Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: aYUTb5TubDKDV7zBovbNSaCLPtNo0zZabeNP6TUe38E=
Subject key identifier: 89:AE:19:9A:D7:94:71:8B:6B:50:F9:4A:E3:09:F8:E4:22:07:B9:5D
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 01936A7DCC38C5B1B3FE50CE77CBBC44E705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 22:00:49 +0000
Manifest this update: Tue 26 Nov 2024 22:00:49 +0000
Manifest next update: Wed 27 Nov 2024 22:00:49 +0000
Files and hashes: 1: JhaShqWiB8LqsFkBM0-OGgsXmHI.roa (hash: autan1tAGv3fk6CV+xf0EC3nhT4itgQHsyVWtRFg99I=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: KqOhSGwMsaCP1Kdv4wSjHF/owPLQGVzMddTHGzdbKys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:cc:38:c5:b1:b3:fe:50:ce:77:cb:bc:44:e7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Nov 26 22:00:49 2024 GMT
Not After : Nov 27 22:00:49 2024 GMT
Subject: CN=89ae199ad794718b6b50f94ae309f8e42207b95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7d:8f:af:79:8b:61:54:9d:d1:2f:17:32:76:
c8:e7:55:a5:b4:bb:b4:2b:76:06:b5:68:a9:04:89:
c3:df:6b:b6:9e:d7:7c:8b:10:8f:a5:ee:4f:84:b3:
db:f6:3a:2b:5b:96:98:da:f2:0d:72:8a:78:2e:9b:
67:94:ad:00:b0:c4:00:d9:5d:a7:16:ac:97:16:58:
44:e4:df:8a:9d:ec:8e:f6:b3:46:5c:6f:fd:d7:8b:
f6:48:b5:06:3a:8d:53:80:db:71:4d:d2:da:9f:6a:
70:d8:4c:63:6c:eb:5f:80:87:8c:bd:36:27:5a:a7:
1d:55:d8:71:d6:d1:d7:68:d6:a5:9b:5e:63:94:47:
8c:08:d4:c5:66:2a:91:14:ee:55:b7:b6:ca:6c:80:
ec:7f:77:51:bb:25:53:24:e4:c2:57:a7:16:c8:28:
e8:e5:98:1c:3b:03:d4:14:d9:db:ea:3d:b1:9f:cc:
5e:21:5f:17:e3:f4:4e:d5:42:f6:2e:90:b0:2a:ba:
61:26:63:37:98:5e:b3:3a:74:8c:75:6a:47:ab:5e:
9d:c3:5c:8d:40:a6:82:5b:bc:8d:c2:f1:e9:f4:16:
d6:ff:4d:31:d6:3f:38:b2:fe:06:fe:39:67:fa:07:
ce:9a:02:bc:37:89:19:95:cf:77:01:3b:9a:37:8a:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AE:19:9A:D7:94:71:8B:6B:50:F9:4A:E3:09:F8:E4:22:07:B9:5D
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:de:8c:ec:15:d1:38:5d:fc:d1:28:68:b6:7a:ce:bb:31:0b:
ee:c9:40:58:9a:5c:af:da:0a:d1:11:c7:0f:09:b6:17:5f:a2:
6e:72:92:29:06:86:55:6f:8c:a0:3b:43:3a:14:81:97:e2:e6:
70:50:e3:14:48:02:75:49:41:1f:8a:9f:f2:c0:17:1d:ff:da:
8b:c4:c1:d7:10:8e:73:8c:29:6f:47:97:45:cb:45:ed:ba:04:
d6:b0:14:76:09:ac:dc:9f:e4:84:24:d8:fc:7a:73:b1:21:56:
04:40:98:94:9f:fb:f1:10:1e:83:02:7d:92:28:3e:3b:e9:58:
4a:5e:8a:36:6b:bc:5b:80:10:57:89:55:44:21:58:51:a0:84:
aa:70:02:65:f2:dd:73:9a:54:2a:67:48:a4:df:ba:39:7e:2a:
48:e3:eb:59:50:2b:a8:9a:40:a5:d1:66:85:94:69:26:53:17:
46:53:75:41:2d:da:4a:d7:c1:5b:52:b0:6a:2f:07:b8:2f:8e:
0f:6b:12:ea:ea:1f:33:a0:37:4e:cf:cd:cd:90:31:96:5c:de:
86:20:7b:dd:ae:20:ba:05:bc:65:93:10:d1:eb:ca:aa:93:e9:
e4:66:65:51:cd:fd:aa:59:1a:f7:f3:e2:f0:47:fc:f2:8b:b0:
91:91:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:12 2024 by rpki-client on console-fra.rpki-client.org