Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
File: up78qG3qcNPukBgWeMjrMOaRbR0.mft (raw, json)
Hash identifier: Zwr+VbNNPLnYIaFPBqda2JP+ZHa+f/vUOi2Tht7QjPA=
Subject key identifier: 24:49:FC:18:16:6A:EA:30:58:FC:7D:BF:93:C1:DA:67:5B:02:01:65
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial: 018F87B6BC5E76CDD399AF89508F5C3C5BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
Manifest number: 10ED
Signing time: Fri 17 May 2024 18:00:50 +0000
Manifest this update: Fri 17 May 2024 18:00:50 +0000
Manifest next update: Sat 18 May 2024 18:00:50 +0000
Files and hashes: 1: s3M_RuqpyBixiyG244Q87OqgxlE.roa (hash: NLehC2iwIsgbXq7aavGCMayjnTL0aHUHp0Hcs7+TYZA=)
2: up78qG3qcNPukBgWeMjrMOaRbR0.crl (hash: BJQSxT6iy/CAjlBaSLSU8E8kyjfzoKNPnW0cloQKN3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:bc:5e:76:cd:d3:99:af:89:50:8f:5c:3c:5b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Validity
Not Before: May 17 18:00:50 2024 GMT
Not After : May 18 18:00:50 2024 GMT
Subject: CN=2449fc18166aea3058fc7dbf93c1da675b020165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:b8:d4:13:cb:af:91:0a:6d:0b:92:48:c1:
9b:86:45:1b:f1:1a:58:9a:ee:bc:25:f1:f1:8c:a4:
3e:ab:ad:4c:be:11:bf:40:e3:5b:28:51:34:de:7a:
d1:7f:fe:b5:d3:38:b6:19:3c:40:5c:1f:93:49:5a:
8a:c4:2a:c9:f8:64:78:e4:23:94:1c:06:da:18:a6:
7f:ab:bc:20:8f:e7:5e:c8:3a:43:79:9e:da:6f:f9:
5b:8b:ca:89:40:8b:aa:97:86:1e:a3:1e:e8:f5:3d:
ab:5b:2b:ed:41:e7:3d:be:56:ba:00:aa:62:4e:23:
f9:d1:56:2e:da:73:d8:27:90:d0:f2:53:20:08:27:
7e:2a:15:fb:cb:e2:0d:0f:a1:b2:f8:53:53:f2:b4:
ae:b4:75:3f:9b:33:d1:cc:a7:85:36:85:57:6e:f8:
35:dc:95:ff:2f:d2:45:f1:52:44:b6:4f:46:f0:a0:
25:a9:f0:45:de:bb:9a:cf:e5:27:23:e1:6a:0c:76:
a4:44:98:23:87:4e:0b:03:d3:41:c7:a2:5f:0b:0a:
fa:01:16:a9:4d:4d:56:c0:f2:94:9c:78:ab:b1:e2:
9e:de:3e:db:c6:d6:68:ba:79:7f:c9:6c:ab:f4:95:
7a:39:0a:5e:ab:40:6c:2e:ed:08:0e:c3:5f:01:ae:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:49:FC:18:16:6A:EA:30:58:FC:7D:BF:93:C1:DA:67:5B:02:01:65
X509v3 Authority Key Identifier:
keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3b:45:9e:ef:de:d2:eb:21:8e:93:9c:c8:ed:22:52:e1:fc:
1f:30:c4:17:12:b9:fb:54:7a:29:26:b5:9a:98:40:62:10:95:
d9:9c:42:e3:16:ea:8d:97:2d:09:16:58:2a:e6:c7:7c:a1:21:
26:13:77:e8:12:37:29:b0:cd:93:65:a9:e9:e5:77:58:52:78:
d6:5f:12:55:d8:0b:e1:32:be:8b:d7:0f:42:eb:4c:99:67:2b:
2b:57:2f:26:45:5b:e4:d6:5f:49:9d:f2:06:80:e8:d2:d9:24:
1b:fe:08:87:0d:0e:a8:68:27:c5:5a:f0:1d:06:ae:e2:8c:6f:
27:7d:f4:54:b3:df:38:9c:c5:6b:0f:9d:a8:26:1a:6f:c6:fa:
1b:0d:98:bf:aa:ff:cd:c1:52:be:b6:4a:cd:15:fe:65:c3:32:
40:14:0d:c7:29:3e:f3:42:1a:32:00:af:b4:18:05:d4:af:39:
9b:c2:ef:21:b0:a5:d8:ff:59:17:ce:43:ba:15:fa:ee:cd:18:
57:8a:75:e9:db:75:ed:af:f6:82:f4:3e:a0:ae:22:eb:cc:f7:
16:58:34:26:bf:87:71:9b:4d:fb:21:1e:90:24:db:7a:f0:70:
04:b1:d4:de:27:34:63:19:db:fe:49:fe:92:33:d6:7b:91:80:
35:91:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:19 2024 by rpki-client on console-fra.rpki-client.org