Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File: UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier: bSpJZ69ZK+CGdG/JN+JU9sFvMDvcDRIk2zRGza3DHuY=
Subject key identifier: 03:B3:8E:07:B1:2F:05:A0:C8:5A:39:18:61:47:D4:DB:CD:E7:B9:7B
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 01935508230A1B51DCE7B214FB92B06BD736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number: 0E0F
Signing time: Fri 22 Nov 2024 18:00:16 +0000
Manifest this update: Fri 22 Nov 2024 18:00:16 +0000
Manifest next update: Sat 23 Nov 2024 18:00:16 +0000
Files and hashes: 1: TF-gH1k3GqbY7VazwESZmPlGHic.roa (hash: mqA8t8j4eSlofW6uAt45YB5acR7c84sAbFajGONXgus=)
2: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: MgCDjrc9tCtttzd2BLBYC9IsRSq4NQIE5CnykSod8No=)
3: tU3fKU4qBjhb3TWkkosdmgsZEQU.roa (hash: Ye2Q4lBcdzZ4ijNpOQGiL1omVl/0bq1rcQcD3prDLB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:23:0a:1b:51:dc:e7:b2:14:fb:92:b0:6b:d7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Nov 22 18:00:16 2024 GMT
Not After : Nov 23 18:00:16 2024 GMT
Subject: CN=03b38e07b12f05a0c85a39186147d4dbcde7b97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:13:15:89:aa:7d:ed:aa:ad:ce:ee:d2:49:
83:74:ca:d2:7f:cb:77:9c:cd:fa:41:c4:18:fe:9b:
1f:c5:f2:f0:0f:2c:fd:2d:a2:f2:63:24:aa:bb:9a:
fa:58:40:ca:ca:f8:15:be:96:02:4c:09:1b:f0:48:
f8:d1:20:78:4b:f1:77:b5:96:d1:20:c8:92:60:15:
55:29:98:40:41:cc:91:35:5c:2e:fc:fe:10:47:7e:
79:fa:c7:08:3d:cf:28:e0:c1:71:db:78:da:9e:77:
15:bf:1f:aa:f9:45:7a:59:57:51:86:34:be:ac:a6:
84:e7:ec:94:12:e2:6a:80:99:97:0c:66:3e:07:fa:
3a:e6:bd:5a:8e:3f:f7:be:42:01:67:83:a7:c2:be:
78:af:8a:2c:9d:ae:a6:13:e4:0c:2b:29:32:d2:76:
da:c6:fb:d7:b3:31:7a:6c:28:da:3c:01:b5:87:d2:
4f:38:0a:b7:54:c3:f3:e2:78:2c:78:54:df:36:da:
0c:1a:84:f8:42:be:75:bc:ef:25:7f:cd:ce:d8:6e:
bc:af:90:8c:2d:27:65:42:6e:7a:3b:46:94:f2:83:
97:e9:98:29:40:d7:42:9e:7d:a4:d6:cb:34:04:20:
07:db:f6:14:77:41:a8:76:ae:75:c9:62:bc:c6:16:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B3:8E:07:B1:2F:05:A0:C8:5A:39:18:61:47:D4:DB:CD:E7:B9:7B
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6b:fc:49:e7:f0:fe:13:c9:9f:14:4c:28:31:0d:6b:63:77:
1f:63:03:2c:95:ed:f2:89:3e:47:f2:2a:ce:50:df:f6:33:4e:
a0:54:f6:c6:ce:13:29:18:8e:d7:fb:ef:b7:29:e2:03:ef:00:
9f:a4:bd:d3:f8:ec:61:e2:ff:56:21:7e:55:ce:eb:d3:a6:73:
59:68:82:29:aa:ce:5b:9e:16:6d:e9:45:9b:3f:64:12:d5:8d:
25:69:64:e4:30:4b:ae:50:41:49:52:d0:83:e3:fd:1c:3c:63:
1c:53:fa:fb:46:0a:c4:25:1e:23:ef:d9:3e:2a:32:86:44:1c:
92:62:6d:2b:e6:42:3e:56:f4:0c:9e:1c:fc:77:b8:9d:cd:f2:
10:c0:b2:a5:54:95:3b:b6:18:54:89:da:dc:c5:f0:9e:24:21:
6b:1b:25:0b:da:ca:2b:25:de:b4:a0:70:23:23:18:10:f1:8c:
8b:e0:df:ce:f1:b9:fb:73:da:2e:dc:04:36:22:91:a9:63:52:
4b:7b:ee:60:4a:56:b9:f6:62:59:48:0c:56:18:68:81:ce:1c:
a6:fb:6e:e5:1c:98:9f:a3:76:54:ef:a8:18:fc:df:cd:bd:2f:
0e:62:a1:4f:a6:e9:f9:4f:0a:fc:3b:c0:0d:85:85:d8:10:68:
99:51:b8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:44 2024 by rpki-client on console-fra.rpki-client.org