Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: pL2lGfuiHAGLylVbkfFer/6MR9Zkni9B8xrRNAdGc54=
Subject key identifier: 53:77:B3:5B:22:C6:89:9D:B0:28:32:06:1E:0C:3F:C7:2F:DA:AE:4C
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 0193580957ABD86B1002C543AA26985148F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 0B17
Signing time: Sat 23 Nov 2024 08:00:27 +0000
Manifest this update: Sat 23 Nov 2024 08:00:27 +0000
Manifest next update: Sun 24 Nov 2024 08:00:27 +0000
Files and hashes: 1: g4zCCWj1HMqx2ShfX2pC63ZthPI.roa (hash: jqSGqxN9UcXGWc1xwXoWrdsX1Ap0LuabkoWAiYBs7/A=)
2: qWXjBW5SRCb37FFuY-yrCGrUoTc.roa (hash: TZWJ406O2eNaAuboN/gP7XIlFlaEo6XBefpM8Op8yYE=)
3: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: dYjmg0smXAv60/6sL3BS2fPFpv31SeiZEAdc4FysVJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:57:ab:d8:6b:10:02:c5:43:aa:26:98:51:48:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Nov 23 08:00:27 2024 GMT
Not After : Nov 24 08:00:27 2024 GMT
Subject: CN=5377b35b22c6899db02832061e0c3fc72fdaae4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:15:ed:ca:ef:d9:89:e9:64:51:47:af:e9:
7b:f5:eb:b8:c4:b3:ae:37:79:24:09:67:37:89:c7:
0b:02:73:58:22:1a:df:c7:39:74:e3:c9:8f:b8:03:
b4:5c:d9:cf:d2:c0:63:9c:55:5f:69:fd:e0:5f:23:
af:f1:98:c0:c8:e9:b0:2c:98:8a:eb:6c:77:6d:58:
a4:c4:83:1f:d9:48:c2:07:b1:cd:ed:a9:a2:e8:9b:
cb:a6:be:77:a0:a1:b3:2f:bf:32:f4:3e:fe:71:e6:
9e:54:6d:fc:52:f0:81:c8:cb:ea:2a:86:34:60:4e:
e1:14:f4:f1:04:8c:e5:dc:79:81:f1:67:7d:e6:56:
ee:49:10:53:d9:1e:45:41:1a:5f:21:0e:43:6d:fb:
4b:42:24:c9:e3:59:bc:5c:09:50:86:71:c7:24:7a:
cc:71:5a:41:e5:70:28:fc:ce:8a:94:c9:78:40:be:
4c:ff:ac:60:d2:49:c6:27:c8:da:09:c2:ea:a0:cd:
ef:39:b9:cf:8c:8b:89:e7:aa:f8:30:de:3f:f4:81:
22:9d:f3:1f:68:37:8d:4c:5c:6d:c2:7e:c3:1c:d7:
45:6b:9e:ac:88:ab:49:ab:5b:b5:e8:0f:f3:b4:54:
12:22:26:2c:74:b5:a0:2c:f8:8d:92:52:99:b7:e0:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:77:B3:5B:22:C6:89:9D:B0:28:32:06:1E:0C:3F:C7:2F:DA:AE:4C
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c1:7f:bd:a9:ae:7e:34:f4:0d:29:43:6e:1e:47:ba:04:cc:
07:85:8e:aa:92:4f:0a:54:86:5f:0b:8d:24:f0:13:1f:eb:e2:
81:1b:99:7b:44:90:c7:e4:63:56:32:41:03:69:e1:9e:f8:d2:
70:1e:24:1a:59:fc:df:68:b1:b7:4f:eb:c3:bb:b3:41:9b:67:
3b:bc:bf:4b:3e:ba:37:c1:7a:01:25:13:2f:a8:8f:51:ae:f4:
26:f9:8a:d4:c8:0d:a5:5d:ff:c3:54:ed:98:a5:89:ea:ba:0f:
fe:3d:0f:49:5a:5c:2f:af:a7:0b:19:61:66:3e:07:65:9a:77:
72:50:94:70:1e:7f:68:83:11:29:54:39:3b:78:32:30:a9:63:
eb:2c:43:a4:52:2f:95:8a:00:f8:68:3b:02:b6:89:9f:e5:5e:
71:8f:72:42:f6:c5:29:3d:2e:33:b2:8f:5c:d3:62:a6:b4:ab:
eb:ee:60:f4:0a:a7:36:e7:b7:ab:ff:1e:26:c7:e9:5e:23:20:
1b:e7:13:41:02:8c:40:a4:d3:30:d4:bc:5b:dd:b7:e7:27:22:
d9:e1:5f:bf:e5:73:bc:05:5f:39:a9:aa:c5:50:56:81:de:a6:
4b:6d:1f:ba:03:e5:04:b7:9e:2a:81:8e:39:6f:52:27:b9:b2:
81:1e:d1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:41 2024 by rpki-client on console-ams.rpki-client.org