Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
File: udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json)
Hash identifier: g3IXXhUVAW7I4q3nAc5+xA3U190t+3n9dNEAn00Ji9Y=
Subject key identifier: 1D:8D:A7:85:0F:B2:74:8B:1C:B5:E8:01:33:5A:D6:4A:92:1A:11:F9
Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
Certificate issuer: /CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Certificate serial: 0193572D8966258FAB9CFD7D60C0F8E577C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
Manifest number: 04E3
Signing time: Sat 23 Nov 2024 04:00:22 +0000
Manifest this update: Sat 23 Nov 2024 04:00:22 +0000
Manifest next update: Sun 24 Nov 2024 04:00:22 +0000
Files and hashes: 1: jHutqeBCZ6lYzkzKlkA6itKuPqU.roa (hash: vUgbxkzzJuNmhXQdGnzqSmrQSas3btoWfD7OTa23Jco=)
2: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: UiEbzgqKCN4mPsdhcIPajdB9Niao0eEy5LEeNv1IQr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:89:66:25:8f:ab:9c:fd:7d:60:c0:f8:e5:77:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Validity
Not Before: Nov 23 04:00:22 2024 GMT
Not After : Nov 24 04:00:22 2024 GMT
Subject: CN=1d8da7850fb2748b1cb5e801335ad64a921a11f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:45:39:18:3c:f2:35:8f:03:63:77:03:81:
07:f7:a4:d1:45:ac:7a:cf:92:ff:29:02:f9:10:d9:
42:38:60:55:d2:5c:ed:91:33:dc:03:2d:f6:63:60:
75:fb:29:e1:01:e5:1a:77:4d:c4:bd:61:09:a4:cb:
8a:83:e5:1e:04:87:be:a6:0e:c9:fe:be:b1:57:90:
8f:4c:79:93:da:af:b1:bf:a7:c5:2c:03:ab:71:b5:
c6:65:52:fd:9c:02:e6:2b:d9:45:56:8a:b6:46:3f:
d7:1a:5b:59:1e:8a:79:00:92:cd:ad:a6:24:76:d8:
cb:07:9d:98:86:77:d6:9a:eb:c5:9a:b6:45:52:7c:
a8:e1:36:0c:31:40:03:3e:d0:a8:0a:0a:64:b2:82:
51:fb:54:6f:9d:50:ba:e6:b4:20:f7:87:34:e5:14:
78:f3:cd:ba:d0:06:60:63:5f:9f:89:34:81:eb:9c:
fa:ae:fc:eb:fc:cf:45:f3:65:de:b5:6e:f0:46:b4:
d5:c3:06:82:d7:ee:0b:93:6f:45:b2:93:59:98:bf:
8a:80:5c:bb:2a:1b:c3:fd:97:80:a4:87:f7:0f:64:
94:88:aa:8c:db:e5:a5:d4:2a:57:db:a6:49:4a:20:
d4:0a:03:85:63:19:2b:1d:ca:48:8a:a9:84:eb:e2:
b9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8D:A7:85:0F:B2:74:8B:1C:B5:E8:01:33:5A:D6:4A:92:1A:11:F9
X509v3 Authority Key Identifier:
keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f4:e8:e2:16:21:3c:aa:c7:5f:20:a8:e4:ca:53:77:32:3c:
81:de:3d:5f:78:6a:b0:0c:e3:4f:51:a6:09:75:ce:24:6a:72:
f4:27:48:3e:b7:40:44:14:41:81:96:25:f0:c6:7b:78:29:4e:
ef:77:94:4c:8c:b8:d8:b7:69:bb:ce:8d:bc:4b:65:5a:e4:67:
56:50:61:f8:47:bb:a1:1a:0a:00:da:45:51:ec:9f:9a:87:09:
c1:69:62:8d:57:c6:25:cc:61:8e:99:ae:e4:e2:ce:29:47:20:
a2:04:88:e5:99:35:51:af:bb:0e:a1:b1:30:fc:a3:1d:6e:8c:
ca:57:9c:03:0a:b6:96:1a:b9:cc:e2:37:a7:3b:36:05:87:08:
e6:ad:b1:22:a7:0a:7c:5a:10:e6:ae:32:40:06:42:31:2a:4d:
6f:8b:31:8d:89:de:06:e2:18:88:46:7d:04:9a:db:18:21:fe:
bf:d4:fb:b9:c0:30:9d:bd:30:ba:55:63:34:33:e7:ad:ad:c8:
a3:f7:12:08:f4:63:7b:8f:a1:3b:dc:31:15:dd:f5:5a:f9:4e:
4c:8f:1e:15:4c:12:b3:c3:99:1c:cd:21:ab:36:08:16:07:16:
af:fb:bd:c5:c3:80:08:cc:13:2a:29:65:d9:8d:a8:e0:86:d2:
b5:be:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:43 2024 by rpki-client on console-fra.rpki-client.org