Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: i2jwfVv73tdUvkEpoWmGUJFCQHZbvnM7YTstaU0Mc3A=
Subject key identifier: 69:99:51:AA:A7:F5:08:DB:E0:CB:E7:D2:B0:08:A6:26:B3:21:D7:C9
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 018F874A259366B586F0A724A360B862A8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 09D7
Signing time: Fri 17 May 2024 16:02:14 +0000
Manifest this update: Fri 17 May 2024 16:02:14 +0000
Manifest next update: Sat 18 May 2024 16:02:14 +0000
Files and hashes: 1: RwfAvyO7mb8SIxEduBMOFv1GTTA.roa (hash: jreq9xSXhp5MvltimCjC4OGpg2xum28KBuQv3YN2FSI=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: EgR2qFAO8smZHUCL7lQH6PrID8pyTxfHVVvzmycpYJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:25:93:66:b5:86:f0:a7:24:a3:60:b8:62:a8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: May 17 16:02:14 2024 GMT
Not After : May 18 16:02:14 2024 GMT
Subject: CN=699951aaa7f508dbe0cbe7d2b008a626b321d7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:91:a8:7e:aa:04:b3:af:3a:98:bf:db:78:
d5:80:9b:02:59:0d:43:9e:29:25:6f:46:0e:a6:39:
08:07:ea:79:34:64:86:04:1e:d2:50:8b:96:14:41:
57:e1:c4:ad:57:6d:49:7a:e1:cf:49:fc:0c:58:c2:
6b:11:fb:1a:f2:de:26:22:76:0a:fe:75:2f:eb:d3:
00:08:ee:2a:94:b9:ab:f1:f1:a5:c0:74:b3:ac:92:
0d:3b:be:db:f6:e0:24:8e:ca:36:bc:4c:67:df:f1:
92:00:86:01:3c:e6:c4:43:88:e7:f0:9a:e1:57:7d:
1b:7a:78:2e:d9:9b:4c:18:75:80:6d:85:db:83:b6:
c9:cf:ef:73:68:a9:80:63:ba:85:de:fc:d0:98:7a:
83:c1:cf:f8:77:4f:2a:08:a7:f8:aa:2f:62:9c:07:
a5:f5:2f:92:01:03:dd:35:8c:21:f8:b6:1c:b2:84:
d2:32:1a:cc:80:2b:71:4f:9d:b2:a3:80:dd:43:8b:
42:60:15:c1:33:e1:3d:80:85:a7:a4:ca:bb:d9:72:
7f:81:bc:74:84:62:dd:94:20:5b:09:49:4b:bf:95:
c7:ec:aa:f1:8e:c6:2a:66:62:ef:f3:30:e5:ad:15:
2d:23:cf:b4:09:af:41:39:a8:be:04:be:2c:79:ad:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:99:51:AA:A7:F5:08:DB:E0:CB:E7:D2:B0:08:A6:26:B3:21:D7:C9
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:12:22:3e:eb:fd:73:f5:4e:17:52:e7:bb:e3:75:f8:e6:36:
1e:4f:df:5e:5f:0f:ff:bb:23:5d:0c:a5:ea:38:3d:cf:48:78:
32:31:b3:25:6c:2e:d6:1b:68:16:02:93:7b:d5:38:99:61:e8:
ec:7b:46:cc:ef:13:87:f1:e8:d3:91:5c:9c:27:7d:be:b7:ea:
34:90:67:9f:b8:25:ef:83:e0:38:fd:46:3c:21:b9:ad:a7:53:
e6:7e:61:f5:00:24:a0:72:b2:ff:a3:fd:ad:56:a4:31:0f:4f:
81:62:ad:3d:64:0c:a0:b6:7c:12:62:8d:79:d6:c9:9b:51:1f:
c5:87:6f:51:9c:ef:45:e4:06:b2:af:00:53:2f:74:0a:76:f8:
86:f6:3a:33:9c:cc:5b:b3:20:b1:cc:3b:1d:a9:51:ce:ef:cb:
64:ab:14:88:0d:2b:6c:cf:81:d3:79:79:d7:ae:3f:57:95:69:
a4:9c:6b:dc:b8:a0:d6:21:b6:04:59:05:24:50:6d:c4:3c:df:
1c:b4:40:6c:ec:8b:d8:58:8e:9a:fe:74:f4:1f:48:dc:09:66:
79:31:bf:9f:6b:86:24:b6:ab:2c:20:7c:4d:b9:85:62:6a:80:
57:e7:8e:43:cc:7b:9f:e4:82:ac:b8:0b:60:90:79:f0:bd:44:
2d:c9:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:05:54 2024 by rpki-client on console-ams.rpki-client.org