Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: TBfI71Oudn5J4BmJ1PWvQup/wU78kq2znlamHSUKLIo=
Subject key identifier: 2B:3D:C8:1E:57:76:CF:B0:C5:60:B6:08:59:A4:3B:FD:9E:29:17:99
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 019358403451F3F6DEB49F525AFD2EE44340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 0F8F
Signing time: Sat 23 Nov 2024 09:00:22 +0000
Manifest this update: Sat 23 Nov 2024 09:00:22 +0000
Manifest next update: Sun 24 Nov 2024 09:00:22 +0000
Files and hashes: 1: BUNNUF5d_H_PDxVWEzOvPPiH5BE.roa (hash: Jc62tYjjJmuso/n6L0Oa3X9duJpF2U13iSVcsuVo6AI=)
2: KemrV_rzgDqQi48vRmS9r2FqCw0.roa (hash: szELDf/K4JIr0D1NuchGLh6ITgM8MuuWyucCCNUvs1A=)
3: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: g6h6uLWEalcUABjGe2Av80XQbYVl8NkSY0AXbb7cYLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:34:51:f3:f6:de:b4:9f:52:5a:fd:2e:e4:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Nov 23 09:00:22 2024 GMT
Not After : Nov 24 09:00:22 2024 GMT
Subject: CN=2b3dc81e5776cfb0c560b60859a43bfd9e291799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:34:14:0b:5b:b9:18:c7:7f:bb:6e:a8:2c:
77:a4:bd:5a:6b:7b:3d:26:d7:6e:fc:f6:11:46:bf:
21:71:d1:a2:1c:c6:ad:f3:65:35:e5:0d:c9:c1:6a:
b6:08:8f:26:fa:4f:5a:63:c9:10:8c:ae:7d:f9:cd:
b4:bf:f6:4b:03:84:d3:62:92:2b:07:89:f1:8f:f0:
26:8c:b4:96:9d:47:00:13:04:4b:7c:99:f4:7c:8a:
05:b3:70:53:9e:e0:00:0a:81:a1:a5:24:3a:92:17:
ce:88:dd:f1:18:69:f8:c8:42:39:40:72:40:60:9c:
a1:8e:bf:d9:04:fe:35:b6:e3:b6:84:47:91:b9:a5:
55:08:0a:d4:e8:00:4d:b0:da:11:29:b4:77:73:16:
54:d0:d3:7b:7e:b9:c7:a1:fb:3c:73:e8:5e:ca:39:
9d:16:cc:67:76:cd:fd:40:35:de:e7:b1:5a:90:d1:
1b:15:d3:12:0d:2c:94:26:27:b5:83:3b:34:e1:f1:
49:4e:d8:3b:6b:d7:5f:1a:eb:13:bc:99:b4:d6:c8:
d4:97:ab:df:6d:ed:2a:19:fb:9b:de:cc:ed:76:fe:
f1:31:35:73:9d:df:ce:f7:99:f1:8c:c2:c5:b3:da:
83:b9:1a:3f:ff:db:03:f7:98:c7:50:2e:fd:b8:f0:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3D:C8:1E:57:76:CF:B0:C5:60:B6:08:59:A4:3B:FD:9E:29:17:99
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8f:ef:ed:41:d3:da:eb:22:bc:58:b1:44:e3:4f:e0:70:f0:
0b:f9:64:f9:ea:8f:d1:08:79:23:59:53:0d:05:43:1c:59:31:
d0:26:9c:d9:25:45:c3:cd:a2:13:e3:09:81:46:6e:26:79:9d:
98:e9:b0:84:40:a0:2b:16:8e:a0:2e:ac:2d:35:d3:ae:0b:16:
53:64:e1:44:6b:cc:0f:3a:14:c3:2b:1f:f5:2b:f4:5c:6c:6a:
8c:c4:d4:f9:2f:28:c3:c4:09:72:5b:5b:1d:30:09:09:72:03:
61:d9:c7:77:b3:b5:b6:c9:04:4a:80:e1:79:00:22:74:af:33:
15:20:94:b1:6b:57:87:d3:d2:25:ec:e5:f5:10:17:12:1b:51:
79:41:46:60:54:66:b1:83:b5:45:35:4f:bf:0f:99:f5:e6:82:
57:17:ef:1e:68:92:d6:c5:e0:ce:7b:31:bd:a2:87:d3:5b:44:
98:28:5c:10:a3:41:90:c6:8e:ef:9e:e5:5e:b6:ee:1c:d5:c5:
61:03:4a:00:d4:98:5c:eb:26:92:e9:40:49:96:19:aa:10:dc:
35:89:cd:51:83:c2:c7:78:14:0b:1e:99:6d:28:c2:05:00:1f:
ef:c3:2e:87:81:41:4d:0c:99:a0:0a:67:83:05:4c:1b:e2:4b:
4d:6b:fe:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:12 2024 by rpki-client on console-fra.rpki-client.org