Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: erKJ9ybp2fAWs07eO76AHfOF3ifuXQeNQUMiIlfWJK0=
Subject key identifier: B4:0A:AE:9C:1A:1C:4F:4C:42:77:9D:56:32:FF:D8:4B:D0:FB:94:FE
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 018F87485991B2D29D99F7BFE889C22AF457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 0ED2
Signing time: Fri 17 May 2024 16:00:16 +0000
Manifest this update: Fri 17 May 2024 16:00:16 +0000
Manifest next update: Sat 18 May 2024 16:00:16 +0000
Files and hashes: 1: HAoocx5ZYE9ZWccmSqMIwInwTZ8.roa (hash: cYCQSBHROs/+MrytOkkgCEzhDwX3BwfjosS4rAQszJM=)
2: O9Ev7xS6ciwXVK_ONVKEROdFh3c.roa (hash: ozdnAnxlTkVp3NrypRhMFMxsv6JvG3phsbeS9aYBLKk=)
3: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: CYLr+lIY8w6MufYM0YlbdDkiPld7HsU+twuc4xMY1kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:59:91:b2:d2:9d:99:f7:bf:e8:89:c2:2a:f4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: May 17 16:00:16 2024 GMT
Not After : May 18 16:00:16 2024 GMT
Subject: CN=b40aae9c1a1c4f4c42779d5632ffd84bd0fb94fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:80:17:ff:af:3d:8c:1e:a2:13:bc:cd:87:
6b:d8:75:f5:34:17:3e:81:a5:40:08:f5:b2:e7:5e:
06:df:28:1f:ba:fd:ed:b9:50:db:7c:17:6d:4f:49:
1d:99:46:74:10:d1:bc:8c:7c:3f:c7:75:f7:0e:ee:
fb:b6:eb:46:59:97:ad:2d:53:57:a6:55:95:7d:c3:
ae:2b:d6:95:df:77:a7:d8:43:af:ba:4b:0a:c8:3f:
2b:bc:9a:12:60:51:05:24:18:9a:91:d6:88:2f:f5:
aa:40:f5:a3:2e:7c:f3:a2:c9:46:55:19:11:3e:3d:
aa:af:ad:6c:9d:5a:b2:f4:2a:37:c8:fe:fe:bd:04:
9d:d0:ed:a6:5e:f2:d8:da:a8:37:41:bf:fb:e3:95:
e0:9f:b2:38:be:3e:cb:2d:44:5f:df:34:3e:2b:76:
e7:61:da:88:05:2a:82:c4:5a:f9:88:02:ac:7c:05:
78:8d:53:6a:c2:4b:41:75:cf:af:81:0f:d8:46:ec:
19:8a:78:b1:da:0f:98:bd:8d:94:fc:cb:08:0e:46:
ea:bb:0b:f0:a2:b4:68:27:13:cb:bf:90:db:2d:11:
fb:89:c5:7a:26:d6:6c:dc:70:ac:aa:da:21:b2:f4:
4d:c7:ac:b5:32:37:a3:ef:0e:59:b5:1c:40:b9:72:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:AE:9C:1A:1C:4F:4C:42:77:9D:56:32:FF:D8:4B:D0:FB:94:FE
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5f:0f:77:35:3f:27:ea:00:1c:e5:e6:9e:10:bf:71:26:bf:
3e:9b:9f:7e:d2:c6:22:5d:83:03:e6:53:41:b3:71:a5:55:70:
21:e2:61:1d:5c:d5:00:b7:6a:31:f2:ad:08:de:f3:a2:8f:59:
5d:bf:05:48:da:d4:42:e8:27:eb:93:43:bb:8b:64:c3:a9:6f:
15:02:7f:7f:21:36:3f:94:35:ef:60:fb:1e:24:3d:99:1e:4c:
a1:83:c3:ae:24:15:2f:eb:dd:6c:ac:be:30:f8:58:39:d2:90:
49:3b:4d:2c:9b:b5:cc:7f:19:32:9e:88:95:90:bd:c2:06:a0:
67:01:1a:dc:32:3b:fc:7a:1f:c6:e0:ff:64:79:cd:44:b6:1d:
8f:4b:2b:c2:f5:f1:34:9a:e3:06:ce:ba:4c:f6:e9:d5:6b:3f:
b4:45:3a:61:59:c4:30:f4:ab:16:5f:85:c1:51:62:34:d3:48:
2b:67:85:dd:8d:42:e5:2d:02:78:dd:f8:81:ea:02:e7:d9:81:
77:ae:af:4b:af:6b:51:a2:55:be:3f:ab:c5:2a:ef:b3:28:18:
b6:3b:d6:9a:6e:1f:82:a3:91:6e:61:55:85:30:62:56:29:1b:
b4:ce:76:38:43:d3:62:3d:67:34:ab:0c:21:25:85:67:c4:3b:
08:b8:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:07:59 2024 by rpki-client on console-ams.rpki-client.org