Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: PHdK+cNJKQC3bFL7ZnuxWFfEsEdsl5WG5UHfwNs3Lds=
Subject key identifier: DE:65:56:9A:F1:F5:10:93:2B:0B:1D:5E:4D:3D:46:ED:6B:FF:59:63
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 018F88240B60F473448B9DC46C76C9F294D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0793
Signing time: Fri 17 May 2024 20:00:14 +0000
Manifest this update: Fri 17 May 2024 20:00:14 +0000
Manifest next update: Sat 18 May 2024 20:00:14 +0000
Files and hashes: 1: B0V48ZEWlyYIig5s51L4Yuy2APc.roa (hash: x5dqisgVW9kx4TbM/w9rgJONTgVwPDDqdeu232WmKzU=)
2: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: 5bQbSDzJg+xEagviLH9QFmppPilHRYDN54WNGKenJX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:0b:60:f4:73:44:8b:9d:c4:6c:76:c9:f2:94:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: May 17 20:00:14 2024 GMT
Not After : May 18 20:00:14 2024 GMT
Subject: CN=de65569af1f510932b0b1d5e4d3d46ed6bff5963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:51:80:8c:be:f8:ae:24:a7:43:5e:ba:a4:
a8:cc:44:4a:cf:d5:f8:7b:de:dc:25:d1:5e:9f:40:
13:05:09:46:75:75:57:09:0d:88:99:2d:3c:fc:d4:
9f:6b:cc:75:7f:3a:30:d1:72:a0:cc:00:7c:e3:9d:
df:9d:b9:34:63:07:ac:00:8c:77:03:63:33:87:45:
3d:f4:3f:62:da:8e:b1:b6:27:81:a7:c5:cb:f2:29:
53:f8:d8:b0:8f:7a:22:48:71:dc:d1:20:29:8a:c0:
1d:5d:e1:c9:5e:40:4f:ec:ec:71:94:11:19:80:41:
ab:59:5c:b2:fa:99:79:6d:38:37:75:53:a8:94:f9:
d0:40:8a:17:da:b4:d3:aa:b4:53:df:a6:2f:8d:3a:
27:08:28:67:1d:72:a1:55:61:eb:24:62:bd:dc:99:
4c:d3:b4:e5:70:c5:71:2a:b5:e7:d6:0f:5c:eb:64:
d3:e4:a7:9c:c7:9c:b1:f1:9f:d3:66:1c:9c:73:76:
92:a5:ea:37:97:de:57:fb:3e:0f:ff:d8:a6:bf:af:
a6:0f:bc:ca:69:f3:46:c4:b4:b1:36:eb:19:07:eb:
0b:58:17:d4:b9:de:85:c5:b1:cb:2a:47:00:fd:67:
48:92:71:b5:70:dc:30:fd:e6:ff:83:6d:a2:9a:08:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:65:56:9A:F1:F5:10:93:2B:0B:1D:5E:4D:3D:46:ED:6B:FF:59:63
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:52:b2:28:f0:60:5a:1d:02:ac:ae:fd:02:e1:40:c5:a4:1f:
a2:12:8b:5e:53:f8:df:6c:2c:dc:5a:92:a2:10:c2:d9:e5:b2:
04:14:b5:d2:90:8b:0d:8f:8b:06:d6:34:bc:06:cd:56:7c:1b:
9e:41:02:98:f5:db:2d:d2:7e:51:f3:70:8e:35:58:c7:d8:31:
ab:77:73:65:9a:c1:4e:3b:0a:06:a1:8b:45:31:1a:3e:32:ee:
a0:92:42:38:43:19:eb:5c:53:8d:68:1f:b1:94:dc:68:70:a5:
ae:0b:46:2f:1b:47:58:73:42:a3:18:eb:52:63:34:b1:28:ef:
f4:7c:35:3d:c7:3b:16:c1:d7:b5:6e:bb:d5:c8:62:40:b8:88:
32:2c:0f:2b:55:19:d0:49:d7:61:cc:cd:d0:8c:b1:06:2d:2b:
ea:5e:79:b0:c4:d4:3a:42:c6:33:ed:a3:f0:41:f9:7a:c9:1c:
40:f6:96:d7:35:e8:ab:95:24:4a:55:e7:85:78:c9:a0:92:9b:
d2:76:b8:87:04:22:8a:f8:2c:ce:54:76:73:42:a5:b5:8a:5b:
29:78:81:1d:2e:e4:b6:af:71:00:a5:9e:51:32:62:05:e3:16:
cd:26:01:b7:30:37:b8:a5:4e:b4:9d:a3:30:4d:5a:61:5f:58:
f4:98:6e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:00:59 2024 by rpki-client on console-fra.rpki-client.org