Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: JDSHnBa4NiVVnbKUgaH+fmBdQBXUJnhMOg90Zu+JF4c=
Subject key identifier: 36:8F:6A:88:C7:4F:A0:5C:C0:D3:13:26:A6:0E:A0:E1:DE:4F:7A:82
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 0193587886898B669B3F497DBBF8308E798B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 0A2F
Signing time: Sat 23 Nov 2024 10:01:54 +0000
Manifest this update: Sat 23 Nov 2024 10:01:54 +0000
Manifest next update: Sun 24 Nov 2024 10:01:54 +0000
Files and hashes: 1: 3gLtSDLEe6rtZLYjTGS-p898gGg.roa (hash: MNsiVtjxGnS+4S66O4z33HHRr03ktwKBRe32ALWdmQc=)
2: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: 4cHyEbCZM+MsYZPeP8ko53vslSvhpHJ1LLgqmSrbsdA=)
3: X8irpd-3ZTCbCG81SguCHGWGATA.roa (hash: hZdQAoVG134VXboM+RRiU+3eX0GUHo+5pVXxqIQ1zrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:86:89:8b:66:9b:3f:49:7d:bb:f8:30:8e:79:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Nov 23 10:01:54 2024 GMT
Not After : Nov 24 10:01:54 2024 GMT
Subject: CN=368f6a88c74fa05cc0d31326a60ea0e1de4f7a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:a3:dd:0f:0e:00:8e:8b:6b:94:b4:c0:7e:
46:9d:af:04:27:fc:ed:1d:35:be:52:92:4b:a0:d2:
10:88:e8:4f:57:35:5b:eb:64:24:a1:93:d6:71:a9:
94:42:8e:10:ca:b4:9b:8a:d2:5b:42:81:1d:81:a3:
89:11:62:de:e2:fb:cb:5e:f0:21:2c:ba:33:8f:05:
0e:48:9e:3f:04:15:43:d5:11:3f:5e:36:db:21:00:
60:85:00:7f:40:41:9b:df:34:b4:20:f8:e4:1f:15:
26:da:35:d1:b1:db:fe:21:10:cc:f9:81:db:fd:7d:
51:31:7d:89:88:4b:46:67:f5:6f:1b:bf:19:ed:71:
4d:1c:a6:05:19:0d:9d:be:31:81:be:00:2d:cb:a3:
1a:b0:64:72:4f:de:7d:f1:da:d2:a0:d4:32:46:01:
7d:99:95:a4:0d:ce:ff:ca:f2:10:66:b5:a5:47:8c:
98:2c:d4:85:d4:57:8d:df:1b:aa:db:c2:f4:79:a5:
b5:4a:a2:21:23:09:52:b6:40:86:85:e2:f2:f7:d1:
d1:25:30:c4:8a:6b:a3:a0:69:a0:f0:27:ba:df:9d:
97:4e:f1:4c:b8:32:3e:2e:58:d4:67:04:a8:76:00:
7b:f2:4e:73:6a:78:1c:21:6a:77:f6:4a:9d:c9:47:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8F:6A:88:C7:4F:A0:5C:C0:D3:13:26:A6:0E:A0:E1:DE:4F:7A:82
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:98:b6:29:76:5d:0b:c9:df:ab:25:6d:52:c4:3d:c0:0f:8b:
64:cc:02:f1:23:34:2e:10:be:48:de:bb:8d:15:b4:a2:91:7d:
47:7f:97:de:15:54:56:10:5a:78:bf:a7:d2:a3:cb:d0:f7:2c:
3f:c9:e5:6d:e6:81:ee:db:ee:de:9c:92:b8:a1:48:ba:98:78:
2b:96:41:a1:62:b5:a9:d3:f1:19:ea:10:90:4c:c9:50:74:e3:
fb:f5:16:86:e7:65:dd:31:01:78:01:78:1c:7d:a8:92:b2:53:
5b:e2:cb:f3:f1:3d:bc:a5:a6:29:b2:c6:8a:b3:24:50:4d:92:
eb:77:c0:29:8e:23:a0:53:ee:68:b6:b0:93:a4:ed:81:ad:52:
c7:e5:45:bf:df:51:26:f8:5e:72:4f:2a:10:ed:f5:9f:3a:31:
3e:6c:16:46:c6:bb:76:cc:89:88:c0:d5:17:19:13:2e:48:ad:
a7:f5:95:5f:bd:a3:4c:81:41:22:26:07:c4:3d:2a:83:22:f2:
df:f3:b5:ce:4c:6f:e2:21:3a:e8:d4:24:f7:44:06:e4:9a:d1:
7d:75:f3:73:87:8c:b2:10:f8:81:e7:35:6c:ca:5b:ff:91:21:
63:59:28:c9:86:4a:8f:84:f1:5d:e0:7e:b6:b8:3b:0f:fa:f3:
7d:5b:e7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:23:35 2024 by rpki-client on console-fra.rpki-client.org