Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: aQphG1qWSuI8ExPWqNPd9W4NAco/pbchcdYz+IGmGEA=
Subject key identifier: 00:A5:C6:1D:9D:6E:BD:51:EC:BE:BD:0A:AD:8D:9E:D3:59:27:1B:7E
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 019351D07192A6B940C79DDB19DB11146AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 033E
Signing time: Fri 22 Nov 2024 03:00:35 +0000
Manifest this update: Fri 22 Nov 2024 03:00:35 +0000
Manifest next update: Sat 23 Nov 2024 03:00:35 +0000
Files and hashes: 1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: aCcao6zwyhYvRZ78URwtDlomSFCQVjsiTD8dKwWP6dM=)
2: scEFUo9P4o_zQX2XHoPfFMpW_0g.roa (hash: 4/f3TykB+7iWB4UgySWl+aAaVQFXF2kHdQj0gJgQ+1U=)
3: wDA9g9aytMejUZYRvlUJlbh04TQ.roa (hash: yO+F1/bmKeOyJZ1meR15GFXP1pSBoETE19VyL+WpKDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:71:92:a6:b9:40:c7:9d:db:19:db:11:14:6a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Nov 22 03:00:35 2024 GMT
Not After : Nov 23 03:00:35 2024 GMT
Subject: CN=00a5c61d9d6ebd51ecbebd0aad8d9ed359271b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:bb:e0:89:26:da:af:74:e5:55:78:56:70:
fa:8e:fc:1d:4e:d5:e7:1f:95:7c:fd:27:31:83:08:
7c:cc:5c:f4:1f:1a:35:75:c8:2d:5c:de:87:c3:fc:
fc:1d:43:b5:62:f1:b9:3a:8a:e9:cb:3e:8b:76:e6:
f1:53:db:40:34:51:3d:68:a8:6b:ef:e8:68:ea:3a:
be:a4:f9:05:c2:0a:10:b1:72:cc:e5:c4:6f:13:36:
6c:e2:c8:06:fe:f2:1d:3a:9f:c2:85:a1:a4:7d:fd:
35:bc:b1:86:df:bf:bf:a4:6e:94:87:a6:b0:64:3f:
c4:78:4d:b2:00:65:fc:e7:fa:d6:58:90:4a:12:1b:
a8:fe:3c:9a:bc:74:a8:79:b4:e1:ff:63:9f:95:6c:
87:9a:85:8a:6d:bf:e9:8d:33:17:c1:a8:4c:41:6c:
05:21:85:de:64:00:41:a9:41:6e:98:75:d4:6c:8e:
69:1f:cd:b9:0b:6b:fd:d9:66:75:a0:e7:75:29:44:
d7:4e:ff:56:dd:3d:80:1e:72:57:32:e2:e0:8a:c6:
0c:9e:db:f6:87:a8:96:e2:c6:a3:75:ef:84:c0:eb:
e6:56:dd:09:cb:ad:25:fa:a5:af:57:da:ea:42:ed:
4b:37:5a:fd:da:d0:89:c5:48:af:12:e5:66:cf:a0:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:C6:1D:9D:6E:BD:51:EC:BE:BD:0A:AD:8D:9E:D3:59:27:1B:7E
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:be:1d:2c:52:2b:e2:49:eb:cd:f2:3e:4c:81:c1:5f:47:91:
17:80:88:78:8d:de:f0:d7:75:df:51:1c:8a:89:99:7b:89:1d:
e0:01:1c:4c:a8:20:3b:65:82:38:20:41:85:70:ae:b3:86:60:
2a:ff:ee:4f:0a:73:b9:8d:c8:c1:cd:13:fe:0b:b3:4c:75:1c:
25:4d:86:56:2a:b4:6b:10:5c:22:de:e0:3c:01:2c:c9:a1:fe:
06:21:e7:91:40:80:c5:cd:1a:ac:24:1d:f4:39:09:66:34:8a:
2e:dd:d8:22:ce:26:84:14:57:43:74:eb:9b:5b:85:47:77:f4:
79:98:61:5c:67:71:60:5e:91:b6:42:8a:89:f5:7b:17:ed:ad:
5a:0b:03:f0:27:e0:db:2e:f5:33:38:a6:81:c0:44:4d:13:31:
a8:11:e5:bc:26:61:0c:ad:fb:25:38:9d:9c:08:e7:a8:f5:b5:
e8:03:ca:75:94:09:f0:c0:63:6f:ca:e0:35:b7:29:bc:ca:5c:
71:7e:1b:3f:04:84:4e:6e:f1:7f:d0:ae:f2:57:0d:8b:46:fb:
0c:47:08:72:59:b3:d9:d7:57:f3:96:72:d6:6f:ad:ff:f1:af:
9d:91:43:de:a1:91:72:22:a6:24:99:c1:d0:62:ea:6e:9c:d9:
9c:c5:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:03:57 2024 by rpki-client on console-ams.rpki-client.org