Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: XnVimeHoZ+mTSpp8V+PhNnAG9dQqiiTuN0sf9IH+GjQ=
Subject key identifier: 3E:CD:8F:56:C1:45:88:91:C1:02:73:2A:A5:79:37:9A:85:C2:73:65
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 01901BFE32E99A6150C0F46AC4ABBAAD04E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 11D7
Signing time: Sat 15 Jun 2024 13:02:42 +0000
Manifest this update: Sat 15 Jun 2024 13:02:42 +0000
Manifest next update: Sun 16 Jun 2024 13:02:42 +0000
Files and hashes: 1: saMpOH0h-a1X6S_qpr0soor6TYs.roa (hash: XxTmGyx921Wi4JYtDBQt+AXuqAoAN1WuijINDGlFMac=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: q5XZFGgn6wentw2b3mLTmI7r21pOhe8lWcWszK5SVNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fe:32:e9:9a:61:50:c0:f4:6a:c4:ab:ba:ad:04:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Jun 15 13:02:42 2024 GMT
Not After : Jun 16 13:02:42 2024 GMT
Subject: CN=3ecd8f56c1458891c102732aa579379a85c27365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:53:84:f3:d4:aa:4e:44:4c:17:da:81:a8:
d0:9b:16:56:0f:05:da:0f:c9:88:15:c0:a5:0b:df:
15:6c:a4:77:0a:77:79:ef:ab:98:fc:f0:1b:e9:ea:
b7:db:d9:0a:00:fc:18:a4:7f:7e:5e:59:68:41:44:
d3:ba:16:06:88:66:08:0c:89:61:17:14:9c:49:53:
16:2a:27:ce:06:78:e6:ab:eb:4b:5e:84:58:8f:67:
85:cb:9b:b7:b8:50:9e:84:d2:28:ef:7a:28:a3:68:
3d:fc:81:12:c6:85:bc:cb:ce:2f:75:95:8c:7e:e5:
88:09:a7:dd:41:81:14:eb:43:5d:f4:e5:a0:99:08:
4d:83:e8:6f:db:33:a3:19:b3:4c:18:c2:1d:81:7b:
0d:cd:4a:8d:f4:29:6c:1a:a2:f8:92:bf:ee:c0:4e:
35:f0:b2:6a:39:41:fb:1a:7e:9d:57:ae:a8:06:4c:
53:2c:60:0a:13:a8:26:5e:f3:bd:77:b2:4f:c3:ab:
c6:20:90:01:f1:c2:2d:38:37:72:09:87:0a:dd:d8:
df:c2:1a:80:58:e7:5c:d2:4f:db:b6:ba:91:df:58:
62:fd:16:c8:1a:f1:96:20:ca:e5:a3:a8:51:a6:17:
29:da:9d:84:3a:46:20:ac:d3:a7:3f:26:04:03:81:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:8F:56:C1:45:88:91:C1:02:73:2A:A5:79:37:9A:85:C2:73:65
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:56:de:38:87:91:f8:22:68:03:81:d4:3c:e1:7c:5d:4f:00:
0f:c9:5e:c5:52:48:58:80:40:80:6a:92:0c:54:6b:dc:f7:d4:
42:cf:89:df:14:a4:67:2d:72:dd:7c:ca:89:4c:f1:85:51:72:
fc:25:d9:14:ff:fa:35:59:2c:b8:2a:66:37:5e:92:c4:34:f0:
f7:c7:7a:17:d2:34:3d:76:af:cb:08:bf:99:7a:e7:e6:3c:95:
b6:60:ee:5c:f9:64:8b:70:d5:b2:21:2b:ce:3e:8b:2d:91:f7:
fb:f5:7a:2f:65:86:01:27:92:0d:52:0f:4f:3d:0b:d0:e4:3d:
b7:29:ae:35:a7:83:6d:d9:46:69:24:6d:22:b0:3a:d0:ab:6d:
5b:fa:f2:9b:dc:7b:70:52:56:18:b6:66:81:25:26:72:42:90:
94:4c:dd:58:9f:3c:83:ed:09:4e:6d:75:a5:ca:b0:f4:8a:0e:
96:1c:58:f0:14:40:3f:d2:25:ff:c8:a5:b0:1e:c9:21:a6:04:
f4:3f:bd:84:a9:0a:1d:54:10:9f:00:d9:dc:a2:30:55:28:27:
c9:53:c2:3a:62:9d:35:95:7f:ed:56:98:64:4c:0a:35:36:4d:
a1:5f:1f:45:46:cf:55:bc:65:19:7f:f1:e5:7b:78:86:a5:a3:
e4:bc:0b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:43:12 2024 by rpki-client on console-fra.rpki-client.org