Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier: tt5T+KPjRXtwDWYFyQ8lEzyqpEDgMoOLwM1mIAP9QA4=
Subject key identifier: 89:32:B8:D7:BF:EA:0B:98:DF:BB:00:79:45:90:40:A0:12:98:A5:B9
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 019350BFC8815A637FC29F38F09C615DAD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number: 138D
Signing time: Thu 21 Nov 2024 22:02:46 +0000
Manifest this update: Thu 21 Nov 2024 22:02:46 +0000
Manifest next update: Fri 22 Nov 2024 22:02:46 +0000
Files and hashes: 1: 0ZG6b6TNVo5DhfNUl_T7x6pBRo8.roa (hash: V4n/9IlJu6H+rthurkAQAFBm8T2t5GYskf5Ngb0P8zw=)
2: 39867ZyLSFi-eCPM2iwf1Y9YtT0.roa (hash: iaRbInbV94NzGnaRJ6DwrIsErsqMRVuMVJGu0FQK18k=)
3: Bcd64sXxsrhhoBGEsLgOed4DrGo.roa (hash: AHFj3hAMhkjs3fnWLa2ezZKFTiKwQR7g8qqlIskh2f4=)
4: PNy8yuI1fBDv9COc9gESWyVVUuk.roa (hash: a4JGOK2b0ObxFjftfe2Qxg8PnV/FsgxWH+mY4aWX2yA=)
5: _5XZ3UbhyCq4yEylHmrwYIQSTiU.roa (hash: KzE+A3N1TEgVonsq+83sn31X0Ev1s37toQClAGCwONw=)
6: cuXw-wdQy7ClKOiXtJsAUlqBFhQ.roa (hash: pRPAxhwSkPdf89m90G0Oz7e+/dRd8EhHZr9dR7uQdbk=)
7: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: smsctuR3Z1zl5qgfPtGpuYkIZei5g6Opsu2IfhHzpRU=)
8: l8u9x3VFX5Xg0FeH8ILD1SINvpw.roa (hash: J+7DUYbCZAAmeT4Qc+mXxkaSdm1CHQ9oYUSUIcnP79o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:bf:c8:81:5a:63:7f:c2:9f:38:f0:9c:61:5d:ad:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Nov 21 22:02:46 2024 GMT
Not After : Nov 22 22:02:46 2024 GMT
Subject: CN=8932b8d7bfea0b98dfbb0079459040a01298a5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:c2:46:4d:87:23:bb:35:b9:82:cd:82:de:
f9:94:6e:c4:6c:12:95:ef:43:de:2a:46:d4:96:e6:
14:4d:04:d3:0e:8b:50:d8:14:75:c4:15:c6:d2:eb:
8b:84:5c:e0:d7:2b:64:b9:6f:34:7b:9a:42:96:e1:
42:3e:a6:0d:f7:83:4e:b8:2b:3d:89:a3:5c:41:38:
f7:79:5e:0a:34:02:f8:7b:59:e2:e7:fb:28:ad:2f:
4f:f8:5a:86:16:f0:1c:e9:41:eb:55:e5:df:9b:ab:
d6:99:b6:5d:87:81:fc:e3:62:7d:32:53:27:14:b4:
70:c7:aa:c5:02:6d:47:51:51:ab:c3:40:97:23:a1:
1c:f9:d3:e2:55:13:48:e1:eb:bb:23:f5:05:3f:fa:
2c:56:1b:54:12:d9:d9:68:dc:5c:97:14:d9:22:4e:
c7:ce:70:5f:f1:04:e9:c9:c7:b0:17:57:b1:0a:dc:
3b:1a:eb:fd:55:ff:ad:59:57:8c:74:66:f7:9e:96:
df:38:5c:bf:8d:77:b0:6c:ee:0c:58:4e:bd:81:0f:
d1:93:48:43:51:80:81:2b:06:b3:ef:84:5d:f4:dd:
51:99:bd:c2:b4:0e:6c:4d:a8:0f:ce:01:ad:85:5a:
a6:91:e4:62:d7:9c:f5:be:72:5a:5c:ae:39:43:16:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:32:B8:D7:BF:EA:0B:98:DF:BB:00:79:45:90:40:A0:12:98:A5:B9
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a1:ca:27:cc:12:ff:1f:c4:7d:46:9e:e6:6b:00:6b:e6:47:
f8:0f:76:15:82:6a:f7:99:32:f5:c2:0c:c9:34:56:7e:41:4d:
25:bb:15:a2:a9:ed:b3:d9:75:44:49:8e:db:12:6f:4d:dc:d9:
da:47:04:45:3c:32:5a:ca:f0:b9:3d:f6:7b:b6:c4:ac:c9:c8:
50:f0:0c:1a:d3:28:24:84:4f:ec:b0:b7:72:9d:b4:4b:88:50:
02:31:2f:1f:af:fe:a9:4a:e3:0e:8a:6d:9e:d0:0d:3d:3b:bc:
32:59:22:ed:0e:fd:b3:16:8d:8a:e5:9b:c3:7c:76:9c:16:7d:
18:46:48:7b:44:d9:68:0b:2e:07:86:8c:4d:c7:7e:fa:5c:36:
8a:a0:d5:50:fb:b7:ae:97:60:36:19:c5:c2:a8:8d:d5:80:eb:
28:56:3c:36:8c:51:fe:1e:74:54:60:44:cf:82:1e:7a:eb:b3:
01:4f:05:c2:7e:c0:b6:36:14:fb:a2:33:2d:54:9c:d7:c5:82:
3c:da:c8:e0:bd:73:94:92:63:b4:f1:c8:50:fa:1d:3a:98:d4:
6d:e8:fa:85:0c:62:57:da:35:94:98:8b:13:85:85:31:2a:95:
f9:25:0a:2e:37:27:a0:f6:23:7b:01:32:ee:83:25:fb:46:f2:
0e:da:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:47:35 2024 by rpki-client on console-fra.rpki-client.org