Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: UlXmzJAesJf/wWCJU6jKZwsO22yVAZwkDx4W+pFbCqA=
Subject key identifier: 2D:74:52:24:34:30:B0:6F:47:5D:1C:5B:E4:64:AF:35:06:91:BD:A2
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 019355AD67716736F2906DB7407978CFE5B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 21:00:47 +0000
Manifest this update: Fri 22 Nov 2024 21:00:47 +0000
Manifest next update: Sat 23 Nov 2024 21:00:47 +0000
Files and hashes: 1: FiD902gb4HEnDOn1H5YMhdgHuyg.roa (hash: T8Vil+6iLaiUjx9lE8uoX0qEWGF4E7/o0j6A3rM0w7o=)
2: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: /1GXK0ijURW1Yf01iOjKzIi90Itkq3aLTFd5KIPwkqE=)
3: pf27Mu5e4KBHk81C6oP5H0R2Hoc.roa (hash: 0XV2puifxK16/1Sf9d984/c2exDhhXzkmX+Uf0cZGbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:67:71:67:36:f2:90:6d:b7:40:79:78:cf:e5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Nov 22 21:00:47 2024 GMT
Not After : Nov 23 21:00:47 2024 GMT
Subject: CN=2d7452243430b06f475d1c5be464af350691bda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:0f:7d:1a:7a:63:97:65:37:56:d5:1e:d6:
88:d7:3c:87:98:06:4f:1e:dc:78:a2:a4:b0:74:ce:
5e:e5:df:85:82:bd:c5:43:4a:bf:8a:2c:00:68:da:
14:dc:ca:8c:b8:f7:0b:dd:68:76:fb:23:1c:d0:26:
b6:0e:77:ac:df:9f:e8:d5:4c:5a:08:c1:cc:b5:ff:
bf:c7:8a:93:a6:df:50:76:c2:50:f6:12:f4:93:af:
01:0a:a0:46:23:06:a4:4a:9a:9c:59:e0:a0:bc:5a:
d2:92:33:75:29:ed:e1:26:1b:25:72:25:60:33:c6:
32:74:fc:ee:48:5b:dd:c8:80:50:d6:eb:4f:40:3c:
a7:c8:39:38:d3:99:37:7b:0c:6a:86:9c:d5:c8:c2:
2c:7d:7a:d7:84:c8:00:e4:e2:1a:01:77:1d:46:89:
00:44:05:42:41:31:64:d8:1d:0a:8b:63:b1:65:4c:
fd:0b:88:e2:45:ea:43:9a:3b:c9:b6:e4:0c:82:f3:
26:05:7f:7d:df:19:46:47:59:01:72:f4:42:61:a9:
a3:07:c7:87:bc:3d:ee:65:83:2c:b4:62:83:fb:8d:
6b:b4:02:6e:c1:dc:d0:a5:8a:c2:41:ef:20:19:44:
f0:c0:98:25:6d:2a:f8:45:84:c8:ef:b1:68:d2:16:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:74:52:24:34:30:B0:6F:47:5D:1C:5B:E4:64:AF:35:06:91:BD:A2
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4d:67:d8:f1:74:1c:50:d8:c9:49:a3:58:9b:25:96:17:6b:
cb:c7:a2:81:f5:0d:16:dc:f5:1d:7c:61:41:06:39:2c:e3:dc:
3b:db:8b:02:e3:03:01:6e:ce:be:e2:da:7b:c5:ef:c5:e4:4f:
ec:bb:d8:25:07:de:ae:e8:5a:f1:71:df:fd:de:f3:6d:69:bb:
84:f6:75:8a:0f:ae:4b:4a:fc:51:f5:db:c2:2e:5f:78:11:c3:
9d:37:36:52:b3:bd:d7:da:0a:58:ee:fa:ee:e2:a2:44:8b:b1:
5b:84:d2:89:1b:03:f3:12:f8:fd:32:73:04:61:3b:02:82:f8:
e5:4d:ab:3f:7f:0e:34:8d:18:12:4f:7d:d6:58:a5:3f:a9:97:
cf:82:8f:10:8f:c7:63:d1:6c:79:38:a7:30:f0:b4:f8:f6:5c:
f8:e6:ea:81:07:0d:da:8b:98:eb:fa:ef:6e:69:1f:b0:c9:2f:
a7:34:6a:97:c2:7f:39:15:32:02:dc:c4:89:3b:ad:58:4e:fd:
2a:0d:1d:52:1d:2c:5a:b1:81:41:22:f3:ab:0b:ce:a3:7a:6a:
40:d2:76:f1:34:a4:d8:6b:34:9b:49:65:f0:13:c0:9c:c9:a6:
fa:92:a1:78:90:5b:c7:2c:c4:57:d1:0c:d6:30:00:32:3f:ac:
62:dc:fc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:39 2024 by rpki-client on console-fra.rpki-client.org