Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: Ww6+dWMA/K6+suKCxxcWubeX62cIxE+0cUeDjkNtfUI=
Subject key identifier: 86:6F:79:28:9F:72:C8:5B:BE:19:B2:E3:40:31:C4:DE:A3:BB:7B:7C
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 019351995C7F016067673A4BC40BDE1EEC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 01CC
Signing time: Fri 22 Nov 2024 02:00:25 +0000
Manifest this update: Fri 22 Nov 2024 02:00:25 +0000
Manifest next update: Sat 23 Nov 2024 02:00:25 +0000
Files and hashes: 1: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: blwjwq+/A9U4xrNyIYkWC3oz70wZ9h0mRXXhrwo6iVg=)
2: sGuCd_L0c6me3BV3y2ULLicRYms.roa (hash: 2Oobm4+6pn3e8NVDo66AeHUa7e0yPTE8kCcrQqXcNHo=)
3: xkgLzuAplRpWBPufE9ozfJppoVA.roa (hash: 3+eAo9L9AfTx67AOC6aZzIu6n0gLLxbL5Al3yK6KtSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:5c:7f:01:60:67:67:3a:4b:c4:0b:de:1e:ec:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Nov 22 02:00:25 2024 GMT
Not After : Nov 23 02:00:25 2024 GMT
Subject: CN=866f79289f72c85bbe19b2e34031c4dea3bb7b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:8f:c8:58:46:c7:f5:33:17:83:13:2a:ed:
aa:31:a6:c2:64:48:7e:75:90:93:b9:26:c3:ce:b7:
2b:24:da:fa:02:4a:8b:0e:41:c7:2b:f0:36:8d:24:
fd:c4:4a:f4:d5:fb:78:be:aa:33:e3:49:f6:f0:e2:
dc:b4:55:8a:45:d1:fe:5b:ef:75:47:3c:28:c4:bc:
79:6d:1c:5e:9f:63:36:70:c5:f8:d4:7a:1a:87:48:
c6:a8:7b:cc:63:61:3e:23:9f:39:81:5a:c0:19:b3:
a6:6e:10:c8:1c:7d:7f:3a:de:cf:cc:bc:8f:9f:bd:
da:4e:47:1e:ec:4f:96:a8:a5:b2:dc:ff:87:e8:87:
a6:48:df:26:fc:80:86:44:65:6e:71:c0:85:4f:35:
54:86:a5:9d:bd:b3:8f:b4:82:bd:26:bd:0c:02:a4:
4e:14:b9:a7:ca:84:fb:85:ee:92:4d:20:e7:f1:5a:
2b:24:16:1f:bd:6a:d4:d2:f4:99:bc:6f:1f:e8:57:
9b:40:fe:f3:dd:8d:c5:be:3b:20:09:ba:ce:e1:1e:
d2:eb:28:bf:74:92:3e:49:c1:2e:61:7b:f4:32:07:
46:6b:fa:68:8e:bb:b3:e7:6e:79:0f:bc:70:8e:de:
b3:10:4a:15:30:92:d5:26:87:e0:71:92:8d:ed:b3:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6F:79:28:9F:72:C8:5B:BE:19:B2:E3:40:31:C4:DE:A3:BB:7B:7C
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:06:8f:98:00:be:26:01:b1:11:48:80:27:92:d5:de:79:66:
6a:ae:a2:6e:da:9d:64:31:64:2d:26:8d:13:6c:8e:c6:40:3e:
59:77:ca:5f:ff:d6:9c:f2:bc:26:f2:e4:ea:bc:a7:b6:9a:2a:
28:91:91:c4:5b:d6:8b:a6:1f:1f:02:87:f7:8b:4c:eb:ed:46:
24:2d:ef:3e:87:a9:82:e4:54:0f:4d:d7:4d:5c:30:36:41:3d:
aa:4e:72:1f:d1:f8:38:00:61:f3:d6:52:d2:75:45:f0:d8:05:
da:35:5d:fa:4d:20:5d:55:0a:fc:7d:b8:b0:71:2e:16:3c:73:
5b:5e:2f:45:b1:08:b3:0d:f9:29:7b:71:80:9b:c5:5f:fa:2b:
03:63:60:1b:18:85:22:cc:85:b6:4c:c0:c3:2e:03:bb:0a:e6:
08:a1:fb:33:ad:29:93:b0:6e:f4:1c:52:a7:dc:57:9e:24:a4:
2f:6a:81:9f:25:c8:d1:b2:a5:5a:0b:e6:ed:88:18:c3:f4:69:
74:a0:fb:4c:1c:45:b6:fe:ec:32:cb:e9:85:15:cb:ee:91:d5:
f6:f6:75:46:0b:eb:b4:70:ce:31:fa:8d:1c:cd:3a:77:9d:ae:
3c:01:e3:cf:79:d1:1f:bb:41:08:0f:87:87:d2:bf:68:f2:73:
f7:a5:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:52:18 2024 by rpki-client on console-fra.rpki-client.org