Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: YLHtDwex4URfILedn2f6lOZ05LSCmsdVIPgRdcA1w0s=
Subject key identifier: 24:29:32:9F:8A:87:14:B0:F6:57:A8:53:84:5E:FF:FA:FB:2E:52:EE
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019350BE0DBBF15C76F37C0E5EF5EFB736E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 0B9C
Signing time: Thu 21 Nov 2024 22:00:52 +0000
Manifest this update: Thu 21 Nov 2024 22:00:52 +0000
Manifest next update: Fri 22 Nov 2024 22:00:52 +0000
Files and hashes: 1: H-pgjFcQeQzLJxX020KIAa5fs4c.roa (hash: NCo1lK95914RKJd8/j7poyn6ltsC13NWqAmFrixBkRE=)
2: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: JOvEoaLalQOinOIqSjYPcMLDoQOyXkM1Lw5ijXiGJtQ=)
3: u-7Ax-P0RJBUALJR2-rc8YHhafA.roa (hash: r7YW2Yul1b+QD9YX+fbjaIbU53H1SrlgGNRHvv8fZeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:be:0d:bb:f1:5c:76:f3:7c:0e:5e:f5:ef:b7:36:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Nov 21 22:00:52 2024 GMT
Not After : Nov 22 22:00:52 2024 GMT
Subject: CN=2429329f8a8714b0f657a853845efffafb2e52ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:89:d4:c9:c0:a0:4b:68:3c:e4:a8:15:2f:
ff:26:8b:05:b1:db:36:41:3e:17:db:c4:24:4d:47:
5b:0d:c9:f4:96:45:f4:d4:39:ee:b2:0b:d6:c6:59:
ab:38:f9:49:4c:06:9e:12:f4:7c:36:46:5c:33:f2:
94:f0:68:b6:34:90:c4:0d:48:35:df:81:b5:bf:bb:
7d:7d:b4:81:ed:c9:8c:8b:ce:32:31:c0:f6:0e:02:
f1:31:2c:b0:74:9a:04:47:dd:72:2a:25:4f:ed:17:
48:41:52:f4:87:b3:6e:64:ef:f6:ae:b8:48:d7:77:
59:7d:8c:bf:5f:0e:9d:57:49:5c:4a:b2:35:54:1f:
c5:e8:95:59:68:ac:99:b4:08:f9:27:2f:a9:87:d9:
50:15:a6:00:32:2a:ac:6d:ec:b0:aa:73:c3:d8:4a:
26:32:4e:7c:5e:fa:71:92:ee:d4:1d:b7:7d:60:3c:
fe:f3:e6:2e:27:1a:f5:d4:07:2b:f9:83:9b:67:e4:
42:bb:19:8f:28:d9:0e:6b:f6:6c:c6:f3:12:83:cf:
a1:bf:a6:ff:ef:d6:1f:cc:ed:f4:6f:64:02:a2:58:
09:57:c0:53:59:f2:2d:f9:f6:40:3f:00:61:19:0f:
32:1e:48:39:d4:f9:e9:60:4d:f7:3d:9f:9e:ac:08:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:29:32:9F:8A:87:14:B0:F6:57:A8:53:84:5E:FF:FA:FB:2E:52:EE
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5f:af:0f:b4:a2:e0:85:7c:6c:66:1f:66:89:92:6f:10:d9:
65:04:50:4f:1d:87:a4:a9:0b:e9:76:84:46:1f:04:05:51:bc:
9b:af:84:70:d9:d3:67:14:10:a1:15:b4:ee:74:98:cd:3c:8f:
37:b4:a7:7e:5f:99:3a:3a:ef:4a:c7:32:7d:64:63:7a:bc:ec:
2d:83:c4:39:30:78:ee:16:6b:ce:4b:8e:37:e9:ac:f2:3c:34:
0f:7d:b7:ac:6e:2c:ae:19:1e:82:fa:c3:93:52:f7:39:af:b7:
e0:af:bd:f9:71:ca:71:28:d2:83:d1:fe:fb:01:d9:55:0e:63:
3b:75:b1:f8:32:17:2b:b0:40:3f:28:cf:26:9f:6a:0d:2d:7a:
ff:a1:f3:79:bf:b1:8e:09:88:9f:bb:e0:e7:af:a4:c5:b0:8f:
83:67:dc:41:93:8a:e7:fa:89:db:07:71:48:94:f7:67:4a:de:
46:b8:6a:2a:16:db:ec:0b:78:bc:ab:2d:4c:b3:56:9f:80:e4:
ab:ee:4d:38:ce:ef:d0:60:88:16:dd:5a:82:33:11:f9:02:ad:
2d:c6:b5:cf:d0:2f:d5:bc:2c:c4:22:40:87:ee:d7:42:22:d0:
6a:7b:0e:f6:e5:d4:c1:e2:92:e5:16:8c:b5:42:b2:b6:fa:d0:
94:0b:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:53:25 2024 by rpki-client on console-fra.rpki-client.org