Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: nKkRputC4yjtWLnNvgsb0yhiuho55YTQSIk+CF9Uw9g=
Subject key identifier: FC:65:FE:F1:D1:9F:F6:2A:40:25:49:2A:A6:21:C1:41:6A:D5:24:88
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 018F874AD1E6F756E4295B25C5946B14B173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 07F4
Signing time: Fri 17 May 2024 16:02:58 +0000
Manifest this update: Fri 17 May 2024 16:02:58 +0000
Manifest next update: Sat 18 May 2024 16:02:58 +0000
Files and hashes: 1: MQTLc9Yld7HDiDqSCW99EsbLj3M.roa (hash: w9xxEeRXX73/A3qMddJz4zLSoZXM6hzKSTGTeE+Zqiw=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: 2aWQ5p3R3AXsEZTfUPuZ31BecUDXziNFiYwKu1+uHtw=)
3: y5EVzuXhyXUUcU6ZVSjIkOjXGow.roa (hash: sMahEblKOPT6bwL8hM/7cEaTI1p9ziIqD5dMKvMGteE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:d1:e6:f7:56:e4:29:5b:25:c5:94:6b:14:b1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: May 17 16:02:58 2024 GMT
Not After : May 18 16:02:58 2024 GMT
Subject: CN=fc65fef1d19ff62a4025492aa621c1416ad52488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:1a:a6:e2:6b:72:71:8c:c5:c3:7d:7a:47:
5c:e6:66:44:fc:2b:73:08:55:64:ad:bb:d4:5c:21:
f5:1b:59:8c:1b:cb:83:c3:03:58:0b:8e:3f:b1:2e:
55:db:3b:70:46:2e:65:53:6c:93:d1:88:98:5d:24:
c5:12:a8:d8:49:7b:0a:d4:a7:f1:17:29:3c:38:13:
1c:2b:bb:46:4d:f6:57:47:e7:4c:32:b2:0d:60:1a:
0e:c4:13:c3:45:93:05:b5:34:69:33:3a:8a:29:be:
31:e0:21:4c:77:03:e4:37:d7:70:5b:bc:6e:7f:f9:
28:b2:b1:d6:bd:bc:59:ae:da:b5:b2:0e:1c:4c:4c:
d5:c9:4e:ea:e6:20:99:d1:db:70:c1:68:be:86:3e:
36:33:e4:ab:30:ba:ae:74:6f:6e:68:1c:45:68:75:
44:2c:19:78:0e:10:67:12:f6:d9:10:38:3b:9e:ff:
97:d3:e2:14:78:35:90:74:f5:1d:de:bc:e9:88:51:
f7:ad:9d:61:22:42:01:80:0c:47:92:81:3e:6a:49:
17:09:9f:5c:19:2d:15:f1:a5:da:fb:29:de:7e:31:
27:3c:03:6f:4f:be:d3:10:1f:5d:66:fe:25:49:0e:
01:f2:f6:b7:d0:98:51:b7:71:61:c0:aa:54:2a:85:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:65:FE:F1:D1:9F:F6:2A:40:25:49:2A:A6:21:C1:41:6A:D5:24:88
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:29:41:81:63:48:23:8c:be:c0:82:ae:a0:5f:17:b5:ca:45:
c5:ce:4e:1d:23:c0:df:33:c3:db:71:2e:62:73:1c:96:14:31:
39:6e:88:9a:05:c3:8a:87:a4:b1:59:14:d6:a9:9a:7b:a9:29:
1d:db:77:30:f2:49:45:f5:78:fe:86:1f:c2:5a:48:4c:13:f7:
ee:d0:85:16:08:6a:68:04:76:08:54:28:2f:7a:9a:0b:43:7c:
26:ca:ea:00:be:d7:1b:b1:e2:d3:4e:18:ff:04:09:18:e3:1e:
6e:4d:95:0c:d0:bc:a9:a9:05:3f:7c:9a:29:ff:29:d5:ae:1a:
92:a2:e6:8c:41:d7:d2:9c:52:83:ac:df:c4:4b:20:9a:12:06:
fc:3a:c9:76:3b:f1:7b:cc:0d:e0:c7:b3:e8:69:fd:64:42:a5:
bc:9a:ba:f4:1e:4e:92:cf:60:9f:1e:fc:89:ae:90:e7:de:04:
c0:c1:31:69:d8:f2:82:d1:57:ce:76:fe:ff:37:c4:dc:23:68:
23:f3:00:be:f0:d3:37:7b:73:08:ea:1c:1d:53:d2:3c:88:a8:
4e:06:7b:11:3e:25:7e:da:78:c1:d0:e5:9b:5f:01:cf:8d:87:
7d:e6:0b:80:a9:b3:51:95:f3:7f:4f:84:9a:1b:3a:9b:c1:3a:
59:bf:17:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:23:28 2024 by rpki-client on console-fra.rpki-client.org