Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
File: ultlF5ERn466o74m8cdWuGMJvo4.mft (raw, json)
Hash identifier: Xc7cP6Gq833jkCsnVKT52Vj7gCCB8DM1rDL29nUvQzs=
Subject key identifier: 63:D1:4B:5D:58:3C:A2:DC:22:29:4E:D1:EA:21:B7:C7:26:97:55:4D
Authority key identifier: BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
Certificate issuer: /CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Certificate serial: 018F93F19594CC20F33D0EB70C7896EE8E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
Manifest number: 0501
Signing time: Mon 20 May 2024 03:00:34 +0000
Manifest this update: Mon 20 May 2024 03:00:34 +0000
Manifest next update: Tue 21 May 2024 03:00:34 +0000
Files and hashes: 1: KJWYNaY7Bcx8FX7L6sUedRnIZ8A.roa (hash: U6BLWOzo6T3emcopgU8TaikYBEuRCFjPlH41HBa2b7w=)
2: ultlF5ERn466o74m8cdWuGMJvo4.crl (hash: nAVZr3BRt8VUa37110yV46ju6Y/QEm49kwqGOU0RqCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:93:f1:95:94:cc:20:f3:3d:0e:b7:0c:78:96:ee:8e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba5b651791119f8ebaa3be26f1c756b86309be8e
Validity
Not Before: May 20 03:00:34 2024 GMT
Not After : May 21 03:00:34 2024 GMT
Subject: CN=63d14b5d583ca2dc22294ed1ea21b7c72697554d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:99:1b:13:e6:15:45:8b:78:16:f1:5c:4c:
e7:f7:1c:37:fa:af:6c:7a:01:ba:c0:22:5b:f2:5e:
a3:ff:e4:55:1d:62:bc:37:1b:df:75:4f:73:df:5e:
21:c8:13:6f:e4:16:fe:3b:d9:77:6f:c1:f7:26:20:
bb:a2:90:c3:69:c1:78:86:48:19:f1:c4:a3:ac:b1:
d2:15:cc:ee:3e:84:d4:42:15:76:b4:e1:22:e7:6c:
38:1c:7d:76:14:b6:e6:02:00:1d:a0:10:b2:9e:cf:
9d:7a:97:a6:a2:d5:26:0a:0d:33:31:a6:fe:e5:8b:
15:19:dd:f7:d8:47:83:cd:10:9c:40:f7:e5:2e:a6:
05:2a:47:2f:f6:68:65:0b:f8:0a:ca:0b:9a:14:59:
1e:db:38:02:f3:10:ab:9a:f1:2f:e3:52:49:5e:e5:
ac:88:95:b1:cc:6f:df:f3:d8:9b:38:d0:2f:68:3c:
21:b2:10:b9:a1:ca:f3:07:98:98:8e:b8:5f:e9:11:
7e:80:bc:a6:eb:e4:a0:81:1a:f1:c5:df:34:aa:2f:
54:04:24:e3:df:1a:5d:b8:15:47:6d:76:3f:a7:e2:
6e:54:af:11:a7:29:dd:5b:49:61:ba:ca:12:c3:11:
0a:d1:5a:ea:36:ca:dc:69:72:b5:94:82:5d:a8:92:
3a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D1:4B:5D:58:3C:A2:DC:22:29:4E:D1:EA:21:B7:C7:26:97:55:4D
X509v3 Authority Key Identifier:
keyid:BA:5B:65:17:91:11:9F:8E:BA:A3:BE:26:F1:C7:56:B8:63:09:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ultlF5ERn466o74m8cdWuGMJvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/4cc4d8-8091-4581-92f4-196f8f064ee4/1/ultlF5ERn466o74m8cdWuGMJvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1b:14:1a:82:04:3b:fc:ce:3f:32:ed:9f:c7:1c:34:5e:f5:
47:ba:4f:06:19:ae:dd:3f:c3:cb:d0:9c:54:dd:79:f1:f1:75:
0a:1f:6a:71:e9:19:f1:5f:13:77:9a:24:09:00:0b:21:6e:38:
1a:0e:8b:6a:21:32:70:a1:66:51:cf:ad:ac:94:90:53:a6:fd:
5a:98:62:4d:c6:91:3e:23:61:07:84:63:9f:2c:f8:75:db:28:
45:1f:d9:08:81:90:99:95:20:34:a8:7d:2e:92:d5:68:22:ca:
21:ac:fa:45:0e:85:6c:9d:53:1d:3b:26:fe:f0:a1:6a:1c:8c:
b7:aa:67:44:8f:e2:5e:34:17:60:5a:0a:17:6e:58:df:8e:cf:
3c:bd:45:b3:c3:a3:70:42:90:61:4f:c0:ab:6d:31:d9:b2:7c:
72:21:51:56:71:0d:a6:c0:62:d4:fb:c2:9e:59:d1:c5:00:f0:
af:eb:ae:3e:d8:fb:86:66:e4:34:fa:72:77:76:a6:58:33:44:
35:74:0a:49:54:13:ed:42:d8:2f:0a:76:3b:2c:bc:10:35:76:
34:dd:08:2f:16:3d:4f:d5:10:00:45:41:24:c6:77:0c:aa:55:
be:20:ac:4d:9a:cd:a2:9f:69:a3:be:65:e2:3f:b7:09:18:f1:
71:e6:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 11:34:46 2024 by rpki-client on console-fra.rpki-client.org