Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: UIlUxjdeXU2cR5+dsy6lsbOhp6vKWr3oVLxIJlmgA/w=
Subject key identifier: 6D:3C:10:61:3F:A4:65:4E:BB:B6:D9:D3:F3:64:83:86:3D:8E:51:51
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 019041C0D122EF21904C4D9CEE5E9857919F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 04FA
Signing time: Sat 22 Jun 2024 21:01:13 +0000
Manifest this update: Sat 22 Jun 2024 21:01:13 +0000
Manifest next update: Sun 23 Jun 2024 21:01:13 +0000
Files and hashes: 1: DVvfsN-btBZU3BRetUvEV7nj7s8.roa (hash: P94DxJduTWXof5L1Lev9v+3fTkEAd+CnU/B2mfTZgKE=)
2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: 9HZNgdeF0WEvunAqaQaz9fS2la3NQdr3V+5hb/qH698=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:c0:d1:22:ef:21:90:4c:4d:9c:ee:5e:98:57:91:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Jun 22 21:01:13 2024 GMT
Not After : Jun 23 21:01:13 2024 GMT
Subject: CN=6d3c10613fa4654ebbb6d9d3f36483863d8e5151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:90:d0:59:d0:5a:42:33:c5:02:b9:26:38:7e:
79:2d:94:4f:b4:e7:12:1b:97:cf:01:7d:67:f3:d3:
4c:f6:92:6b:52:31:18:65:f0:74:0f:41:7c:ff:e7:
da:7f:5c:37:d0:67:d9:5c:e6:f5:da:7a:3b:8d:6f:
58:1e:21:ba:17:3e:c9:6e:6b:59:a2:1b:fa:d4:5b:
e8:fc:54:6d:91:f7:40:d3:46:bd:71:16:d7:3c:e7:
d7:8f:06:ab:41:1b:17:42:f0:ae:64:96:33:41:b3:
4f:bc:1f:0f:d4:98:10:45:f3:34:55:79:b2:86:d2:
64:56:e0:88:4a:79:8d:9d:b6:2c:2a:ec:f8:a9:8e:
e8:d4:f2:84:3d:b6:10:d6:2d:98:30:30:48:23:c5:
c5:86:0d:4d:a1:71:68:75:cb:d4:49:11:98:d6:c3:
0d:2a:04:b5:a7:14:2a:cf:54:2d:23:93:30:3e:0f:
38:63:32:0b:20:c6:67:8f:43:80:60:f0:0c:aa:6f:
5d:a3:5a:7b:35:27:71:a8:07:17:cf:26:5e:dc:6f:
b4:8b:75:9f:fc:e4:37:80:e2:29:70:27:3a:3b:64:
ae:2c:2d:18:68:4a:50:f7:1c:00:5e:a1:ea:e5:77:
c2:e7:90:78:df:6e:07:6e:85:2b:65:fd:00:be:b0:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3C:10:61:3F:A4:65:4E:BB:B6:D9:D3:F3:64:83:86:3D:8E:51:51
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:09:61:16:cc:aa:fb:69:e7:1e:bc:3c:a9:bf:a1:2a:27:6e:
e9:62:5c:83:a3:21:e1:e5:77:cc:27:67:9e:27:93:cb:9f:38:
bc:2e:4e:71:1d:39:9d:e7:ba:41:50:af:fa:c6:64:3d:50:27:
b7:cd:2a:c3:50:9a:0b:a0:bb:cb:13:61:26:6e:a1:da:fd:d8:
d5:28:86:b5:b6:f0:07:5b:ad:5c:60:27:45:58:38:9d:43:9f:
79:51:04:5d:cb:1d:50:1f:d6:f7:e3:3f:5d:c4:07:11:25:6b:
69:48:dd:3b:bf:ab:95:52:56:81:d0:b6:b2:d8:ba:b0:1c:d5:
e3:9f:e3:78:d8:5f:c3:b5:f5:f9:ce:56:67:85:bd:36:e4:9e:
11:d7:0f:74:36:2f:50:44:f6:bf:52:f1:a8:3f:bd:2f:7c:ed:
e1:78:82:7c:66:62:26:7e:35:77:91:e1:bc:b1:df:fd:5c:f2:
73:2a:f5:75:15:46:67:cb:cb:a3:ab:48:50:3a:18:7f:d2:27:
76:ca:3b:2e:b9:ce:92:e5:91:53:de:c7:9d:f8:3a:a1:3f:c7:
33:15:d5:4b:4d:5f:f8:d2:02:9a:43:e5:8c:8a:0d:02:44:3b:
86:02:52:1f:86:91:fe:2a:87:af:25:35:b7:e2:ec:2f:c2:7d:
a6:f0:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:01:24 2024 by rpki-client on console-fra.rpki-client.org