:b4:fa:32:ce:59:
0a:bb:ef:00:77:68:78:5d:a4:3b:ec:7e:05:28:ec:cd:50:20:
7f:63:11:c5:64:69:df:ab:3c:a3:67:b4:6c:59:10:7e:bd:7e:
54:88:64:87:0c:06:a9:9f:77:3e:00:4a:65:26:b5:9a:ec:1d:
fd:c2:17:c8:49:09:88:69:78:33:8e:a5:0d:4b:af:0f:56:cb:
02:c7:7f:d7:d3:26:3b:50:e8:be:e2:e2:5c:9c:95:56:2e:e1:
af:bc:fb:bf:97:ff:02:8f:d5:0c:41:1a:37:8a:a5:c2:29:6a:
3f:64:c4:a5:0a:bb:9e:57:7c:8d:c4:49:b8:33:e7:39:c9:4e:
2b:f6:79:06:d2:8d:45:7d:2e:de:a4:a3:7d:8c:ff:54:cb:c3:
43:47:3e:17:19:34:d7:de:d0:0d:37:33:8d:62:f7:7b:fc:39:
25:f7:4d:9d:a7:df:de:a3:68:84:c6:07:bf:43:a8:f5:62:b1:
09:fd:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:07:52 2024 by rpki-client on console-ams.rpki-client.org