Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
File: UrEszH6hBoww14yVXFa5djvPO00.mft (raw, json)
Hash identifier: vp49R2JW4wAjyuNb1VVq7KrhulrT5pCQ/+QE3r5U61w=
Subject key identifier: 9A:A2:50:53:5B:32:2F:93:86:33:DB:5C:24:CE:B1:6F:03:6C:6A:B1
Authority key identifier: 52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
Certificate issuer: /CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Certificate serial: 019356893FE7287BAD06414C9F44BC0CE4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
Manifest number: 06B6
Signing time: Sat 23 Nov 2024 01:00:55 +0000
Manifest this update: Sat 23 Nov 2024 01:00:55 +0000
Manifest next update: Sun 24 Nov 2024 01:00:55 +0000
Files and hashes: 1: UrEszH6hBoww14yVXFa5djvPO00.crl (hash: Km34jFWrFsRufcHtemr5dGZjZKCsEwRZ55PkeY8hgjo=)
2: dypD1lAjujn4wFlso4qsG6gh4-M.roa (hash: CFt6sVYU+0PMsdoyF/9rQ9URDYs/KRkZZj6GjcOYJa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:3f:e7:28:7b:ad:06:41:4c:9f:44:bc:0c:e4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Validity
Not Before: Nov 23 01:00:55 2024 GMT
Not After : Nov 24 01:00:55 2024 GMT
Subject: CN=9aa250535b322f938633db5c24ceb16f036c6ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:f0:7b:be:01:80:79:bd:e6:b6:4b:56:7a:
72:8d:82:a5:78:77:61:db:f5:03:b8:ed:e0:cd:eb:
cf:57:a1:a8:55:88:c4:ba:ad:e9:03:70:9e:5f:d6:
51:5a:6c:51:db:b3:25:89:01:20:7e:f3:61:cd:51:
88:41:db:97:a0:d1:b8:b6:6c:65:96:1b:7d:da:e3:
4a:98:a3:8a:1f:1a:ac:1f:6c:9a:45:7c:97:8c:aa:
88:44:3e:36:f3:66:c7:33:3c:bb:f5:b7:27:9c:5f:
84:f4:1e:cf:41:9f:99:5e:b1:91:3b:01:1c:40:89:
de:ea:c3:9c:dd:e2:bf:0e:6c:57:b8:35:b9:a4:9b:
3f:79:ad:fb:3f:b1:ae:27:82:0b:8d:60:a6:4f:22:
aa:c8:45:df:53:44:70:94:d9:f6:f9:f6:b3:cd:9f:
21:d0:62:78:36:0d:02:c4:3e:5c:86:d5:b7:64:2e:
1c:5f:4e:da:d4:d4:32:11:a9:cb:45:b0:e0:4c:1d:
d1:0d:38:33:34:cd:4a:35:67:e3:16:80:0c:70:12:
d4:e0:16:3a:ff:41:02:11:5d:69:d5:63:40:05:80:
50:99:65:67:8f:ab:b2:4c:36:5d:24:02:5d:44:48:
8d:65:6c:a2:31:89:34:b1:a5:dd:e4:4c:8c:c3:bf:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A2:50:53:5B:32:2F:93:86:33:DB:5C:24:CE:B1:6F:03:6C:6A:B1
X509v3 Authority Key Identifier:
keyid:52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b3:08:37:d2:20:5a:62:55:73:fb:5e:f6:03:e6:12:46:f4:
c1:e3:c2:c6:f0:10:18:ac:9c:86:c1:41:31:a3:e0:cc:71:b3:
87:b9:a2:ca:e1:aa:4a:94:17:29:e8:72:7d:a8:93:3e:27:fa:
ac:0f:eb:34:92:37:d6:74:bc:57:93:bd:85:e9:3c:6e:f4:18:
64:c1:29:be:2b:8a:ec:5d:61:09:a0:9d:f1:f4:52:f3:4b:43:
e2:35:4f:00:c7:1c:f1:ad:90:55:ca:e7:a9:f6:aa:72:31:88:
2f:c2:8c:e8:1f:54:fe:29:2c:fe:df:24:24:6b:4d:d9:9f:2d:
4d:48:68:96:ec:6f:95:3b:ec:25:33:c6:88:cc:41:31:ff:69:
81:90:07:ac:79:81:e5:26:39:52:15:9e:df:e1:4a:49:e5:b9:
16:c4:50:fc:90:0d:43:b9:72:89:e5:db:0c:32:73:78:c8:6c:
0e:bb:2d:0b:0c:86:da:95:dd:b7:f3:9d:02:1f:cf:68:52:2d:
49:7c:af:9c:e2:48:aa:a7:e4:b2:be:03:1a:0a:c8:df:3f:39:
06:9b:5b:21:14:a1:8b:9b:94:02:ce:27:ae:7e:c4:12:d7:0e:
7c:53:54:69:4b:64:3f:4f:4d:8d:ce:85:5a:e4:10:0f:09:85:
4a:30:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:24 2024 by rpki-client on console-ams.rpki-client.org