Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
File: U12xQ-kGqiDleCkH-EXUp2li_3s.mft (raw, json)
Hash identifier: Am6ll5NrP36mAVHB9PB7D7lmk0UoDaZaLfqdcVIgtWQ=
Subject key identifier: 64:F2:77:84:74:00:6F:D6:78:C0:6F:BC:9B:6B:6F:96:DC:BF:D9:90
Authority key identifier: 53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
Certificate issuer: /CN=535db143e906aa20e5782907f845d4a76962ff7b
Certificate serial: 019367ECA7B4E5860EBC8D6247B29A81C832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
Manifest number: 10BA
Signing time: Tue 26 Nov 2024 10:03:02 +0000
Manifest this update: Tue 26 Nov 2024 10:03:02 +0000
Manifest next update: Wed 27 Nov 2024 10:03:02 +0000
Files and hashes: 1: LnUedruzZwCNWjtVZq5NdVT42Wc.roa (hash: HNO4DZCg6FEwsJQM4imktBPWwD95kKLUZwRstHccZZQ=)
2: U12xQ-kGqiDleCkH-EXUp2li_3s.crl (hash: 1V0xtr9VFEjDbhg+pRNaPb0nylDDgDhAyNvsaJtMaDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:ec:a7:b4:e5:86:0e:bc:8d:62:47:b2:9a:81:c8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535db143e906aa20e5782907f845d4a76962ff7b
Validity
Not Before: Nov 26 10:03:02 2024 GMT
Not After : Nov 27 10:03:02 2024 GMT
Subject: CN=64f2778474006fd678c06fbc9b6b6f96dcbfd990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:0c:74:7e:50:bd:57:60:70:94:df:6a:04:
af:20:dc:0f:97:76:6c:dd:c1:43:a7:a3:c0:5a:56:
29:a0:2d:f6:9e:e5:fb:20:80:59:f2:4b:22:3c:f4:
60:c2:91:1b:90:a9:42:75:a0:1f:da:72:88:9b:5f:
78:7d:de:17:3b:12:ef:39:50:51:53:83:a4:b2:59:
84:74:af:a0:b0:df:fd:d7:c8:83:c5:05:f2:d4:aa:
6d:5d:90:dc:7e:95:dd:65:1a:45:0b:b0:b8:d7:12:
8a:45:a5:ee:34:c3:3a:9f:a1:4e:fd:17:29:76:47:
75:82:a0:4f:ad:fb:32:51:33:96:4c:c2:35:b6:40:
57:5c:a3:c3:0b:c8:c9:34:51:77:dc:c2:e6:cf:81:
6b:da:4f:27:c3:f5:0d:62:4c:09:18:9e:18:4b:16:
be:91:6d:eb:81:29:dc:10:a9:93:a5:77:74:a3:8d:
c4:a2:4d:53:6a:92:0b:4d:64:8e:e5:20:45:42:f7:
e7:d7:40:7d:fc:d6:65:99:2e:ad:40:73:ce:e1:8b:
56:77:4f:6f:f7:13:e9:15:61:5c:34:e0:30:2d:b2:
a8:0a:e6:a7:47:c4:56:d4:4b:7c:50:89:75:0b:ae:
d1:e1:d3:2f:ea:0e:51:89:2d:bd:6c:86:1d:c5:f7:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F2:77:84:74:00:6F:D6:78:C0:6F:BC:9B:6B:6F:96:DC:BF:D9:90
X509v3 Authority Key Identifier:
keyid:53:5D:B1:43:E9:06:AA:20:E5:78:29:07:F8:45:D4:A7:69:62:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U12xQ-kGqiDleCkH-EXUp2li_3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8d98-34c9-4d26-97dc-48731b3c03a4/1/U12xQ-kGqiDleCkH-EXUp2li_3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ed:f4:ae:21:86:99:47:f5:7a:2c:33:09:f8:17:65:bb:ab:
26:b8:e8:00:ad:6b:4d:6b:90:f2:a1:44:ac:d2:1b:09:8e:63:
79:f8:56:6d:f6:5b:ba:ca:03:e5:e3:1f:88:fa:9f:2f:b3:87:
14:bf:ae:bb:0c:b3:9f:30:bb:78:8d:c9:df:a6:9e:58:61:b3:
4a:a5:9d:2e:58:e1:5f:09:ba:57:c3:d1:9a:96:1c:07:53:74:
da:97:f7:e9:79:83:c2:45:5e:cc:66:c8:f6:ed:c3:de:34:a3:
29:49:b9:98:e3:2e:14:78:f0:0a:b6:61:79:6d:cc:b2:97:93:
42:d6:b6:8c:67:74:c1:ed:08:a4:7d:c5:e6:be:88:68:d6:95:
67:0b:cd:5c:03:a3:d4:51:df:ce:47:b4:ea:c5:21:e5:7f:64:
2a:4b:66:7a:61:fb:17:f3:cd:a2:54:1b:fe:b3:0b:12:87:29:
a1:e5:3e:df:9b:f7:11:d1:13:db:12:72:4e:4c:91:62:9a:f7:
30:db:ba:8d:c6:51:a8:f1:a8:e1:1d:ac:ab:96:56:99:7b:ce:
4a:8f:70:f7:fb:3f:c1:1f:aa:0b:91:28:18:86:b1:f9:32:a5:
2a:6f:5a:88:39:fe:15:15:61:9e:d0:7f:fd:51:8d:90:9c:68:
e3:97:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:42:22 2024 by rpki-client on console-ams.rpki-client.org