Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
File: XKn3Xcos07OTU-AwCzC6W2KXais.mft (raw, json)
Hash identifier: IIWAnxjT7rs3dtn6ORXqwyJXFgck4sTuqJ6Jg6domnc=
Subject key identifier: 32:51:F5:F9:3C:2D:D4:FA:7D:F6:A2:29:EF:E8:8A:EC:BE:C5:48:71
Authority key identifier: 5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
Certificate issuer: /CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Certificate serial: 01903D3EBA273C60EDD8F53990FBC90D8FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
Manifest number: 055F
Signing time: Sat 22 Jun 2024 00:00:39 +0000
Manifest this update: Sat 22 Jun 2024 00:00:39 +0000
Manifest next update: Sun 23 Jun 2024 00:00:39 +0000
Files and hashes: 1: 5Wuv6sT0POMLxjpG-AflWaM59AE.roa (hash: ING/Xgw/0ibHP3zoTorQ4cl5Cvj/STIdV89cKghTXYQ=)
2: IrXxOhajWT-NuUW_l48Y-nJW0hg.roa (hash: ua343+djLnkVzfNhOFJz0xZtgdhgqWAHtbgSgYa0eIs=)
3: XKn3Xcos07OTU-AwCzC6W2KXais.crl (hash: mad4wKoh4Yn8Osnncr1BEJHyjEBGtwNJMGYSAdX2T3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3d:3e:ba:27:3c:60:ed:d8:f5:39:90:fb:c9:0d:8f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Validity
Not Before: Jun 22 00:00:39 2024 GMT
Not After : Jun 23 00:00:39 2024 GMT
Subject: CN=3251f5f93c2dd4fa7df6a229efe88aecbec54871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:da:25:aa:e5:d9:99:23:1a:3d:a6:c6:83:
85:48:f4:e4:14:6d:0c:d0:e1:62:85:8d:c9:8a:f5:
40:93:a5:88:9f:4e:1a:31:c9:53:94:2f:7e:d9:5c:
a5:22:1f:73:ef:82:63:3a:f2:14:aa:a0:ed:89:69:
d9:f9:61:b0:cb:4f:83:e9:a0:4d:a6:a1:95:d6:5a:
fb:18:3a:2c:b1:9c:9f:de:ac:98:1e:f8:a1:27:b3:
0e:81:17:7a:79:4a:ff:9b:81:d6:be:35:6d:7b:1a:
6f:86:31:20:07:89:b3:ef:77:4b:9e:58:89:1e:95:
fc:b4:59:77:86:9e:49:57:4c:c1:b4:f4:35:35:4e:
55:f8:fe:71:5e:36:9d:1c:c6:5c:2e:d9:3c:60:83:
b6:ec:b2:0c:b8:b4:33:84:09:6d:e3:95:90:77:c0:
5f:da:95:2f:a8:85:fe:8b:d4:5c:fa:40:33:4f:18:
58:fe:1f:9f:02:fe:e5:e6:d0:b2:7a:91:6d:af:ab:
b4:04:9f:93:05:ee:d1:93:7c:d8:a7:f4:26:cf:77:
f3:49:ac:12:f1:c8:ed:56:cc:6d:27:b8:b8:5c:c1:
fe:4d:f2:96:30:e3:e1:12:77:96:03:33:3b:e8:d9:
48:d0:ba:19:ca:64:2d:3d:73:59:db:34:9e:f1:ce:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:51:F5:F9:3C:2D:D4:FA:7D:F6:A2:29:EF:E8:8A:EC:BE:C5:48:71
X509v3 Authority Key Identifier:
keyid:5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:69:fc:3e:e8:0b:ed:07:74:1a:e0:93:f3:c5:eb:74:b0:ca:
ba:d3:1c:c2:45:c1:19:47:87:a1:37:a8:78:9b:fd:75:34:1d:
d0:3c:ea:bd:06:1f:c9:f4:43:48:23:63:0b:43:47:48:e9:82:
83:1d:4d:b1:c1:73:a5:72:ab:ea:f0:ee:a9:06:be:9f:52:8a:
c5:9c:c6:09:4b:ce:91:21:c1:10:34:52:08:bc:2f:59:60:7d:
a8:e8:b3:4e:21:31:e6:be:dc:2e:5b:8f:ee:c5:d7:b1:87:ff:
d6:a8:52:9e:77:40:9b:b8:da:65:ee:e8:78:24:12:16:88:81:
ec:e6:aa:a4:bf:aa:d1:cd:b0:52:52:02:cd:7c:18:40:a0:99:
66:cf:b8:b6:7e:7b:fd:eb:22:24:a1:d1:d7:b0:f4:aa:14:89:
0a:4f:b6:09:97:dc:a5:b2:f9:88:1c:14:f7:69:58:4b:c3:04:
72:0d:31:41:a9:8f:1a:26:a5:de:6a:76:3f:ac:1f:53:d3:b0:
93:2a:bf:6c:46:c6:98:d0:d2:3e:49:e1:1d:c6:52:45:c1:5b:
69:bb:80:ee:5c:72:d0:98:21:3b:28:87:44:38:6c:57:a6:98:
cb:ee:b2:0f:e7:8a:4c:d2:20:cf:65:a7:3e:0b:54:d2:34:1f:
a7:33:8c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:02:03 2024 by rpki-client on console-ams.rpki-client.org