Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: xePfhAVRcL35Gop7jqSAlAl6hEoK171EScMQMqLX2zc=
Subject key identifier: AE:92:EB:F3:BC:1E:83:1B:DD:8C:71:AF:C4:61:3C:12:18:A8:57:4F
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 018F95DFE4B3B00E169C7FE10298C4FAC54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 1180
Signing time: Mon 20 May 2024 12:00:29 +0000
Manifest this update: Mon 20 May 2024 12:00:29 +0000
Manifest next update: Tue 21 May 2024 12:00:29 +0000
Files and hashes: 1: FiD902gb4HEnDOn1H5YMhdgHuyg.roa (hash: T8Vil+6iLaiUjx9lE8uoX0qEWGF4E7/o0j6A3rM0w7o=)
2: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: i290wKb9cWnG6DvonQ0hgLamU+sH+7T/hu5SnW8B4C8=)
3: pf27Mu5e4KBHk81C6oP5H0R2Hoc.roa (hash: 0XV2puifxK16/1Sf9d984/c2exDhhXzkmX+Uf0cZGbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:df:e4:b3:b0:0e:16:9c:7f:e1:02:98:c4:fa:c5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: May 20 12:00:29 2024 GMT
Not After : May 21 12:00:29 2024 GMT
Subject: CN=ae92ebf3bc1e831bdd8c71afc4613c1218a8574f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:23:eb:46:3d:3c:c1:13:d7:8f:c6:5c:a4:
90:22:0c:78:9d:6c:33:e4:74:b1:cb:23:32:01:5e:
79:8f:4c:8a:1c:c6:17:a1:00:17:97:b6:40:03:69:
3f:9e:1a:4c:3c:1c:e1:ff:1e:86:14:25:bd:a3:37:
e1:fc:04:ad:23:c0:28:f9:12:b4:5d:93:f6:0f:cd:
96:2f:79:ef:6b:e9:bc:0e:00:d5:3e:e9:9e:07:9c:
42:4a:c5:7e:3e:e9:5d:de:41:24:f4:d8:81:78:b0:
db:6e:ec:b6:55:c6:64:bf:40:5a:5b:9f:fa:36:7b:
f1:1b:ed:97:7a:9d:b4:85:cc:2d:01:e1:16:9d:81:
81:92:67:0e:25:f3:b7:03:26:87:62:e1:46:f0:be:
59:7f:29:cd:49:67:dd:90:47:3b:e4:5c:56:39:51:
04:f3:55:57:e2:ea:5d:79:b6:9f:be:9a:11:50:4a:
85:12:62:69:eb:97:9a:80:cb:0f:f9:b2:d4:3b:e4:
6b:fa:5b:82:82:51:f6:a7:7d:c5:13:d3:01:c3:23:
d2:5b:43:d0:36:8e:67:55:3b:ca:03:4e:29:85:ea:
71:f5:36:bc:6b:3f:1c:a9:ab:57:51:68:05:ed:a4:
1c:20:49:db:cb:92:a8:ac:84:d6:5f:be:8b:3d:6e:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:92:EB:F3:BC:1E:83:1B:DD:8C:71:AF:C4:61:3C:12:18:A8:57:4F
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:82:bb:02:d4:28:da:ed:a0:3d:f1:ea:bb:c1:a7:ad:b8:a4:
59:c5:c2:47:88:7e:9c:6e:13:75:93:86:3c:91:a1:2f:7d:a6:
13:5f:07:d9:77:e1:02:7d:22:82:09:ac:c2:a9:1f:4f:d4:2c:
4b:cb:4b:49:4b:d6:d9:e3:46:f4:ea:4d:e9:cc:8b:39:86:a4:
03:1d:9e:85:90:da:89:08:22:e5:c9:57:c7:f1:ec:42:f7:96:
72:ab:ed:bf:79:d9:79:d6:d4:85:17:2e:9f:8a:c8:37:ec:3e:
ad:79:57:78:78:d3:26:73:0d:91:e1:ce:c5:cb:9c:6b:04:aa:
3f:fe:80:5c:24:0b:35:7b:7a:c3:84:ce:f5:50:7c:8d:39:69:
ae:d7:87:23:6f:73:ca:ae:86:6b:6f:d4:3b:e4:07:a6:9d:6d:
62:70:ba:02:e5:2f:62:99:46:b1:46:b9:20:4a:d2:1c:54:88:
33:22:62:00:17:b7:09:ee:e5:5f:e5:38:3b:5b:f9:75:9a:57:
a5:29:fd:d7:7f:94:3e:3c:e8:f4:6c:df:78:58:59:e0:6f:9d:
b9:1a:3f:6e:38:2f:51:04:6a:d1:67:d8:24:7a:a5:4a:10:b3:
13:f2:51:ed:90:69:84:ab:a2:9a:0a:15:68:e6:49:22:8e:fb:
a3:6b:b3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:23:17 2024 by rpki-client on console-fra.rpki-client.org