Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: 1sJUIGRv6Qs8od7ccO68bqa2DJ3jB22c8rX/d25Cjx4=
Subject key identifier: CB:96:8E:38:D2:79:4F:78:06:B5:A3:6C:09:8B:A0:0A:7D:C0:6F:DA
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 01935274DB72BB7B9CC63008E14BB05325F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0734
Signing time: Fri 22 Nov 2024 06:00:10 +0000
Manifest this update: Fri 22 Nov 2024 06:00:10 +0000
Manifest next update: Sat 23 Nov 2024 06:00:10 +0000
Files and hashes: 1: QPCcgVd0TuwiCLQdDDUYjpm9gR8.roa (hash: 88ygav6yIv+VnVu9T1Qv+Gl86jFuakl9TbSKftzDTuU=)
2: n5SCxfBBOSbV-E3gpuGi1J5KtaU.roa (hash: dWbv1GG/jQzKpma9gu6kceYWhj/EHTcaQc0fgb99c/Q=)
3: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: Gq2TwjlV/xSKItM7MYK78IBZ8YdHAOcYo6KGnSwy+jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:74:db:72:bb:7b:9c:c6:30:08:e1:4b:b0:53:25:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Nov 22 06:00:10 2024 GMT
Not After : Nov 23 06:00:10 2024 GMT
Subject: CN=cb968e38d2794f7806b5a36c098ba00a7dc06fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:63:37:cf:89:8e:19:67:79:c8:d6:13:96:
44:8e:81:59:7c:17:20:b4:92:81:82:69:13:0b:0c:
c6:c5:08:dd:7a:ee:2e:f5:b4:de:92:a6:ff:bd:f1:
5f:68:e0:da:53:96:73:19:3c:97:fb:8e:8a:d5:63:
a4:44:89:08:e5:3f:66:39:3b:ad:de:48:08:9b:58:
c5:84:c3:59:54:4b:56:63:95:0a:97:12:5d:69:21:
50:da:03:b6:d2:1e:ee:ea:ba:5f:28:a4:9c:7f:39:
af:f3:13:02:30:74:36:10:1c:32:f8:97:fd:2f:2e:
8a:90:86:36:31:d3:c7:59:29:de:97:04:57:43:c8:
25:b0:7b:5d:34:da:19:7a:6a:18:b5:c0:43:94:f1:
b4:81:ba:88:c9:95:30:b0:05:76:52:5b:ad:40:84:
76:04:41:ba:b3:ca:8a:b7:bb:0c:9c:aa:82:2e:9e:
06:07:d6:9b:ff:2d:69:0c:ad:4f:a8:c6:cc:16:5c:
47:6f:e7:96:ff:e9:c2:f5:2c:be:10:18:ec:52:87:
af:55:a5:a8:73:07:5d:43:c4:d4:bc:c6:78:ee:c1:
14:da:34:24:27:07:f1:b6:e1:f0:c5:0b:50:30:c4:
f1:40:44:75:66:db:14:06:bb:b8:b5:99:4a:13:31:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:96:8E:38:D2:79:4F:78:06:B5:A3:6C:09:8B:A0:0A:7D:C0:6F:DA
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b5:7d:28:ed:62:01:37:1e:98:79:c7:4e:e3:87:3a:1e:84:
85:98:4c:e6:b4:7d:4b:69:38:12:7d:db:7f:dc:37:36:ca:9a:
74:5e:78:c8:c1:b6:0e:48:0d:00:91:68:60:a7:6f:a7:8c:41:
87:71:30:b8:ab:81:e3:77:e4:d6:38:65:b7:e2:cc:5e:5b:de:
73:0c:4f:1d:4a:85:13:9f:68:0c:48:97:35:54:64:d4:81:4c:
d5:78:a1:6b:c7:13:90:a5:af:2a:d7:86:35:4d:17:46:64:16:
53:f6:22:f7:bb:8c:08:42:65:b0:a7:94:cc:b9:f7:87:f1:09:
38:dc:a3:fe:a7:23:66:a9:b4:31:13:bd:71:54:a8:be:f7:50:
87:98:52:17:d1:40:d9:49:27:1f:f2:78:c6:69:96:87:a0:53:
13:91:08:93:75:d6:c2:a1:63:a0:a9:b8:f9:8c:de:07:48:71:
90:e5:27:77:c7:a7:b3:2b:df:23:53:27:11:de:b0:e6:ba:73:
68:97:6d:44:45:ce:a4:c5:aa:71:af:f0:c2:ab:34:b9:fa:3f:
17:5b:76:2b:dd:d5:f3:61:7d:15:85:06:c0:3b:50:9b:d5:cb:
50:31:24:6f:6c:d8:74:26:cf:e2:d8:f0:22:70:04:df:6c:1e:
93:b4:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:58:33 2024 by rpki-client on console-fra.rpki-client.org