Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: xElx86JsdQozGReEWmy6wMspbcpwvprmomkUeN4VDlM=
Subject key identifier: C1:82:FD:D8:B9:12:D6:5E:4F:DB:DE:BF:C4:88:94:93:8A:29:83:7B
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 0193572E1AF753F0DDDC0ED918A00FD2B579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 0BEF
Signing time: Sat 23 Nov 2024 04:00:59 +0000
Manifest this update: Sat 23 Nov 2024 04:00:59 +0000
Manifest next update: Sun 24 Nov 2024 04:00:59 +0000
Files and hashes: 1: 0C8bj-jMmIPPLk5sDwTD1lgMA90.roa (hash: k5t+dQSBM5Nsb05qX4lsb8dpe+4q11xhSnVkL+JwH5w=)
2: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: jCQkJ438Tfo0nw3CCRLTDfSYaPmHfZeY64MFTBIwKYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2e:1a:f7:53:f0:dd:dc:0e:d9:18:a0:0f:d2:b5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Nov 23 04:00:59 2024 GMT
Not After : Nov 24 04:00:59 2024 GMT
Subject: CN=c182fdd8b912d65e4fdbdebfc48894938a29837b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:d1:62:c2:96:52:74:98:c4:53:a3:f8:9c:
a0:1c:25:77:de:27:4f:4f:2d:15:e2:3d:7f:eb:de:
37:36:cc:cf:60:19:ee:01:8a:e1:7e:22:07:23:af:
d3:51:da:80:5f:13:ab:82:4f:f6:4d:5b:f4:27:1b:
85:8e:b6:0c:47:b5:c9:04:37:fd:88:f3:ca:56:1d:
fd:e4:8b:d8:0a:a9:35:73:7a:68:c7:ee:b1:e5:2b:
13:32:d4:b1:96:5c:9f:e4:36:b1:c0:ee:c7:1c:8d:
e4:68:21:eb:1f:f7:b8:4a:18:21:8b:55:ae:23:63:
e1:3f:30:6b:bf:e7:7c:f5:fc:5f:70:1d:38:b3:30:
36:91:54:7b:3c:e3:8d:9d:54:5f:29:bf:5e:1d:08:
9f:cf:3d:c3:dd:fa:bb:c3:52:72:4c:2f:88:d3:14:
84:1e:55:be:75:59:fd:b4:eb:ba:26:d4:e2:f0:28:
53:0a:a9:4d:dc:63:da:3a:2c:6d:6f:d5:04:31:d9:
ef:42:c9:a2:af:94:b1:34:06:f9:9f:42:4a:85:cf:
1d:26:e5:a5:c6:0d:8d:5a:12:2e:fb:8d:cb:13:74:
c9:06:f6:d2:e1:2f:61:9d:73:9e:ad:29:29:3e:8f:
68:9c:a7:40:bc:bd:9b:9e:eb:74:d6:96:31:e4:38:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:82:FD:D8:B9:12:D6:5E:4F:DB:DE:BF:C4:88:94:93:8A:29:83:7B
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:42:67:db:5f:bf:69:cb:f3:94:a4:a2:1c:4e:ac:ab:6d:f9:
6c:a2:de:ca:45:0d:f6:ad:e0:88:cf:ca:66:67:0b:0a:d3:83:
18:15:45:57:97:20:2c:09:a8:73:04:6a:b9:e5:91:67:5e:e1:
f4:48:d0:45:6a:f6:46:71:0b:b0:95:ec:24:66:85:31:af:04:
3c:83:82:f4:87:71:7a:0c:2d:20:ea:64:bc:e6:9e:18:e0:80:
83:85:93:e9:4b:bc:0f:db:48:b0:17:aa:e9:3d:c4:89:3f:2b:
46:10:a6:90:9d:c0:eb:8e:1e:6b:38:de:a0:dd:7d:ca:8b:57:
95:d4:60:7b:84:74:26:2c:8e:ce:02:c6:68:54:c4:67:7a:cc:
95:51:cb:95:9b:04:00:ee:07:07:b8:63:3e:7a:ad:c1:48:70:
ca:80:03:d8:8a:a5:cf:2d:25:b9:62:ff:86:8a:58:22:b0:58:
74:cc:db:d8:f8:d9:0d:5c:b1:05:28:01:b6:43:c9:9a:ca:28:
8f:49:b2:e8:8b:f2:df:23:80:f4:93:54:a8:e9:8c:17:fb:81:
25:0b:31:11:05:bb:64:f4:ac:7c:94:d5:9e:33:4f:ad:22:08:
d0:0c:92:e0:7e:b4:d6:26:84:e5:56:11:c4:9a:02:4d:03:11:
29:08:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:40 2024 by rpki-client on console-fra.rpki-client.org