Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: 1eRteyeMVH2D3pIiuEK2QEHuf+4+HSzg6Oxd7x8N99Q=
Subject key identifier: 09:22:72:D8:57:8E:EE:15:2D:B8:55:00:8B:8D:DE:09:09:F4:2F:62
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 018F874A774A299E6E4644A0921142449E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 117B
Signing time: Fri 17 May 2024 16:02:35 +0000
Manifest this update: Fri 17 May 2024 16:02:35 +0000
Manifest next update: Sat 18 May 2024 16:02:35 +0000
Files and hashes: 1: DmIh40JTPxA5spWNa2wIVbYBTYE.roa (hash: 2vBf90o+a/4cf71PRYqce5oNbeTXLQNKTeZNlx3ZeLM=)
2: WP5NEDTaICXSTg1RCyhAOrF7lCw.roa (hash: 3qmyZ29I/SdfsPaMGAiCCW1cQHJH/Szwq8DLvdjvN4g=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: IUBgSjtYFlRSxh3rr9mIX3z4wiU9RQycYIVk9m1Y2Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:77:4a:29:9e:6e:46:44:a0:92:11:42:44:9e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: May 17 16:02:35 2024 GMT
Not After : May 18 16:02:35 2024 GMT
Subject: CN=092272d8578eee152db855008b8dde0909f42f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:c8:47:52:dc:b0:f1:b0:5a:21:14:a5:60:
48:3d:c8:12:a4:58:99:f7:06:f1:27:3c:b1:ef:5e:
e5:e3:45:a4:52:55:e0:a3:96:95:d8:03:a5:f4:3a:
91:1c:b3:1c:fc:3a:b8:0a:07:5d:fb:54:61:05:02:
f2:ef:27:26:41:a2:66:31:cb:11:1b:02:f1:be:2f:
9c:ae:b1:16:d0:3a:9d:9a:64:2f:29:7e:ff:b3:34:
6f:c2:da:10:51:bf:ab:e1:0b:91:81:c1:74:ec:4c:
b9:6c:64:e2:72:d8:84:2b:b3:d1:26:81:ed:39:d7:
d3:13:9d:f3:cc:46:7f:0d:f1:b0:10:49:cc:82:43:
ac:45:66:88:56:18:89:4c:f1:4c:4c:7d:35:57:01:
a6:d9:bb:c6:3c:f5:a4:a1:e0:c7:40:d9:80:33:e1:
a4:c8:9f:93:ad:3b:e3:65:bb:32:a0:66:e2:45:86:
06:31:44:a7:a5:5f:b7:71:20:e4:76:fb:ae:cb:7c:
22:16:e7:50:67:55:be:b1:83:00:e5:9d:60:9f:2d:
bf:34:c1:09:bb:fe:f5:81:3f:20:18:e3:95:e4:43:
58:22:33:c1:31:1f:2f:92:13:85:a0:d2:83:ee:5d:
e1:e6:e6:f1:15:2a:03:f0:f2:aa:58:56:08:cd:09:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:22:72:D8:57:8E:EE:15:2D:B8:55:00:8B:8D:DE:09:09:F4:2F:62
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:48:ce:c3:2c:ab:02:43:c0:2b:9c:7c:81:0f:66:5d:01:13:
e4:01:5c:7f:16:8d:74:aa:cb:23:d8:c9:fc:1b:57:7d:f1:c6:
83:a2:d4:ff:58:65:6e:41:2b:0a:a3:92:78:c2:bd:9b:80:00:
7c:94:50:95:6e:e3:88:1f:b5:b4:5a:1f:1e:11:13:df:68:a4:
b0:be:48:78:89:f9:66:5d:59:02:ba:20:3d:4a:08:ad:cd:5f:
29:15:f3:90:7e:57:8b:49:22:2f:6b:05:bd:af:cd:ed:0f:ac:
57:6e:6c:b6:2b:56:85:34:c7:82:fd:e9:4b:eb:0c:dc:12:c9:
37:8a:a1:11:eb:63:91:71:06:a7:ab:6d:7a:cc:9d:d0:a0:2e:
d4:07:90:34:4f:b1:99:3c:02:28:97:ae:db:66:64:76:18:5a:
f6:62:da:3b:81:5e:2a:8d:09:4b:d1:db:10:c5:a7:a3:74:a1:
5d:b4:0b:2e:92:f1:35:3c:43:35:f1:e1:9f:0f:ff:33:99:a0:
a7:fb:85:94:63:23:87:cc:8e:f1:3b:99:01:7b:62:44:a2:b2:
a9:22:c7:ff:e5:30:09:e5:4d:e8:1f:c6:43:dd:de:de:ac:99:
88:2c:e0:73:9c:2e:75:99:aa:f9:d1:55:38:85:c7:d0:d7:b5:
82:ba:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:22:59 2024 by rpki-client on console-fra.rpki-client.org