Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: CIk6JNvv4g3xN9VPJH7/z03FjyzpBcQsycWFP5l/6f4=
Subject key identifier: 9D:41:94:9B:54:2F:CB:AB:3A:4F:41:45:39:90:8F:8B:45:E1:AE:23
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 018F94CF7949270D4C51B65B32071BD918D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 0FB3
Signing time: Mon 20 May 2024 07:02:55 +0000
Manifest this update: Mon 20 May 2024 07:02:55 +0000
Manifest next update: Tue 21 May 2024 07:02:55 +0000
Files and hashes: 1: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: 4dFr93qzfOXHpWiVzi/RR2+ePWJSP4zh4frrr78z8vY=)
2: yD3ZCNMvvTOCLXDz2-P2Bizyu_s.roa (hash: 706xM0IQaLcK1WT+58r62htuEiekOp/WZC6y5lpj3ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:cf:79:49:27:0d:4c:51:b6:5b:32:07:1b:d9:18:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: May 20 07:02:55 2024 GMT
Not After : May 21 07:02:55 2024 GMT
Subject: CN=9d41949b542fcbab3a4f414539908f8b45e1ae23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:69:f6:93:5e:d6:d2:a3:8a:74:24:46:2b:
eb:58:0c:26:14:39:3c:55:bf:64:87:04:e7:6e:69:
4b:49:bc:63:2c:3a:e5:6a:7b:b1:d3:46:92:d9:78:
2a:f7:8b:d2:de:ab:ae:48:35:b5:f8:70:ab:36:94:
01:c1:be:0f:c7:e8:ba:be:3e:36:34:67:67:6a:76:
6f:aa:aa:10:aa:1c:2e:ba:64:20:53:6f:ca:60:b6:
db:d0:cd:a6:bb:c9:5e:d3:03:9e:7b:48:b4:de:ba:
d3:3b:99:59:69:6d:ea:f5:29:e4:cb:fc:e3:ef:81:
29:be:a9:2e:10:86:b6:39:49:94:7b:36:e3:2a:7d:
2c:a5:3a:6c:38:0c:c4:dd:68:5d:b1:0b:ad:6a:6c:
33:cc:02:66:86:9d:a2:f2:d9:cc:47:87:b3:26:b6:
69:5c:51:14:14:e8:c8:e2:32:a2:b4:4b:4d:87:aa:
ed:16:f9:4c:98:08:0f:2e:fa:3d:6d:e6:25:32:1b:
5b:0c:2d:72:0f:6b:62:7d:3f:8a:31:16:9d:4c:4d:
17:3d:7f:56:b2:4a:e5:ff:9f:7f:52:cb:48:b6:9e:
c9:cd:c9:2a:b7:fe:bb:d1:97:dd:70:90:cd:20:0a:
d1:10:de:5b:27:07:2a:55:66:71:ce:b8:b2:f5:9b:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:41:94:9B:54:2F:CB:AB:3A:4F:41:45:39:90:8F:8B:45:E1:AE:23
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b6:d2:3b:b7:d5:8c:3d:e9:38:9b:cd:0d:b6:b2:df:80:99:
12:f1:51:55:b6:c0:11:4e:76:2e:d6:8c:48:20:64:71:74:75:
41:98:ed:38:bd:60:8f:57:38:3b:25:98:18:23:df:2e:70:5f:
16:60:4f:38:a7:da:e3:3a:6f:31:fd:0f:a7:c4:65:b1:f3:1a:
ed:78:21:9f:be:c8:64:de:fc:48:c0:83:27:09:ad:3b:96:58:
44:65:4c:ff:4a:01:1a:03:40:6a:75:3a:4d:3e:fb:f6:45:9b:
d0:12:b8:d7:dd:cd:ff:41:2d:29:35:24:36:1b:d2:c1:ae:af:
1c:48:58:18:3b:94:e3:8e:2a:72:bd:4e:6a:4d:37:dc:07:33:
b3:ae:37:f7:d2:ce:3d:24:01:4b:86:e6:31:90:97:9d:af:32:
8e:fc:25:9e:1f:ea:4f:00:3d:34:3b:01:06:96:c8:36:d5:28:
64:ff:fd:d8:11:c1:7a:53:1d:31:26:34:fb:64:f7:a8:67:06:
65:6d:a4:8f:7c:f4:42:f0:01:4d:34:c4:aa:57:0c:f7:8c:04:
2a:39:87:04:da:44:6c:d6:30:4f:00:65:9b:a2:ea:2f:af:10:
25:e5:3f:3b:61:53:66:99:26:e7:7a:f2:af:08:d1:eb:59:ed:
dd:f2:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 07:42:16 2024 by rpki-client on console-fra.rpki-client.org