Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: EhOBllKRLB6CSl81zzjRf2zGxPXdDwU/Nky9OmksCco=
Subject key identifier: A7:44:8D:60:C2:63:F9:96:F6:8A:0B:E0:66:B2:25:20:19:A4:79:8F
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 019369DAF23B1BC7EEEE0C3F1405DECCA78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 137E
Signing time: Tue 26 Nov 2024 19:02:56 +0000
Manifest this update: Tue 26 Nov 2024 19:02:56 +0000
Manifest next update: Wed 27 Nov 2024 19:02:56 +0000
Files and hashes: 1: 5zDBuWknuhDeRZJnRTTOM-VRpjU.roa (hash: FmSPOfIZMbclLZEA/pVEg+PZj1rTZ+iHlkxcpz3LgKI=)
2: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: LhzerWQHnalwiXh3/IH+TJng7pa+UO4Ao4wpva1Gnyo=)
3: duJCRd5EZB8LdtlN9MpJjWilgEs.roa (hash: dA6x9sr495m0qzgawrIw1GdIe9oaBeIt0HtLZdCZBTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:f2:3b:1b:c7:ee:ee:0c:3f:14:05:de:cc:a7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Nov 26 19:02:56 2024 GMT
Not After : Nov 27 19:02:56 2024 GMT
Subject: CN=a7448d60c263f996f68a0be066b2252019a4798f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:72:fb:fa:e4:8c:dd:f8:5e:20:03:33:e9:
4b:e6:61:2b:2d:bb:36:68:e7:e9:81:e3:08:b9:05:
96:ec:e0:24:31:62:aa:66:fb:e2:f8:4e:e9:0e:a8:
7c:b8:a4:b1:bc:d2:ea:72:ff:03:b9:60:5b:11:01:
51:23:66:21:d0:bd:16:18:fc:7f:61:19:64:b4:0a:
fa:25:5f:6a:e8:2e:0d:07:50:bf:94:41:18:44:00:
bb:a5:c5:53:b2:af:90:ac:c1:c5:55:4b:b1:f9:fb:
fa:92:9a:51:e7:b9:d8:41:8c:f4:b2:a2:25:c9:3e:
60:bd:21:6d:15:e0:0c:04:14:93:3b:15:15:f1:b0:
83:5b:aa:61:2b:a7:64:a8:c7:ab:b2:fb:2e:18:f4:
7e:f4:b9:e2:b1:fd:b4:68:dc:74:6f:22:9e:86:91:
8f:4f:96:62:73:aa:72:3c:b5:dd:6d:6c:65:28:29:
db:40:ab:06:43:7d:df:3a:77:86:76:52:a8:c4:f6:
39:77:7d:74:41:03:99:5a:95:22:73:6c:f6:eb:ef:
57:b5:c7:d4:15:f0:43:bb:a4:3e:3d:ff:12:23:ef:
53:c9:c6:c1:46:30:28:e4:b8:92:9c:b9:32:b4:f6:
06:74:eb:8a:32:c8:24:32:c1:e0:fe:ef:5c:e5:5e:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:44:8D:60:C2:63:F9:96:F6:8A:0B:E0:66:B2:25:20:19:A4:79:8F
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e3:79:53:09:86:1d:4a:ac:14:45:af:01:ef:3f:72:77:aa:
e9:77:9d:b9:f0:31:60:14:ea:7f:6f:50:c1:c3:aa:d3:10:fe:
10:7c:2d:96:f3:2a:b6:e3:ed:c0:82:01:5c:5e:f4:e8:2d:31:
bc:8b:fb:94:d4:bc:51:7e:9d:e9:a8:87:14:23:b3:c5:d0:f2:
13:2c:72:df:10:2d:2c:b6:9a:9a:b5:37:15:ee:7e:7d:bb:1d:
90:ca:23:96:85:84:75:4e:dd:62:1a:05:ce:57:2b:4c:0e:61:
ee:34:4f:4b:b1:a9:85:08:2f:fa:ea:11:f8:63:19:36:54:36:
44:7f:d0:61:c2:dc:54:65:76:ac:e9:99:ce:d1:cb:55:68:31:
f2:2a:21:07:35:1a:9f:72:57:a2:42:48:1a:0e:94:a7:db:82:
c6:e0:c2:60:de:af:a7:5b:0a:69:fb:e3:11:27:e0:46:99:e0:
68:1e:43:e5:61:c7:7b:7f:af:d3:7f:2c:d7:56:21:f3:e8:94:
e5:e5:6e:17:10:49:ae:ac:8b:f1:ae:21:b2:f5:1f:f0:84:e7:
95:24:51:22:87:cb:fe:a0:35:d3:8f:d4:85:bf:30:4c:e4:36:
fa:00:6e:9a:41:90:18:4e:32:b1:02:54:05:75:82:2a:65:8f:
86:8d:cb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:15 2024 by rpki-client on console-fra.rpki-client.org