Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: 4RCwHpBVag904oHKY04yRL+gp8szms3rH8q+VGPC2Kk=
Subject key identifier: 0D:E7:C8:21:1E:10:4F:7D:5A:BE:63:9F:FA:91:94:2F:47:C2:B5:B9
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 018F87EDA656DD3565C6680FE920C3619A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1177
Signing time: Fri 17 May 2024 19:00:49 +0000
Manifest this update: Fri 17 May 2024 19:00:49 +0000
Manifest next update: Sat 18 May 2024 19:00:49 +0000
Files and hashes: 1: JhaShqWiB8LqsFkBM0-OGgsXmHI.roa (hash: autan1tAGv3fk6CV+xf0EC3nhT4itgQHsyVWtRFg99I=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: JDNdCgG31JqlrjI8znpQ3gbMFmicWkQ2QqRTUsXsDEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:a6:56:dd:35:65:c6:68:0f:e9:20:c3:61:9a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: May 17 19:00:49 2024 GMT
Not After : May 18 19:00:49 2024 GMT
Subject: CN=0de7c8211e104f7d5abe639ffa91942f47c2b5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:96:d3:c7:e4:3e:a0:83:cd:20:df:50:10:
01:ce:de:78:cf:92:00:70:1d:e6:66:da:0e:17:ab:
b8:df:bd:df:3c:6d:c3:4b:37:e6:01:49:62:e5:db:
ee:fe:90:e1:63:60:56:63:af:7d:45:eb:19:56:f7:
86:4b:f4:f5:bb:f3:d7:d1:cd:1c:28:27:fb:cc:c2:
12:55:88:15:6b:ca:e2:d6:15:42:bd:87:7f:87:93:
3e:5c:f1:d2:58:2d:4b:42:ed:ac:2e:96:88:d3:fc:
04:b2:08:7b:cc:ad:0d:0d:7d:2e:29:9d:7c:8c:1d:
16:10:7c:0e:fc:33:b2:16:c9:23:1d:3c:b0:18:44:
d4:6a:89:52:d3:73:2c:f3:f0:ff:f5:21:c6:85:39:
bf:a7:49:b5:4f:97:a4:fa:6c:58:0f:e7:1d:8b:f1:
dd:8a:7f:95:c5:e9:44:a8:60:c9:a5:c7:46:76:9f:
34:08:33:69:d0:a8:d6:a3:e4:07:0d:37:9e:af:fc:
25:6f:5a:da:40:9a:34:fc:1a:53:eb:22:32:b4:d3:
13:03:6c:22:8b:72:68:47:83:ce:ba:ef:0a:af:fa:
4b:84:5b:38:0f:81:f9:bb:e9:24:09:bf:bd:d0:d5:
aa:7a:20:47:59:b5:68:85:ca:6c:f5:be:ac:ce:db:
3e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:C8:21:1E:10:4F:7D:5A:BE:63:9F:FA:91:94:2F:47:C2:B5:B9
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7f:a2:87:09:8e:e8:93:f7:76:df:fb:7a:d9:32:30:29:68:
ae:4e:5d:01:55:98:15:64:6a:17:d4:e7:97:7b:55:bc:ea:40:
7c:ec:58:cf:aa:89:d1:73:fb:8e:3f:be:ed:13:ef:db:6f:e4:
d5:40:69:03:ec:c2:cb:03:24:c8:33:1c:c7:0a:ee:76:06:82:
41:b3:9d:b0:3d:d8:7c:c0:42:fb:f2:98:33:85:2e:f8:a9:f5:
74:89:f7:ea:b5:96:a9:83:db:14:d0:e2:18:99:70:91:c4:ce:
02:7f:4a:6b:27:1e:83:29:b1:39:de:94:1f:2b:d1:41:21:5d:
ba:c2:b8:32:e0:98:8e:2c:ff:35:c7:04:a3:25:47:90:4f:ad:
83:cf:28:6b:11:74:76:33:52:71:57:90:d7:49:ba:04:3f:50:
c0:8d:ca:5f:9e:56:2c:cc:63:29:78:99:3e:83:4a:0b:fd:15:
76:be:fb:57:68:62:d2:7c:3b:b2:02:ee:63:6d:41:4e:fe:43:
12:a9:cc:63:03:19:d6:41:d6:1f:6a:1f:99:ad:fe:f1:ff:cd:
a6:3a:09:7d:92:ef:90:9d:23:47:26:c1:06:90:5b:9d:cc:38:
0d:0d:21:ee:7c:33:3d:ea:a0:e3:82:f6:76:c6:91:fb:de:17:
d5:63:98:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7aZW3TVlxmgP6SDDYZpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Y2M2ZDczNDQ5MmU0MTA2NjA4YTI0ZmExYjk1ZWZhYTg3
OWM0NWEwHhcNMjQwNTE3MTkwMDQ5WhcNMjQwNTE4MTkwMDQ5WjAzMTEwLwYDVQQD
EygwZGU3YzgyMTFlMTA0ZjdkNWFiZTYzOWZmYTkxOTQyZjQ3YzJiNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotiW08fkPqCDzSDfUBABzt54z5IA
cB3mZtoOF6u4373fPG3DSzfmAUli5dvu/pDhY2BWY699ResZVveGS/T1u/PX0c0c
KCf7zMISVYgVa8ri1hVCvYd/h5M+XPHSWC1LQu2sLpaI0/wEsgh7zK0NDX0uKZ18
jB0WEHwO/DOyFskjHTywGETUaolS03Ms8/D/9SHGhTm/p0m1T5ek+mxYD+cdi/Hd
in+VxelEqGDJpcdGdp80CDNp0KjWo+QHDTeer/wlb1raQJo0/BpT6yIytNMTA2wi
i3JoR4POuu8Kr/pLhFs4D4H5u+kkCb+90NWqeiBHWbVohcps9b6szts+rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3nyCEeEE99Wr5jn/qRlC9HwrW5MB8GA1UdIwQY
MBaAFLnMbXNEkuQQZgiiT6G5XvqoecRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYt
ODIwZDVmYzQ0ZTM1LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMTA5MjItOTk1NC00NTNmLWIxYzYtODIwZDVmYzQ0ZTM1
LzEvdWN4dGMwU1M1QkJtQ0tKUG9ibGUtcWg1eEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3+ihwmO
6JP3dt/7etkyMClork5dAVWYFWRqF9Tnl3tVvOpAfOxYz6qJ0XP7jj++7RPv22/k
1UBpA+zCywMkyDMcxwrudgaCQbOdsD3YfMBC+/KYM4Uu+Kn1dIn36rWWqYPbFNDi
GJlwkcTOAn9KaycegymxOd6UHyvRQSFdusK4MuCYjiz/NccEoyVHkE+tg88oaxF0
djNScVeQ10m6BD9QwI3KX55WLMxjKXiZPoNKC/0Vdr77V2hi0nw7sgLuY21BTv5D
EqnMYwMZ1kHWH2ofma3+8f/NpjoJfZLvkJ0jRybBBpBbncw4DQ0h7nwzPeqg44L2
dsaR+94X1WOY0g==
-----END CERTIFICATE-----
Generated at Fri May 17 20:11:39 2024 by rpki-client on console-ams.rpki-client.org