Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: nDCA3R9o9kBwl8Y+NkPNnB0zVHoI7XMkaCQGEbeHn5Q=
Subject key identifier: 2E:D0:C0:BB:6B:7D:0A:60:65:98:61:4D:99:C8:F7:21:98:D2:02:1B
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 019040AF068EF8CF6F0E4B1792A80EEC26F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 11EA
Signing time: Sat 22 Jun 2024 16:02:10 +0000
Manifest this update: Sat 22 Jun 2024 16:02:10 +0000
Manifest next update: Sun 23 Jun 2024 16:02:10 +0000
Files and hashes: 1: saMpOH0h-a1X6S_qpr0soor6TYs.roa (hash: XxTmGyx921Wi4JYtDBQt+AXuqAoAN1WuijINDGlFMac=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: 2oW0hFY+3+fTXW+j0O0B09MH0XcZbbxtSrZQFnBQ5BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:af:06:8e:f8:cf:6f:0e:4b:17:92:a8:0e:ec:26:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Jun 22 16:02:10 2024 GMT
Not After : Jun 23 16:02:10 2024 GMT
Subject: CN=2ed0c0bb6b7d0a606598614d99c8f72198d2021b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:4d:41:17:d6:11:9f:af:e9:d3:50:ac:c8:
5c:04:d6:02:9d:0e:12:6c:c6:96:d8:39:3b:a7:54:
98:be:a0:ea:d9:d1:d9:0f:6d:3b:f1:d2:c6:22:47:
24:26:36:b9:28:c9:e8:4e:43:b1:41:fc:58:aa:a9:
6e:a2:22:61:51:12:9b:64:6e:3d:5d:e5:58:c2:3f:
62:03:24:d9:df:35:34:e9:83:d7:64:e1:f7:b5:11:
d1:b6:bc:5d:9d:7a:89:95:e1:54:d7:38:01:f4:c3:
c8:bc:2a:ad:21:15:41:0b:1f:40:24:b8:b5:3a:60:
e0:3f:78:56:13:13:9e:88:d6:db:c4:45:b9:95:4b:
c7:db:71:36:98:57:0e:7f:af:4c:71:4f:90:2f:27:
ff:eb:d7:f4:ef:d4:28:d2:7c:5e:15:7a:c3:37:73:
f9:0c:bf:37:fe:d1:ef:c9:67:fe:e7:99:82:70:88:
1a:07:2a:07:38:9f:69:e0:fb:fe:74:72:66:34:2d:
89:97:b5:f7:68:85:16:37:2f:b6:f3:04:83:ce:ff:
56:8d:e8:6a:56:04:4f:fd:3d:d5:fa:22:6d:89:46:
4c:4c:bf:79:49:42:89:01:30:1e:39:76:69:48:e3:
65:d8:8f:3d:40:1d:ba:9d:2e:40:f2:82:a2:a6:36:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D0:C0:BB:6B:7D:0A:60:65:98:61:4D:99:C8:F7:21:98:D2:02:1B
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:50:49:e4:cd:75:95:77:8c:eb:ac:e9:a2:6e:2b:6e:66:97:
b5:f7:5c:fd:2f:f7:37:e1:2f:14:b3:73:97:29:fd:74:8e:86:
4e:01:09:47:66:49:a4:2d:6b:ec:33:85:ea:21:c8:ed:41:b9:
29:6c:d9:72:a6:65:66:aa:d8:21:4c:f3:53:79:cc:fa:b9:0b:
7b:c1:ae:e3:c5:61:27:b3:ed:b8:4e:50:d8:a6:37:7d:5e:6c:
00:c6:35:4b:a5:b3:71:5b:21:dd:3d:2c:81:63:6e:fd:6d:95:
4a:e6:65:7e:4e:df:36:05:14:41:50:29:95:68:be:64:4f:42:
05:90:be:4a:35:0f:6a:56:92:86:a8:1f:34:9d:99:e2:70:24:
28:0b:22:34:6a:90:d5:6d:b2:7d:ec:e1:a7:2b:5a:cb:01:c1:
4b:ee:1d:18:4b:cf:d2:ec:8e:67:02:bd:6d:fd:6b:65:d6:bf:
7d:ee:59:42:ea:4d:a6:9b:cf:c0:31:40:40:c1:12:fa:03:68:
62:fb:93:01:e6:56:aa:ff:8a:bc:b3:0f:63:7c:25:88:6d:cf:
b7:eb:b9:83:7b:ae:fe:fd:27:47:27:6a:51:70:7a:66:0b:17:
a5:28:d3:09:8d:18:93:f6:c4:31:6f:a0:3f:76:a1:31:14:cc:
71:5f:1b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:48:22 2024 by rpki-client on console-fra.rpki-client.org