Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: ca5aWSmwu97TSE0mmvsdH4lk4J5CQipJ/ogr56dFFUU=
Subject key identifier: 14:3F:89:6B:25:3B:AF:6A:64:09:D2:A9:A8:85:D9:05:AA:4E:AD:22
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 01901D0F8B065A65F2974B00D94DFAFBE971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 11C6
Signing time: Sat 15 Jun 2024 18:01:16 +0000
Manifest this update: Sat 15 Jun 2024 18:01:16 +0000
Manifest next update: Sun 16 Jun 2024 18:01:16 +0000
Files and hashes: 1: d98Fz-stE9kgCe0dVWTwZguI0Qg.roa (hash: QsOo7VDOl7r+fNK1r87Gr9x21ZhoOpl619/vMHT1ZiM=)
2: mJtJLlV8EmizpA2GCxJKoVPjoYY.roa (hash: Ry5V+A1V4BRKw3xwagFdQ0o7coHlJ3w+5VUzOLki8b8=)
3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: pDolKMqyJjNDdvkxZkqPADMcxW9ipH6bomFi2Q/Xfs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0f:8b:06:5a:65:f2:97:4b:00:d9:4d:fa:fb:e9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jun 15 18:01:16 2024 GMT
Not After : Jun 16 18:01:16 2024 GMT
Subject: CN=143f896b253baf6a6409d2a9a885d905aa4ead22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b5:5d:03:21:51:3d:73:8d:5d:48:21:63:82:
1a:e3:41:16:a0:02:12:80:89:90:7d:23:aa:78:65:
75:1a:f4:e7:a6:76:3f:f3:97:78:6b:ac:1c:f0:fb:
b4:8e:23:ce:82:3c:58:99:af:88:77:28:27:5d:20:
e6:89:6f:d4:75:c8:b3:95:34:6d:fc:dd:d6:53:bf:
9c:fc:fc:e0:5d:37:80:3d:e0:a3:c4:ce:ed:d3:c5:
5f:ea:2d:6d:d5:3d:a7:21:5c:3c:4c:30:5a:22:5e:
a5:57:4a:39:77:46:34:2e:fe:25:6d:e3:27:2e:3a:
82:a6:f9:24:f9:ff:f2:a4:d1:2a:bb:eb:98:35:20:
44:07:6f:61:83:33:d4:ff:75:59:38:62:64:01:ac:
17:d4:eb:0a:b9:ec:07:29:cc:de:b0:91:80:e2:d4:
9d:c1:35:39:e1:bf:cf:fa:21:5c:77:71:5d:47:32:
6c:9a:37:42:fd:78:bb:17:62:97:5e:37:b7:b1:e9:
25:8c:00:4c:ab:61:5e:a6:d4:ce:90:d0:63:9d:43:
e5:2c:cf:6c:d9:51:a1:ee:26:c8:15:bf:08:a9:40:
75:91:0c:30:87:9d:ae:91:cf:82:49:c1:b9:ac:91:
ea:5e:ee:6b:96:02:94:4e:f5:a6:03:75:fa:01:8e:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:89:6B:25:3B:AF:6A:64:09:D2:A9:A8:85:D9:05:AA:4E:AD:22
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:dc:f5:a0:94:2b:38:4e:74:41:f3:22:ca:7e:de:3f:a2:46:
6e:90:14:26:7b:ad:dc:34:18:ea:cd:8b:a9:2a:97:23:3b:23:
55:4c:de:81:8f:78:eb:4d:95:2b:89:72:76:2f:4f:69:d9:f2:
50:ce:db:43:8d:2d:ae:19:e0:97:ec:f7:3c:7d:07:9f:15:8b:
cb:fe:e1:3e:cd:e8:d0:63:bd:a1:69:9d:79:6e:c4:72:4d:5c:
5b:11:cc:89:d7:93:d1:71:e9:6c:2f:22:b2:bf:d5:ef:75:6e:
83:99:40:29:ce:cc:7d:71:77:82:1f:75:09:6c:f4:96:d7:b0:
44:bd:f0:46:db:ce:4d:8a:65:e0:6d:0b:3a:fe:f8:76:d0:dc:
c1:af:86:b8:f3:dc:78:c7:51:f0:3f:9c:64:74:0e:ab:42:ac:
4d:7f:d5:25:2e:46:37:bb:10:ad:dd:6b:ef:9d:c3:4a:ba:1a:
fe:5c:96:5f:0c:71:9c:34:70:fd:81:8a:70:01:95:d3:0c:fe:
13:8e:41:81:3f:5c:08:82:4d:c2:9c:ae:f3:54:ef:99:5a:a5:
19:11:f5:70:40:4d:71:73:d3:6b:87:e1:97:54:8e:eb:ae:ae:
65:8e:e4:cb:7f:d6:b5:d7:79:09:ae:c3:26:84:62:62:41:e6:
08:7a:02:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:17:26 2024 by rpki-client on console-ams.rpki-client.org