Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File: uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier: PkPb0PvLN4pe+KbNsCIIIGO9ag/yWOq2jqVe/2nwLks=
Subject key identifier: 9C:70:D8:4F:70:8F:C5:E1:82:FB:BD:4F:69:A4:92:AB:19:D1:56:E4
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer: /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial: 01936C3510016BD2031B39A36EF9AE0E715F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number: 0B87
Signing time: Wed 27 Nov 2024 06:00:37 +0000
Manifest this update: Wed 27 Nov 2024 06:00:37 +0000
Manifest next update: Thu 28 Nov 2024 06:00:37 +0000
Files and hashes: 1: DtONX9UVwFjc0qsps5U1KFAgnEo.roa (hash: Tg1Ho7qg84nk6VuUK0q/5xVMBE8ufhTzbTe6nyjUdys=)
2: q3vPnjAkoHvi-wIWgjLo7EH5H0w.roa (hash: YI1H5pft0lJBSSBkLYEMJvyBye36CSc7iHae2MU7/80=)
3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: KNEvll/TtwI13SbpTDxUmcXffGlqfyZqArxDtTBl5UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:35:10:01:6b:d2:03:1b:39:a3:6e:f9:ae:0e:71:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
Validity
Not Before: Nov 27 06:00:37 2024 GMT
Not After : Nov 28 06:00:37 2024 GMT
Subject: CN=9c70d84f708fc5e182fbbd4f69a492ab19d156e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4d:4e:8f:0a:d4:94:03:9f:f2:0a:b6:c6:10:
e5:09:c1:7b:a0:81:c8:31:22:da:37:de:b0:12:64:
cd:a3:52:c5:26:f6:3f:c9:89:e9:a2:e2:3a:a0:30:
53:bc:1c:e8:6a:17:39:86:2a:f0:5b:a7:c4:ad:b9:
dd:c1:0c:9a:90:af:03:a6:21:a5:49:60:44:4b:97:
e6:e6:ac:51:49:7d:e3:44:1a:74:f5:0d:86:3a:fd:
b0:da:55:77:e3:69:cf:9f:88:26:3f:97:8a:1a:1c:
4b:20:99:4a:5f:de:09:62:a7:ca:d3:64:c7:0e:58:
20:f8:4d:78:90:a0:1a:d5:d8:05:e1:96:08:db:32:
6e:c7:67:22:5e:69:2c:c4:6c:51:5c:43:77:fc:57:
f6:f4:cc:ef:b6:49:70:09:b5:2d:43:db:d7:22:5e:
7b:54:0d:0d:85:34:03:93:b0:b5:97:90:de:92:00:
b2:0c:b5:93:cb:8a:30:37:c4:a4:10:b4:2e:98:df:
5f:79:dc:1d:f8:fa:e1:6a:b7:09:51:a9:e0:9a:80:
04:28:43:7b:19:f1:27:c1:11:65:f4:d6:58:2c:b0:
4b:e4:e0:79:fb:0a:70:80:2b:98:d5:81:78:39:71:
2d:82:39:97:2a:27:f6:54:75:a1:2a:70:9e:8f:f0:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:D8:4F:70:8F:C5:E1:82:FB:BD:4F:69:A4:92:AB:19:D1:56:E4
X509v3 Authority Key Identifier:
keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:23:f8:c9:d9:76:f4:20:34:59:3d:82:96:75:8f:38:b5:2c:
c1:46:ac:7f:92:0d:f7:0b:34:b2:79:0f:5e:55:8f:23:5d:8d:
9b:dc:99:ec:dd:9a:a5:d5:17:6c:52:8e:14:02:1e:86:66:3c:
cc:38:c8:06:2c:6c:3a:4d:ad:61:76:da:ec:0c:0e:b3:b4:76:
e5:07:9c:3f:71:cc:c1:8c:7b:1b:1c:23:ee:7b:b6:50:e9:46:
f8:65:cb:9d:e0:bd:f4:2f:91:e3:de:64:a6:59:f4:6b:a2:bd:
21:fb:d7:39:6d:a4:54:e1:19:78:bc:e0:d8:57:68:e7:62:a9:
4f:62:30:74:33:b9:bd:52:3a:65:3c:f5:7a:74:00:af:51:96:
e7:15:6b:64:56:ec:4a:57:1f:9d:77:3d:73:c7:db:8e:e7:e5:
f1:92:69:8d:fa:fe:1c:e6:3c:ae:4a:28:8c:c2:aa:b7:2d:e0:
72:9a:6d:b2:72:ab:77:0a:ef:72:0e:45:d9:8d:29:53:07:9c:
62:44:9d:3c:e1:72:93:ce:53:03:e6:4b:57:0e:d1:d3:41:82:
79:26:0a:c5:a5:ef:9d:ef:03:c4:11:cc:b6:df:60:b2:30:3b:
4d:41:b0:0f:c5:c0:67:53:69:24:b2:44:ab:a7:25:d3:56:b0:
56:f0:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 10:28:31 2024 by rpki-client on console-fra.rpki-client.org