Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: Xk/QOaDhmumuF9+MptjCv9GDLO4Gg2PcCnpdIDm2ukI=
Subject key identifier: A8:E6:C9:8C:77:3A:76:A8:3C:DD:A5:C9:57:6B:00:C6:F0:46:53:DA
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 018F874A4095FB9C3E0307740316E4122183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 07C7
Signing time: Fri 17 May 2024 16:02:21 +0000
Manifest this update: Fri 17 May 2024 16:02:21 +0000
Manifest next update: Sat 18 May 2024 16:02:21 +0000
Files and hashes: 1: 5TmLENOolAmWX-AQVeLDq5hWUOo.roa (hash: 4fVFR8VE8yMtviU1+p95XWeRbl81CnF+YOKSkt0ZP0o=)
2: JJVhCW803ae93WVyMGRh1jXvMlM.roa (hash: lVzI7nmNO0sGSAtzBTqChRPj1ZSNr2d1GL0UYPPXfVI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: rm5R+g7jf3/UZnyKP63EZYrPrTATkk5bMiHbPd015tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:40:95:fb:9c:3e:03:07:74:03:16:e4:12:21:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: May 17 16:02:21 2024 GMT
Not After : May 18 16:02:21 2024 GMT
Subject: CN=a8e6c98c773a76a83cdda5c9576b00c6f04653da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:20:bf:f9:c6:d6:8b:42:a7:35:36:f2:46:
b8:4c:26:8f:3e:c5:34:84:32:27:76:54:c7:28:92:
66:94:ee:f2:62:1e:8f:f6:78:12:9c:4b:39:e4:d7:
df:4c:a7:a7:50:7e:f2:a5:67:22:c5:c8:7f:06:0b:
5e:fe:48:1e:0e:34:76:23:ee:7c:31:8c:fd:cf:fd:
63:43:01:ba:bd:73:56:8e:fd:a0:58:1c:25:d7:bd:
ec:7e:7d:13:b2:94:13:22:ed:c2:d1:d3:f0:08:f3:
da:01:7d:13:b2:bc:36:96:94:e9:f5:33:3f:21:32:
11:88:a3:df:e8:2d:92:f2:f8:65:ee:c3:47:c2:77:
96:eb:9b:33:bb:42:1e:45:63:13:95:b3:ad:a0:c7:
16:01:56:c1:c3:08:1b:24:cf:fc:a4:5f:39:98:16:
b9:f1:d0:63:23:fa:6f:ce:28:5a:2c:30:be:9d:51:
58:d2:15:23:06:89:3a:4b:71:e6:8b:c3:5f:6f:a1:
97:32:4b:7f:6a:91:65:d8:bf:30:a6:37:9a:1a:10:
52:dc:6a:93:60:9b:0c:d8:b5:a3:1a:42:4e:82:fa:
52:cc:de:23:d4:27:af:f4:40:15:95:b1:6c:55:c9:
69:7a:7a:3f:8e:42:dc:1e:b8:20:90:e1:4d:2d:45:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E6:C9:8C:77:3A:76:A8:3C:DD:A5:C9:57:6B:00:C6:F0:46:53:DA
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b4:6a:2c:a7:2e:cc:7c:90:78:fd:bc:5c:c4:8e:b2:10:ad:
9b:91:8d:26:4f:56:dd:14:14:8e:a4:eb:c3:4e:5a:69:68:17:
5a:3e:55:a5:4d:51:99:24:3e:a0:ab:02:07:a1:06:bb:b0:55:
65:97:c2:d7:a0:a0:cf:e5:8d:6e:27:56:40:c5:66:6d:b1:dd:
38:87:2f:79:de:d8:fb:41:26:2c:59:92:54:67:f4:6b:4d:86:
7b:37:3c:b2:60:f8:0c:99:72:2f:c8:44:ba:af:be:bb:e2:5e:
69:76:b8:97:94:3e:7c:f6:ba:2a:b7:f1:7d:09:f6:cf:54:51:
c6:f9:cf:e8:73:38:71:71:0a:46:51:18:9c:1a:01:78:4c:05:
0f:39:74:38:d4:0b:27:db:85:10:0d:af:1c:a3:e4:22:4c:59:
b0:e9:9a:51:8f:d7:a3:2c:32:ad:60:9e:3a:b6:5a:07:d7:d0:
47:29:8a:ef:ee:67:eb:d0:63:ba:df:0e:8a:0e:8c:e4:da:8e:
f4:80:22:fb:77:fc:c9:85:79:4c:0f:79:80:f5:54:ab:4d:8e:
08:a5:9b:cc:fa:15:24:4c:25:af:80:40:aa:e7:80:8e:49:9a:
98:6b:d0:05:1e:51:d3:6e:5e:e5:02:21:44:95:15:d7:ec:f6:
f6:99:5d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:44 2024 by rpki-client on console-fra.rpki-client.org