Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: nukCu8upbiorgXAhhslBujdTw9ElFr+F+Uh8nUlQgOY=
Subject key identifier: 13:64:E9:04:B6:BC:02:67:AD:1C:9B:B7:2C:69:31:94:A8:C7:75:5A
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 018F58EFE7CBFFBF5BD4D4C811275B95DDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 098E
Signing time: Wed 08 May 2024 16:01:08 +0000
Manifest this update: Wed 08 May 2024 16:01:08 +0000
Manifest next update: Thu 09 May 2024 16:01:08 +0000
Files and hashes: 1: H-pgjFcQeQzLJxX020KIAa5fs4c.roa (hash: NCo1lK95914RKJd8/j7poyn6ltsC13NWqAmFrixBkRE=)
2: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: LJYwZ3UqR8DyIMX/GqNYS6vfFqBDlaIolb2N6FPbZSc=)
3: u-7Ax-P0RJBUALJR2-rc8YHhafA.roa (hash: r7YW2Yul1b+QD9YX+fbjaIbU53H1SrlgGNRHvv8fZeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:58:ef:e7:cb:ff:bf:5b:d4:d4:c8:11:27:5b:95:dd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: May 8 16:01:08 2024 GMT
Not After : May 9 16:01:08 2024 GMT
Subject: CN=1364e904b6bc0267ad1c9bb72c693194a8c7755a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:3b:ce:c8:dc:15:89:e7:ee:ac:c6:f2:fb:
98:44:66:0f:71:f7:5e:e9:40:3a:d7:48:40:e7:53:
3b:45:b0:84:c1:07:fa:e5:36:3b:bc:69:10:88:a8:
de:1b:56:81:52:47:84:d8:6c:6e:58:a7:7b:d4:a6:
da:08:40:1a:b0:ec:f0:8d:7a:be:2a:b2:85:6d:d6:
d7:81:86:2e:40:5f:1e:4d:83:22:17:b5:73:c7:e0:
73:16:5f:14:d7:4e:5f:f9:94:10:57:b3:52:8c:4c:
96:ec:bc:57:88:66:f4:da:ec:df:41:17:22:fd:bc:
59:0a:10:a5:d8:e2:14:62:ca:24:5f:73:89:a4:8b:
eb:d8:13:00:ca:38:7b:2a:ac:ff:31:53:2e:5e:8a:
3c:3b:74:b7:31:93:33:05:27:fb:0e:c4:69:c0:55:
10:c5:5c:6b:8c:9a:74:00:0a:9a:34:20:02:ea:ef:
d9:ba:21:c2:e4:9a:c9:95:00:09:7f:cd:7d:a0:b9:
f6:8d:ce:2a:b2:28:ff:d9:8e:cb:a1:f4:0a:36:42:
ec:22:81:3e:a6:91:4a:f4:bc:ec:f2:3d:ae:23:6b:
af:fb:2f:f4:59:25:5f:72:7c:f6:14:9d:4c:da:1d:
12:72:80:42:59:36:80:3c:76:3b:e7:f5:21:96:78:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:64:E9:04:B6:BC:02:67:AD:1C:9B:B7:2C:69:31:94:A8:C7:75:5A
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1e:38:05:b0:35:81:30:f7:33:14:12:2d:8b:a2:96:c1:e5:
31:b8:5f:2f:52:88:90:a5:0a:0c:17:99:32:53:69:ea:fc:e4:
07:8b:9b:69:ff:78:5c:22:8f:37:69:31:94:c4:c9:ea:49:74:
0e:6b:02:a1:e9:36:59:0c:d6:84:e6:26:91:33:17:ce:96:03:
d0:4e:57:09:f1:07:05:81:10:0f:8d:ad:f3:bb:f7:7d:99:92:
8c:71:4f:33:97:9b:39:a7:4b:4e:ae:42:38:11:e0:0c:94:6e:
d2:97:c7:5b:9a:7d:39:f3:1b:26:97:4b:5e:3f:ba:27:b1:74:
ca:2a:14:94:55:77:02:1b:28:d3:fa:78:ec:ca:73:d7:92:da:
de:25:ce:6c:d9:62:64:36:17:a3:eb:1a:67:21:43:d8:14:c2:
1b:08:cc:7c:17:27:f4:9e:d1:e0:c0:57:4b:1b:25:00:eb:ba:
a0:4b:95:a9:77:16:05:00:bb:e2:ef:99:c1:a7:19:de:06:07:
2f:8d:5c:40:8d:d1:de:1c:41:d3:79:be:77:c3:a2:01:41:63:
a2:95:c6:5e:d5:a4:a7:59:30:00:05:6f:22:6e:62:2a:df:48:
bc:0b:81:e2:3b:c0:7d:3f:dc:bf:c4:4a:d5:e6:09:b7:75:0b:
1d:4e:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:47:50 2024 by rpki-client on console-ams.rpki-client.org