Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json)
Hash identifier: 2+Y59beXCeNWPv4w0j8bjxYFLYuccZKJMeOEsdnaAC0=
Subject key identifier: 2B:C8:A1:29:01:38:C0:EF:82:CA:BD:F9:18:16:EF:8C:88:20:08:17
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 01936A0F9004A8619E331150C234B736B2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
Manifest number: 0C13
Signing time: Tue 26 Nov 2024 20:00:24 +0000
Manifest this update: Tue 26 Nov 2024 20:00:24 +0000
Manifest next update: Wed 27 Nov 2024 20:00:24 +0000
Files and hashes: 1: lOgaDEp10Y7iPqokYbNkyKnMwhM.roa (hash: NV5Avut//x3B+N7TChh3hxZ6CWsr/kieg39eU6UShk4=)
2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: vcis+mqYTyU4hVe1HdvorGAbZW5mDH3FV4fDLg2fkKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:0f:90:04:a8:61:9e:33:11:50:c2:34:b7:36:b2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Nov 26 20:00:24 2024 GMT
Not After : Nov 27 20:00:24 2024 GMT
Subject: CN=2bc8a1290138c0ef82cabdf91816ef8c88200817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:3e:d2:dc:e7:e3:1f:32:7d:f9:6b:0b:8b:
d6:87:9a:4e:57:61:aa:77:1a:25:10:80:47:ef:07:
a0:6e:72:10:9f:e8:17:f9:b9:0f:0f:c1:8e:73:28:
95:dc:82:36:bb:5f:ce:0d:99:9e:f1:e0:d1:27:b4:
c4:26:00:aa:7b:9c:14:1f:01:8e:c0:8d:f8:74:31:
3a:64:f4:9e:bc:b9:a6:73:87:de:f6:05:58:93:1e:
5b:76:08:04:78:11:0a:cf:d6:a9:bd:17:aa:36:7c:
b3:33:34:58:18:9d:f5:0a:fc:18:39:2c:cb:0c:79:
69:43:b4:b2:de:34:2a:a2:54:31:b8:43:72:64:00:
05:a2:88:1c:4d:55:b8:1b:d2:4c:4a:7d:85:4d:38:
e7:9b:9b:da:58:bf:77:aa:07:98:a1:50:5f:85:1b:
12:d2:31:89:a5:be:31:a2:8e:5c:9b:04:3f:ee:7b:
8f:4b:26:7d:c3:5c:dc:54:fb:15:e9:31:fb:bc:d4:
2a:24:74:b2:d0:a1:93:d3:6f:11:25:c8:64:ee:f1:
01:17:5f:15:05:a6:a5:53:82:d7:e7:ee:a7:74:b8:
35:ce:97:fa:08:e8:0c:dc:65:f3:00:70:ba:dd:37:
d1:bf:1a:41:ac:2d:2c:2d:0f:fc:87:7d:39:04:72:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:A1:29:01:38:C0:EF:82:CA:BD:F9:18:16:EF:8C:88:20:08:17
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:80:2f:99:fc:ca:cc:23:30:30:41:cd:ca:23:bf:52:1b:d0:
a1:50:a1:da:ce:90:c9:6f:73:34:02:d5:58:97:0f:e3:b8:ef:
a2:6c:91:38:4e:d8:51:2e:4a:75:b3:73:cb:3d:3f:ad:33:e0:
8c:09:cd:a3:3d:45:6d:8e:91:5d:89:68:f8:cf:d5:a9:c4:fe:
bf:af:dd:c5:ba:4f:de:94:6d:5c:a0:8e:9a:a6:9f:69:55:d5:
8a:26:e6:cd:71:27:20:c6:01:67:c9:ff:92:09:61:9a:99:90:
7f:e3:f2:b2:3e:d4:c2:c0:ca:82:63:c1:e6:55:a6:39:55:65:
bd:1f:3a:43:cd:13:18:a4:70:fd:64:53:a5:12:82:b5:f6:59:
f3:64:56:5f:a3:c1:7b:a3:ad:bc:51:fe:4d:5a:97:a7:1a:d8:
b5:c9:91:92:60:7a:de:e3:d2:a3:40:0c:a7:7e:60:5c:36:2b:
8c:00:32:70:f2:4d:84:7d:8f:b9:7f:61:b2:c8:a3:0c:ab:54:
c7:a0:ff:95:ab:7a:65:b4:7e:cd:eb:71:78:8e:dd:bb:55:26:
2b:6e:52:03:29:5c:1e:9d:a4:5f:f7:72:23:cf:85:f9:26:e9:
2a:b2:8b:bc:ea:2c:38:8a:6e:6b:e1:6e:c2:0a:af:ee:14:df:
f0:4f:ab:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:52 2024 by rpki-client on console-fra.rpki-client.org