Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
File: XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft (raw, json)
Hash identifier: O/XLI0QU4YFHhZkDtYRh2iAoNd7G8Fsw19j6aJCgmF4=
Subject key identifier: 62:4A:01:5D:CA:9E:B5:E1:9A:93:25:45:34:A7:8F:0D:CF:11:BD:41
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 01901DEBEEC71BA2B1AA0FCCDB7511219A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
Manifest number: 11CC
Signing time: Sat 15 Jun 2024 22:01:59 +0000
Manifest this update: Sat 15 Jun 2024 22:01:59 +0000
Manifest next update: Sun 16 Jun 2024 22:01:59 +0000
Files and hashes: 1: ObMG8ctfqTlV2A84w8ntYNZvqkk.roa (hash: lAbwkF49yu9qct0Sn5MhnQ95ls5yX+oT368n11tqvGk=)
2: XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl (hash: CDUWuarh54Y+sWGkh5oPNSFUxiWGQsoxyBFCWEedjgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:ee:c7:1b:a2:b1:aa:0f:cc:db:75:11:21:9a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Jun 15 22:01:59 2024 GMT
Not After : Jun 16 22:01:59 2024 GMT
Subject: CN=624a015dca9eb5e19a93254534a78f0dcf11bd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:7b:f4:8a:3f:6a:60:40:41:4e:81:79:9d:
dd:ef:d0:b4:20:bd:25:e0:db:65:cd:29:8f:94:df:
b7:c1:02:12:26:42:a8:03:cf:3c:5d:a1:e7:03:a4:
d1:01:47:1b:e4:81:f3:f8:1b:ca:16:64:b8:c8:9b:
71:46:39:01:80:78:5c:ee:91:9f:1a:41:84:38:f7:
44:26:9f:4a:43:10:bc:e0:cd:01:44:52:6d:3c:e8:
0f:9f:2f:31:62:b6:0a:a7:5b:d6:61:ac:ca:e9:82:
5d:c0:da:04:e9:11:a4:be:85:2d:9e:91:01:77:73:
1b:11:88:e2:6a:ec:9f:c7:cd:c6:ca:29:92:17:8e:
d7:f2:12:57:a8:62:be:07:f5:71:c7:93:d0:6c:1b:
6f:8d:f4:5b:c2:47:45:50:17:3f:38:ef:c8:31:0e:
04:df:b9:6f:28:a4:ed:ea:ee:8e:37:35:97:0f:8e:
a5:c1:f9:f5:52:17:fc:b0:15:58:48:2b:c4:19:24:
d9:ce:50:78:f8:ce:27:0e:b9:b6:9c:e9:c7:88:e3:
52:b8:8c:9f:ee:7e:dd:28:db:b4:b6:bd:62:3a:b8:
4d:64:45:24:3a:46:cb:b5:7b:69:e0:8c:da:fa:3b:
31:03:7f:80:d3:ad:7a:1d:80:ea:35:8d:92:5a:ef:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4A:01:5D:CA:9E:B5:E1:9A:93:25:45:34:A7:8F:0D:CF:11:BD:41
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0a:53:bb:a6:0f:b8:79:96:89:d3:30:1e:20:86:de:9f:3e:
b4:d4:04:84:4e:75:fc:b5:d2:78:2b:4b:fe:24:69:21:33:04:
b0:3b:8b:8b:0c:6b:c5:9a:9c:97:4d:1b:43:b2:cf:c5:d7:d5:
a4:8a:0a:02:62:10:62:47:3f:08:d4:25:82:85:50:0c:b4:fb:
4e:55:fa:46:f9:1a:10:96:69:c4:79:06:af:0b:ad:26:c9:f3:
65:83:cc:62:6f:b2:2a:2b:99:0c:e5:2c:0e:aa:9e:6f:2c:83:
35:e8:bf:6c:37:56:7b:26:bb:ea:75:ec:d5:ee:0e:c8:7e:1c:
70:50:7d:e9:1f:7c:a9:75:32:9e:9b:05:41:07:be:b5:38:44:
7a:7b:ee:c0:45:0e:62:bb:63:b1:d0:b2:26:24:43:da:00:19:
f7:20:56:ae:77:bb:a4:d8:1c:2f:27:60:4f:40:4d:8a:4e:23:
22:79:d0:b1:52:73:c2:21:97:ee:e9:16:d7:37:90:1a:10:3e:
32:f2:98:56:15:59:7f:b8:ab:8c:7f:a0:6b:7e:1c:98:72:e5:
6e:05:21:11:04:c4:7f:fe:a8:cc:98:49:c4:98:97:25:f4:34:
d1:28:a8:02:7c:35:4f:a8:af:ce:50:27:a1:06:94:71:83:a8:
a7:1d:3a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:52:16 2024 by rpki-client on console-fra.rpki-client.org