Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: VhZKNpu93m/4EcECklvhTj3u3iK1FZBwjMtLj2XquOQ=
Subject key identifier: 2D:FA:72:04:2A:B7:01:E6:F0:5D:4F:82:1D:B3:A9:50:8B:82:9E:5A
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 018F88C8C6B80305B4FA00C907E0217363B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: C4
Signing time: Fri 17 May 2024 23:00:10 +0000
Manifest this update: Fri 17 May 2024 23:00:10 +0000
Manifest next update: Sat 18 May 2024 23:00:10 +0000
Files and hashes: 1: dCQcS4qV5QMfu_ZPYteb8lJ5lrU.roa (hash: wE4x+b26mqirEsfF7so/yI1j86PsUQGlxdQzr5yTl6o=)
2: jh2etG6Py_8bJ3cbraw4GHYOiic.roa (hash: S9Saw8dFVjXOjcCUQ1ioZXzZlYipv5GePVZZsuLnpKI=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: GsHDlJRzPcPtXWFXrT4kbftHjrMtcDS77XYolxV8VJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:c8:c6:b8:03:05:b4:fa:00:c9:07:e0:21:73:63:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: May 17 23:00:10 2024 GMT
Not After : May 18 23:00:10 2024 GMT
Subject: CN=2dfa72042ab701e6f05d4f821db3a9508b829e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:f2:4f:ea:86:fd:9e:b0:b8:20:46:b0:41:
a6:8b:fb:f4:59:20:41:45:c5:e4:10:ee:d0:bf:ca:
8e:1c:89:ef:e5:be:15:10:86:83:d6:83:b1:95:2e:
7a:21:25:fd:a2:dc:62:ad:0c:19:f4:d2:d1:47:40:
8c:a5:73:e0:ca:95:fc:d1:48:6b:1f:28:c7:73:f0:
2e:f9:7f:20:9c:5f:eb:c1:6b:6a:9b:69:d8:1c:4c:
86:67:79:00:39:d8:99:45:dd:8b:ab:79:34:5a:8f:
a8:ec:ff:1e:f0:de:42:d5:0e:63:ce:87:31:61:e3:
42:4b:e3:78:f4:66:da:cd:f2:e4:1d:e1:05:48:48:
11:25:99:42:ae:ab:d3:4b:7f:ba:ed:78:fa:75:db:
1d:42:03:55:34:4d:44:ac:f3:f4:f6:b3:5d:57:e0:
e3:3e:d0:54:8f:bf:d3:75:83:3e:d4:dd:91:8d:47:
8d:4f:19:6e:d0:2d:4f:32:79:29:51:09:3e:f2:bb:
b4:59:8a:28:a9:24:bd:3e:34:fe:82:64:3a:2f:79:
bb:0a:fd:65:fe:c9:50:e9:38:4d:5e:b9:66:29:9e:
74:28:63:e5:e7:ab:b0:8a:84:de:fd:3c:45:b9:98:
6d:69:9b:98:5c:83:81:d4:24:79:52:98:fe:d5:6f:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FA:72:04:2A:B7:01:E6:F0:5D:4F:82:1D:B3:A9:50:8B:82:9E:5A
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:63:f7:15:e9:13:f1:c9:a9:73:d6:de:92:84:7e:de:a5:0d:
f0:8f:e1:b1:27:35:bf:ad:07:28:5c:d6:b8:54:57:c0:d7:41:
1a:da:e8:c6:70:83:45:69:28:04:07:0e:54:03:3e:ef:bb:f5:
35:bf:91:9f:cb:39:b3:aa:a0:73:a8:77:30:93:08:7a:2c:1d:
c5:60:c4:f0:bf:a7:76:83:9a:d9:b1:d1:12:3b:66:7b:58:23:
a9:0c:82:2e:e6:27:82:4c:dc:b9:18:b7:7e:4c:e1:b4:d6:42:
cd:f7:ff:66:86:1f:0a:b5:1d:87:f0:60:e7:18:b7:36:fa:77:
e9:76:b7:b1:7e:07:2a:c1:9d:2c:11:00:a4:c2:f4:e7:74:e2:
90:68:61:92:62:6d:23:d9:d6:37:96:b4:5b:02:75:c5:04:45:
38:24:c5:23:3d:e7:aa:fa:1f:a5:ae:e7:fd:d3:a3:61:73:98:
e6:af:32:c0:b6:d6:ab:c9:88:d3:b2:2b:cc:3d:72:31:40:39:
41:15:54:2a:76:8c:fd:61:a3:a4:92:d4:89:71:37:a2:76:89:
8d:0b:c7:99:3d:76:2f:08:33:8a:11:5a:00:94:7a:a8:14:71:
03:bc:18:f8:f1:8c:69:ca:50:69:97:7c:a3:64:de:e7:7a:c4:
44:49:b3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:51:49 2024 by rpki-client on console-fra.rpki-client.org