Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: KnpyLOmjdPWt8sWPI9l+f45dhn+PLaEW884TiIuYIfs=
Subject key identifier: 5E:72:3B:5F:09:C6:7F:79:20:49:A5:17:E4:94:2B:5A:E0:28:96:45
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 0193549A3F452C3CEF5F795A8138B31AB59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 10E8
Signing time: Fri 22 Nov 2024 16:00:15 +0000
Manifest this update: Fri 22 Nov 2024 16:00:15 +0000
Manifest next update: Sat 23 Nov 2024 16:00:15 +0000
Files and hashes: 1: JGxpy3xH6RY2gE363ZnPW64FRkU.roa (hash: +63UymOm/KKepZNom2Rkn6RejMtgbkO/zZ4gPtzhOVk=)
2: LXdfMVxo3GHYQHAZfOxWVJ4huok.roa (hash: oh30D+YcpzJXvucD0cqj+NTZTB+bkciOva5pUuvF1EE=)
3: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: eIPRrXLRIvJfhSciRmYxKxo0bhZ8BgkoW6s+0n1C0iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:3f:45:2c:3c:ef:5f:79:5a:81:38:b3:1a:b5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Nov 22 16:00:15 2024 GMT
Not After : Nov 23 16:00:15 2024 GMT
Subject: CN=5e723b5f09c67f792049a517e4942b5ae0289645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:ef:cd:f2:41:c7:44:a6:83:08:1c:8e:7e:
4e:71:35:35:35:b9:0f:df:28:b2:a7:cb:5d:1e:0b:
d2:13:51:6d:b7:ec:86:4d:30:b4:81:15:8a:49:0e:
72:54:9f:ed:5b:de:c9:13:8d:04:5f:13:eb:55:a4:
6a:33:ba:2b:f5:a0:78:93:d0:12:93:29:56:3e:c1:
fa:f5:a4:db:92:67:3f:89:ed:8f:0a:67:9c:a1:9c:
82:9e:36:10:1a:b0:db:f7:38:f9:42:b6:fa:65:55:
b4:38:0c:2f:ab:17:8b:c9:df:96:9b:bd:b1:0f:a3:
e4:c0:d8:b3:c0:6d:f5:4c:d2:39:de:b8:cf:62:2f:
48:b2:94:9e:fc:4c:10:bf:db:4f:48:cd:0a:d6:9b:
98:57:ae:83:b4:db:b3:97:e2:f3:32:53:30:e5:bf:
20:e4:fd:b7:1a:9c:79:93:49:96:1a:1d:2f:08:13:
cb:bc:e9:3b:65:25:26:c8:d7:90:e2:62:fe:87:07:
1a:8d:4d:ad:a3:fd:af:e7:21:cd:70:b5:50:81:ec:
0c:11:27:a7:1f:1a:68:01:a2:0a:03:56:09:c0:24:
ce:0a:88:47:c8:10:a6:49:1e:6a:76:56:ab:7e:93:
2a:26:40:ea:3b:03:08:d8:c6:43:85:7c:28:a7:df:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:3B:5F:09:C6:7F:79:20:49:A5:17:E4:94:2B:5A:E0:28:96:45
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:89:13:67:f2:d6:1c:81:92:bf:dd:16:7a:4f:f6:40:52:ae:
11:e4:0a:c9:44:48:84:a8:9d:c3:82:a2:c7:60:9a:9f:21:1a:
27:1a:31:0f:f5:f1:e7:7e:e7:e6:cc:d8:be:8c:f2:ce:0f:2f:
c8:11:80:a8:c0:4b:17:4a:56:11:5d:64:a8:75:94:75:7c:6c:
c8:a6:62:f3:da:47:16:c8:3b:6e:26:2a:89:d6:94:bd:76:49:
f0:11:1e:70:60:54:01:b9:fd:76:8d:71:24:2e:97:37:43:3e:
c9:b6:6d:fd:7d:81:88:89:7f:a8:a0:49:2e:54:fb:e1:1e:0c:
1c:b6:f0:48:a9:c8:7c:fd:41:11:8f:90:4d:65:08:14:72:99:
aa:88:64:f6:2f:04:dd:eb:92:67:91:13:98:04:75:ea:35:e6:
7b:73:c0:87:31:e1:34:0f:8a:fc:30:b3:9b:db:9a:af:48:59:
73:0a:88:93:c3:0f:2b:ba:93:6a:0a:ed:84:53:49:29:90:85:
af:24:d5:da:9b:12:b2:0e:88:ff:ba:4b:8e:64:e1:32:72:f5:
bc:0a:17:c8:ab:8e:77:d7:05:8f:ca:93:98:c4:13:54:5a:24:
d6:63:66:95:6d:31:35:39:42:9a:79:17:bf:c3:5f:f2:5e:5b:
91:dc:c3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:10:08 2024 by rpki-client on console-fra.rpki-client.org