Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json)
Hash identifier: H9j1LRVD96kHqdELXwa1Xj/teG4SveHIDF7CJTPVcDU=
Subject key identifier: FE:41:5A:E3:27:3B:AF:26:ED:C8:29:94:EA:70:D0:5E:D9:2C:1E:67
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 01901E589C2C29C7347CA6FFCE9DA1B02958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
Manifest number: 0DE9
Signing time: Sun 16 Jun 2024 00:00:41 +0000
Manifest this update: Sun 16 Jun 2024 00:00:41 +0000
Manifest next update: Mon 17 Jun 2024 00:00:41 +0000
Files and hashes: 1: Hbb1r-_e_K_pK8I8GTtsvdFBVsk.roa (hash: bNVS1tEdxF7FHIjBd2WiiuZkn7LIYsH6KFll5kXITJs=)
2: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: LU0CHpQLonqnnChX8HhXJngl3ocHwAVmLKc+S7Pa5Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:58:9c:2c:29:c7:34:7c:a6:ff:ce:9d:a1:b0:29:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: Jun 16 00:00:41 2024 GMT
Not After : Jun 17 00:00:41 2024 GMT
Subject: CN=fe415ae3273baf26edc82994ea70d05ed92c1e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:09:af:e0:ab:34:f7:38:23:7d:52:38:03:
0a:af:26:b6:2e:c9:e7:14:ae:ad:20:4b:e5:f0:72:
45:b3:7d:a1:c1:0a:0c:8f:a7:a8:76:b3:50:8e:af:
e8:d9:8d:e6:85:64:5c:13:ee:8a:98:85:40:5b:5a:
5f:67:93:81:61:13:ec:89:80:8c:fd:93:3c:8e:da:
fe:b7:a4:c1:a4:58:b9:e5:2a:e6:52:b0:dd:00:09:
61:82:40:83:ee:ae:bf:e5:87:a7:be:f7:0b:04:fb:
1d:b3:d3:f7:8e:b7:a8:b5:f2:59:c1:0e:78:a0:2f:
b9:9b:3d:cf:76:ea:1f:ca:d9:57:5e:50:20:4f:1f:
83:ea:02:ff:55:ae:59:74:86:65:34:a8:1a:fb:53:
69:b4:ce:3c:9d:a3:21:09:e5:9c:d8:d7:d0:18:d0:
ff:0f:4a:6b:f1:22:c9:56:d3:59:4f:b7:f7:7a:7f:
91:3c:bb:72:ac:9d:61:9c:bc:cb:8a:10:c5:d0:25:
77:7c:cf:10:cd:5f:e5:0f:41:b6:1b:71:5e:c8:87:
7a:8e:b9:e6:ab:ad:cf:13:dd:6b:33:e2:f8:82:39:
19:fe:30:cb:53:bc:22:a4:b5:3c:cb:e4:40:22:06:
31:1a:75:a3:0e:c5:d3:a9:ce:bd:d7:4e:21:3f:f2:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:41:5A:E3:27:3B:AF:26:ED:C8:29:94:EA:70:D0:5E:D9:2C:1E:67
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:28:4d:c5:0b:84:ce:53:2c:77:11:29:e6:d7:b4:41:92:29:
d7:c2:1b:35:56:a3:2c:ad:d8:3d:46:5a:83:70:d3:e4:14:7b:
b9:b8:aa:14:c3:8a:53:bd:e2:d9:d4:92:e2:67:db:98:59:89:
ba:f1:9b:89:91:6b:8b:38:8f:b1:2d:5b:23:ff:4f:db:79:ed:
e6:a0:c8:62:3e:69:74:7a:3c:ad:c5:cf:68:03:13:b9:dd:3a:
94:f0:d7:6f:3e:0f:70:37:7e:3e:f3:cc:7e:1b:fa:db:6c:16:
12:b8:d6:eb:40:2a:45:f4:48:83:9c:74:57:46:d0:f4:43:3c:
ce:2c:7e:e6:37:06:f1:05:e3:74:74:2b:75:47:49:4c:a4:52:
51:d5:f5:6e:7e:a9:11:d6:e2:32:89:c4:3a:db:11:e6:3d:55:
de:b0:c6:ba:f0:11:e9:6e:73:d9:e7:e3:70:27:86:04:d0:ed:
1a:5d:93:26:a9:79:9d:c1:6d:83:f4:53:6b:27:15:b7:46:0d:
15:ce:6f:51:7e:24:8f:a2:52:c7:f2:5b:63:03:1b:da:70:6d:
8a:c4:1c:a6:f4:e8:05:fc:d8:9a:8d:14:4f:c2:a4:ae:49:ac:
ac:df:2e:31:2d:19:b7:92:db:d3:86:49:d2:b7:76:0c:14:c7:
cf:5b:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:10:35 2024 by rpki-client on console-fra.rpki-client.org