Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: YHIaKUqCH0ZEp9p8q4BkWLtdu+egaUf/IOD3bnx9ZYg=
Subject key identifier: 3C:66:19:5E:9D:54:3F:F9:03:07:92:95:A8:7A:28:10:4E:29:73:22
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 019352AE501D20FD38DC099047BA26BD8962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 09FE
Signing time: Fri 22 Nov 2024 07:02:55 +0000
Manifest this update: Fri 22 Nov 2024 07:02:55 +0000
Manifest next update: Sat 23 Nov 2024 07:02:55 +0000
Files and hashes: 1: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: IIQoGcOhJqMEbVklJhc71QzhKP2v2ObqS/UFRII40SA=)
2: Yxl_qY5aR0oA4s22YaL2mBjemsI.roa (hash: RMemwJ4P3feFx1UU8AuxaMSRfyLp+DL5ooIPnqeKfZ4=)
3: hgKJSj37NLk4a7nv9oIV6B5-BrY.roa (hash: FV5Ajroag+TWBWUaLbesk0f02bQ9127lCtyZLxy6n+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ae:50:1d:20:fd:38:dc:09:90:47:ba:26:bd:89:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Nov 22 07:02:55 2024 GMT
Not After : Nov 23 07:02:55 2024 GMT
Subject: CN=3c66195e9d543ff903079295a87a28104e297322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:78:2e:46:bd:77:7a:5d:f9:b7:f0:d6:aa:
f2:03:92:b9:7b:8c:2c:25:4d:eb:b8:4a:cb:2b:cc:
16:43:4c:ac:83:c5:d1:85:68:96:ff:b7:e6:b8:c5:
2e:5b:3f:96:c2:9a:b5:ff:fa:d9:f5:75:e8:d1:30:
9d:35:8a:ef:c9:2e:83:7d:91:9d:77:af:47:d4:3c:
c4:13:b4:f8:28:da:3d:0b:70:c4:39:7f:51:e7:8b:
1f:75:8b:51:6c:2f:38:36:75:3f:f7:84:f6:5e:c5:
3a:29:d3:5a:00:e8:8e:13:09:fe:fc:47:a6:7f:90:
2d:d2:08:ca:27:92:8c:c7:cc:7d:be:87:f5:da:50:
c8:50:0d:7b:82:0b:fb:38:9e:0f:bc:7d:41:5b:18:
05:87:33:0a:69:e0:f3:d3:9d:a8:51:b5:49:03:73:
ea:30:48:3f:8a:3c:a6:32:d5:31:b5:f5:3a:e2:93:
bd:8f:d8:87:e0:fd:52:e9:59:c0:46:92:c2:0e:3d:
68:7f:be:d2:cc:da:9b:2d:9e:f0:fe:63:40:78:b6:
94:84:43:e6:bc:85:86:5d:28:c1:eb:bb:df:d3:48:
1a:5d:99:60:5c:84:0f:05:5f:ea:ee:9f:4c:fb:fa:
26:73:53:8c:00:13:7c:5b:a2:b5:ca:cd:e6:55:09:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:66:19:5E:9D:54:3F:F9:03:07:92:95:A8:7A:28:10:4E:29:73:22
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8b:47:36:e1:03:82:f3:65:8b:58:fd:19:f4:a5:93:fc:c9:
41:b9:62:9c:92:80:0e:93:27:44:e3:df:50:01:6f:0a:90:7d:
fd:d5:be:1e:e7:bc:b9:56:7b:f3:f6:9e:31:d5:58:05:91:1f:
3f:83:34:e9:52:a8:41:bb:53:71:b6:c8:19:f8:26:73:84:7d:
e7:93:57:1c:d5:3f:ef:87:9e:26:9e:bb:b1:ac:3f:2d:2e:da:
93:9e:de:38:a0:4c:83:db:1d:6a:d4:c6:d8:6c:d1:02:93:92:
d2:35:61:07:7b:4f:96:fa:35:4e:61:6e:1f:5a:3a:99:fb:94:
a6:52:f4:79:5c:99:fc:8d:7c:96:9d:f3:60:31:29:c7:ae:5b:
52:b7:0b:64:95:45:4f:88:ee:74:f2:af:4f:2b:56:f5:d2:28:
75:1b:f1:b4:a9:f4:ed:bf:76:d8:db:f4:d7:34:71:47:b7:98:
1a:0f:02:d6:32:42:20:81:d5:38:53:9e:b4:bf:11:c9:6f:b4:
13:3b:41:1a:02:ea:06:55:75:7c:83:57:ee:63:d2:61:23:5b:
f6:13:67:dc:19:f0:d8:6a:93:ad:30:d5:5a:af:6c:bb:2c:af:
25:b6:e9:36:cf:5d:b3:04:f3:6e:df:38:e9:58:d8:fc:12:14:
59:2f:e5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:11:58 2024 by rpki-client on console-ams.rpki-client.org