Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
File: UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json)
Hash identifier: Qzezb2i3GxQpPfQo1H5/CqGnKMIyNjf8AOgH27StKVg=
Subject key identifier: 90:4A:1C:44:38:31:F8:CB:DA:FB:FC:3B:36:A1:80:54:13:D8:B8:63
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial: 0193579BBF6D99F6077022A15017CEA8F3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 06:00:45 +0000
Manifest this update: Sat 23 Nov 2024 06:00:45 +0000
Manifest next update: Sun 24 Nov 2024 06:00:45 +0000
Files and hashes: 1: 7be3KlVWtY9E6GU_jdoff4miTvA.roa (hash: aMLMj+8Ya41+zKbG2YsMmVyVQc7xiiZxfUrEegbEr4Q=)
2: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: q6+nAztbl8S6FOFPi54SaVS79vTualgDgncsC77+0cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:bf:6d:99:f6:07:70:22:a1:50:17:ce:a8:f3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Validity
Not Before: Nov 23 06:00:45 2024 GMT
Not After : Nov 24 06:00:45 2024 GMT
Subject: CN=904a1c443831f8cbdafbfc3b36a1805413d8b863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:d5:86:56:d7:46:c7:c6:08:71:be:51:20:
c1:e8:f2:d9:48:3e:1b:be:d9:c7:56:21:95:15:e0:
30:db:62:e1:9e:19:b9:66:2e:f6:90:2a:a3:dc:24:
61:f5:cc:d3:74:7d:0e:e1:06:1f:53:6f:45:f5:95:
8b:d6:bb:87:2e:8f:fa:da:41:9d:a9:d5:58:27:54:
dc:0d:d7:12:73:bd:29:79:d1:5d:6f:b9:6e:a1:96:
48:a5:07:f2:2d:67:54:b9:bf:b1:c9:5c:00:2b:aa:
6d:75:49:3b:a0:c8:3e:e9:32:13:36:92:de:ba:74:
71:89:f9:59:5e:77:ca:6b:9f:3f:11:d1:66:48:e8:
ae:5d:b5:9b:e3:b2:ac:9c:50:65:47:a5:95:39:6b:
52:2b:60:c1:c0:45:e7:df:d8:74:18:b4:d2:89:f0:
ff:38:36:c5:5a:a4:5e:ed:81:83:ba:8a:62:7f:42:
1e:84:90:86:e8:ba:95:ab:54:16:c4:dc:75:26:d1:
0e:6a:28:86:67:ed:eb:b9:f9:9b:86:4e:b4:49:c6:
eb:5d:49:4a:30:57:e5:55:c4:64:0f:d5:06:f4:79:
5e:e1:71:7a:3f:f5:1e:18:e8:9e:e9:c6:89:0f:6b:
d9:81:3d:27:16:cc:b9:73:a7:2b:a5:24:58:be:f9:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4A:1C:44:38:31:F8:CB:DA:FB:FC:3B:36:A1:80:54:13:D8:B8:63
X509v3 Authority Key Identifier:
keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:16:bb:ab:7c:d1:c7:0b:da:cc:4b:a6:51:e2:53:1d:cb:aa:
ad:06:86:30:ec:9e:b3:1f:78:04:94:ad:33:27:ee:7c:aa:36:
90:14:dd:12:4d:d9:81:6d:18:16:8d:46:8b:e6:dd:2c:0e:30:
e1:99:ef:fe:c9:5b:26:61:a7:09:59:d6:33:d2:20:01:95:81:
25:2f:6b:04:e8:6b:26:d1:2d:14:46:54:5c:92:31:d6:42:d0:
6b:e6:71:3d:1f:5a:e2:bf:8e:7b:e5:b7:af:0d:d8:88:37:26:
e0:ef:af:e7:66:2c:f4:e7:e1:8b:e8:e8:a4:85:52:30:c8:58:
6d:58:c5:7b:3c:3e:15:de:da:24:0f:64:03:d9:47:28:3b:14:
37:8c:88:4c:2e:66:24:ec:6d:f3:e6:eb:04:86:22:df:06:52:
78:7e:7f:1e:e6:ab:a7:e7:63:96:a9:a2:89:90:36:f9:ed:2c:
b0:e5:cc:10:d9:10:26:6d:33:bf:39:c2:92:94:16:a1:ce:fa:
14:0e:b3:8f:43:75:86:57:74:22:40:ec:a9:47:41:d3:ce:e7:
2a:82:a7:67:9b:45:49:56:d2:f7:17:13:94:c6:21:1c:59:0e:
d8:1f:78:b8:8d:a5:9f:8f:a5:27:43:73:ee:a2:4e:4d:74:3e:
86:2f:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:51 2024 by rpki-client on console-ams.rpki-client.org