Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
File: upnU2xLk8LAC9g6SzFM-b4gtFQg.mft (raw, json)
Hash identifier: 4YHLlUlIbLFMJRebCURaBag0m62ykWspqiLvOh99gNA=
Subject key identifier: CE:17:E5:BB:35:9A:40:E7:2E:A3:75:BE:EB:11:97:A0:92:CC:85:69
Authority key identifier: BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
Certificate issuer: /CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Certificate serial: 0193622066AFEF11F9D7C47C486C98B5D5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
Manifest number: 0E7D
Signing time: Mon 25 Nov 2024 07:01:50 +0000
Manifest this update: Mon 25 Nov 2024 07:01:50 +0000
Manifest next update: Tue 26 Nov 2024 07:01:50 +0000
Files and hashes: 1: M70cuy9V9EyYk2nobkeBUfH2s4Y.roa (hash: 3vMZWQKovzfFQ+s2kOXkaCGWvNjeKtwH8XccCZZeBhI=)
2: SJUMWfy-_S2bbNSGO_9IMByJtFE.roa (hash: 3Z6S1BKBJ8DeI9sOxdBvxeOO8w3UVzV2+bJCaabofVE=)
3: upnU2xLk8LAC9g6SzFM-b4gtFQg.crl (hash: qQJUCN1rzMHYQEm/FIRLOV5/YRbifoAiwxmHa4rZBT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:20:66:af:ef:11:f9:d7:c4:7c:48:6c:98:b5:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Validity
Not Before: Nov 25 07:01:50 2024 GMT
Not After : Nov 26 07:01:50 2024 GMT
Subject: CN=ce17e5bb359a40e72ea375beeb1197a092cc8569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:c4:41:5f:36:ee:57:e8:09:34:10:25:60:
9a:c7:a2:7d:74:77:db:ad:ce:ef:ad:49:39:a9:2e:
4b:9e:fe:54:ca:e9:3d:6f:12:f1:86:00:38:e2:67:
c3:b8:b5:cd:4c:e7:41:cf:b4:25:4a:bd:4e:54:74:
23:1e:2c:ac:2f:4e:03:45:74:fb:58:a1:30:3f:40:
4b:21:59:c8:82:01:f4:ba:db:21:8a:b0:dc:a5:82:
39:29:32:8e:f1:aa:13:4c:87:8c:6a:3b:aa:bd:e5:
df:de:55:5c:2c:5a:89:ef:83:ae:21:3d:78:95:66:
b2:7a:84:be:26:5c:42:ab:7b:0a:23:a1:ca:40:ea:
e5:9a:96:7c:7f:cd:75:78:f3:ea:8e:50:dd:58:13:
94:13:f6:42:ac:42:3c:81:8c:fc:a3:a3:6d:6d:18:
1d:9e:02:55:97:22:f4:96:8a:4c:9a:39:df:0f:3e:
8c:a5:17:14:e9:c9:15:fc:6a:5d:4b:2c:ce:11:0f:
a7:73:9d:f9:04:92:9c:29:a0:58:5d:20:1f:2b:86:
75:a3:16:bf:b9:f8:de:4f:4f:44:b9:59:21:40:72:
15:fe:78:3d:fc:87:4b:70:2d:a0:d4:08:3c:dc:9a:
7f:d1:88:ca:a7:a8:17:0e:af:c2:3d:48:48:3e:e2:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:17:E5:BB:35:9A:40:E7:2E:A3:75:BE:EB:11:97:A0:92:CC:85:69
X509v3 Authority Key Identifier:
keyid:BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d5:3b:20:f7:03:49:49:1d:8e:01:73:12:c9:36:7d:eb:8f:
f0:85:0d:48:c2:9f:82:eb:78:d7:8b:b8:89:28:a4:d1:70:7f:
a5:e3:16:7e:b4:f0:fd:5f:eb:f4:eb:07:0a:b9:27:2c:2d:83:
8c:93:af:a1:9f:d9:c6:72:51:73:28:18:47:7c:c7:cc:3a:48:
73:4d:40:59:2d:bc:93:74:8d:5e:24:9e:31:08:35:f1:7d:67:
2c:ff:e6:5f:1b:f8:7b:d0:03:13:f0:91:19:a4:3f:41:af:88:
82:63:12:ec:ad:b0:03:19:8b:27:0e:3a:fb:45:0d:3d:83:2d:
05:4e:ed:18:08:87:c8:12:e6:40:ba:91:46:22:54:db:59:5f:
51:ca:58:8a:89:ca:5d:66:19:ac:aa:aa:c5:3c:93:f9:d5:5b:
28:97:8b:4c:60:fc:2a:5b:27:d8:62:a6:93:19:bd:5b:58:db:
76:0a:b5:03:35:c0:0d:a9:a6:fb:a3:6d:e3:c6:10:7b:48:af:
d3:fc:89:3b:36:d0:bd:ac:4d:24:ef:1f:95:4e:8c:24:e3:f3:
99:c3:04:75:c4:3e:c7:9a:f2:4c:3d:42:29:99:ca:f8:5d:88:
0e:e1:c2:c1:05:e1:b9:54:b6:99:57:06:26:2f:61:e4:55:7d:
39:da:8f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:33:41 2024 by rpki-client on console-fra.rpki-client.org