Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File: UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier: 71YWZC8EL27xsW2yyXxlSdsuzc9Oz9Asd7TKwvmXoLQ=
Subject key identifier: C6:43:12:1B:CC:95:34:C7:30:C2:64:1F:BE:2F:F3:89:E1:08:11:F7
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 019351D089E2E5B1669DF41B149D17F157E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number: 136E
Signing time: Fri 22 Nov 2024 03:00:41 +0000
Manifest this update: Fri 22 Nov 2024 03:00:41 +0000
Manifest next update: Sat 23 Nov 2024 03:00:41 +0000
Files and hashes: 1: AJNQSp9QyABZYhrBtLMQgM_SLPY.roa (hash: J3DbSaPXQu+Dwhq/K+ywMA7ebTdhNi2jMcE3QSrLTY4=)
2: CEp-lW3ew45rAYWRer6bxDEPe2g.roa (hash: yAmQi/74ClfRMYft4f1YG7z1emLzX3XTnSxpAjj6VRo=)
3: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: qtsLTdDwGTvLO/PnvwcI50Md44JWsVob98vHSmRE6yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:89:e2:e5:b1:66:9d:f4:1b:14:9d:17:f1:57:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Nov 22 03:00:41 2024 GMT
Not After : Nov 23 03:00:41 2024 GMT
Subject: CN=c643121bcc9534c730c2641fbe2ff389e10811f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:ba:bb:86:93:e6:1c:51:b5:b9:bf:65:a0:
20:3a:f1:ef:f7:46:7e:7e:f3:84:4c:df:8a:44:b3:
61:5a:95:a6:af:c3:81:6b:c5:0f:d9:b1:03:b9:d1:
9c:56:46:eb:fd:4a:5d:bf:64:07:d9:56:3d:22:04:
a1:0a:41:00:00:c9:be:0f:49:cf:14:0d:36:20:2d:
64:66:35:c2:2b:cd:c1:dd:3f:b2:74:cd:b0:c7:e9:
0e:fd:6e:1a:e7:91:4f:71:0f:fc:72:c0:96:38:51:
c2:0a:9b:31:6b:a2:a1:0a:77:18:96:3e:ed:91:be:
e2:ba:43:43:8a:73:8e:79:e7:28:88:c1:e6:8f:a5:
b0:b3:4c:5b:29:9a:0f:96:c0:33:84:22:b7:20:e4:
03:49:c7:f1:47:7a:60:3d:f5:ff:b0:d2:f9:b3:d0:
3e:84:9d:92:1c:23:c7:40:59:d0:68:3e:c6:2a:0b:
ed:c6:cb:7b:28:d4:33:ce:5d:d4:b6:39:56:ef:bb:
9f:b8:21:5a:e0:3c:dc:e8:49:2c:31:73:30:12:9f:
1c:2a:81:af:71:83:12:72:89:7d:8d:f1:c3:10:09:
1e:f8:97:aa:26:1c:a0:b4:2b:9c:52:d9:5a:7b:79:
bd:79:61:b0:85:5b:83:6e:80:5b:3a:40:4a:92:72:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:43:12:1B:CC:95:34:C7:30:C2:64:1F:BE:2F:F3:89:E1:08:11:F7
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:29:3e:21:63:9a:30:ab:b4:22:02:8b:dc:ba:5b:da:6d:ba:
5a:e9:e8:be:27:ba:ed:0f:a1:69:01:27:2d:16:33:64:0d:9f:
41:90:3a:7b:66:10:47:2c:a3:f6:0f:33:85:a4:29:1e:72:64:
3d:46:d4:25:4f:0a:94:38:c4:ee:7b:b4:08:ca:7b:21:5b:26:
f3:67:ea:04:05:7c:de:02:ec:57:9b:cd:31:07:02:06:0d:8c:
24:90:c5:0d:9d:44:40:72:9e:37:0f:ef:48:37:d7:1e:27:66:
a5:34:97:15:bb:f6:76:3d:b8:b8:f2:86:08:70:b6:6f:7c:1c:
dd:c7:59:30:b5:90:8c:8c:aa:de:f0:fe:39:56:d2:3c:79:1b:
7f:d4:03:7d:22:bc:de:ff:60:59:20:3b:3f:79:99:61:7a:23:
7e:14:c7:89:44:a5:3e:dd:57:24:f6:69:a6:d5:9e:f5:06:56:
ab:4c:25:2c:51:d3:98:02:b5:a8:e3:f3:55:2f:42:3e:ba:10:
1f:93:80:38:d2:ce:a4:de:ed:5c:fa:3e:0e:25:64:d3:6e:51:
b6:7a:2c:e2:5a:9b:53:77:44:58:f8:15:86:be:ad:3e:73:3d:
9c:14:94:d0:d6:75:a7:29:f7:65:85:e3:12:96:a9:ce:8f:f7:
98:1a:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:53:00 2024 by rpki-client on console-ams.rpki-client.org