Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: XN26gMezM60UzOPY8qsbqy4sGg16tLzuaDQvnrWG840=
Subject key identifier: BE:32:BE:54:D6:49:6B:2D:A6:38:7C:56:C3:B6:27:04:DE:E2:68:30
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 019236CB1C79F16C7ECD11DE7D91D5A0D2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 12DF
Signing time: Sat 28 Sep 2024 04:02:13 +0000
Manifest this update: Sat 28 Sep 2024 04:02:13 +0000
Manifest next update: Sun 29 Sep 2024 04:02:13 +0000
Files and hashes: 1: 5zDBuWknuhDeRZJnRTTOM-VRpjU.roa (hash: FmSPOfIZMbclLZEA/pVEg+PZj1rTZ+iHlkxcpz3LgKI=)
2: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: +EzlzvSV1KOVrLn95TGLs9Kstv4OoPq6m0caYjP/GaI=)
3: duJCRd5EZB8LdtlN9MpJjWilgEs.roa (hash: dA6x9sr495m0qzgawrIw1GdIe9oaBeIt0HtLZdCZBTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:36:cb:1c:79:f1:6c:7e:cd:11:de:7d:91:d5:a0:d2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Sep 28 04:02:13 2024 GMT
Not After : Sep 29 04:02:13 2024 GMT
Subject: CN=be32be54d6496b2da6387c56c3b62704dee26830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c5:83:83:f7:99:d1:d3:37:9e:19:e2:ff:f6:
34:94:02:f5:f4:6e:1a:0e:b2:fd:c6:56:96:8d:c2:
36:64:8e:67:f5:16:c3:5d:51:0e:32:ea:e5:b6:55:
70:31:de:36:f6:8c:92:bc:ba:03:6c:25:40:22:a8:
9e:79:77:3a:0d:61:13:35:9b:0d:1b:b8:19:60:bc:
87:08:11:da:00:c7:34:e2:3c:71:d0:ee:51:c1:69:
2e:f6:b1:89:9f:b2:82:64:bb:b1:45:aa:85:66:cb:
32:06:05:1a:42:44:07:19:7f:42:94:c5:ab:c8:35:
d3:ec:ff:17:f2:80:ea:b7:74:71:94:de:86:14:1f:
5c:94:50:c5:22:70:00:47:80:5a:df:f0:eb:bf:da:
fb:e6:fa:91:02:14:24:9b:67:d0:4a:db:50:bd:de:
2d:35:04:7d:0d:56:73:50:2e:60:de:53:c6:f9:4f:
45:53:41:1c:96:74:3e:71:5b:dc:8b:15:17:96:1d:
1d:db:0f:ab:44:92:c5:63:f8:f6:e3:34:97:2b:4b:
33:e7:e5:90:d9:72:ed:09:0e:e4:af:a6:19:4f:f4:
d1:77:4d:bb:0c:73:10:c8:e4:b0:0c:71:4f:90:8b:
af:ca:12:69:2c:0f:55:78:9f:c9:64:d0:87:27:5a:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:32:BE:54:D6:49:6B:2D:A6:38:7C:56:C3:B6:27:04:DE:E2:68:30
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f7:dd:df:66:40:30:e9:bd:1d:de:d7:07:9f:de:b6:9a:86:
15:74:88:4f:ff:59:02:b7:a5:4a:87:bb:de:1f:24:27:f4:48:
da:46:ff:46:1c:a4:d9:3c:c4:45:13:68:b0:d7:72:43:20:c7:
e2:f9:d2:d1:05:07:7e:c0:50:ed:2a:5c:3a:9f:47:df:3f:03:
46:e5:8f:28:9a:9f:a0:19:b2:24:d7:4a:db:fd:83:e6:2f:51:
a5:d7:35:0d:1c:89:2e:a8:b0:57:40:ed:d2:18:37:cf:df:2b:
86:98:92:49:ac:fe:37:52:12:c1:13:dc:9b:9e:d0:63:dd:89:
3f:dd:10:b7:e5:b7:96:e9:d3:17:c2:6b:59:42:37:47:b3:c2:
f3:a0:21:21:cf:bf:31:87:0b:91:11:f5:9d:80:40:7a:69:7a:
44:45:7b:62:54:e6:54:a3:b7:85:fc:03:51:f9:e2:8c:b1:7c:
58:1e:ad:11:93:08:a4:b3:38:36:06:4b:b6:94:d0:78:c8:e5:
28:82:56:76:32:76:6b:d5:5f:09:ce:f0:d5:ae:f8:e7:70:27:
55:96:5c:dd:0e:f3:84:8a:f3:c4:a1:fe:6f:79:1e:a9:8d:4d:
6f:93:77:33:54:ac:b7:0c:1a:89:86:de:90:b2:5f:da:13:d1:
ea:8e:50:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI2yxx58Wx+zRHefZHVoNLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWRmNzI4ZDFiNDY2MzQwNTQ5NzJkMjk0NWZkYTU4MDcz
YjU3NjIwHhcNMjQwOTI4MDQwMjEzWhcNMjQwOTI5MDQwMjEzWjAzMTEwLwYDVQQD
EyhiZTMyYmU1NGQ2NDk2YjJkYTYzODdjNTZjM2I2MjcwNGRlZTI2ODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sWDg/eZ0dM3nhni//Y0lAL19G4a
DrL9xlaWjcI2ZI5n9RbDXVEOMurltlVwMd429oySvLoDbCVAIqieeXc6DWETNZsN
G7gZYLyHCBHaAMc04jxx0O5RwWku9rGJn7KCZLuxRaqFZssyBgUaQkQHGX9ClMWr
yDXT7P8X8oDqt3RxlN6GFB9clFDFInAAR4Ba3/Drv9r75vqRAhQkm2fQSttQvd4t
NQR9DVZzUC5g3lPG+U9FU0EclnQ+cVvcixUXlh0d2w+rRJLFY/j24zSXK0sz5+WQ
2XLtCQ7kr6YZT/TRd027DHMQyOSwDHFPkIuvyhJpLA9VeJ/JZNCHJ1rTvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4yvlTWSWstpjh8VsO2JwTe4mgwMB8GA1UdIwQY
MBaAFFCd9yjRtGY0BUly0pRf2lgHO1diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEt
ZGQzYjRmODM4MWM0LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hY2ZjYjYtZDc4YS00NDhhLWE3NjEtZGQzYjRmODM4MWM0
LzEvVUozM0tORzBaalFGU1hMU2xGX2FXQWM3VjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/fd32ZA
MOm9Hd7XB5/etpqGFXSIT/9ZArelSoe73h8kJ/RI2kb/Rhyk2TzERRNosNdyQyDH
4vnS0QUHfsBQ7SpcOp9H3z8DRuWPKJqfoBmyJNdK2/2D5i9Rpdc1DRyJLqiwV0Dt
0hg3z98rhpiSSaz+N1ISwRPcm57QY92JP90Qt+W3lunTF8JrWUI3R7PC86AhIc+/
MYcLkRH1nYBAeml6REV7YlTmVKO3hfwDUfnijLF8WB6tEZMIpLM4NgZLtpTQeMjl
KIJWdjJ2a9VfCc7w1a7453AnVZZc3Q7zhIrzxKH+b3keqY1Nb5N3M1SstwwaiYbe
kLJf2hPR6o5Q3w==
-----END CERTIFICATE-----
Generated at Sat Sep 28 06:44:09 2024 by rpki-client on console-ams.rpki-client.org