Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
File: xZKgYJDwFpQNMesbCbrhLZSxlbA.mft (raw, json)
Hash identifier: ctyw0TvI1k4XInHZNcErNivQNx+4/0hcp2GsZu0GSK4=
Subject key identifier: 5F:19:D4:63:DC:38:0D:2E:35:75:E6:7C:DC:C6:0F:8F:DB:AB:14:B8
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 01901E21B72F7364816219ED09AA90EAA19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
Manifest number: A5
Signing time: Sat 15 Jun 2024 23:00:44 +0000
Manifest this update: Sat 15 Jun 2024 23:00:44 +0000
Manifest next update: Sun 16 Jun 2024 23:00:44 +0000
Files and hashes: 1: YHcFrXFelERSArTHrxUQcD6akX4.roa (hash: 33kvu4RPWeZHWYBLV//TE25xX38Sxaz4fLGJh49+nyc=)
2: xZKgYJDwFpQNMesbCbrhLZSxlbA.crl (hash: ANHBwDIo5hvX5O9TOf9IljXg/iuPo7v58iT+uuM+GUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:21:b7:2f:73:64:81:62:19:ed:09:aa:90:ea:a1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: Jun 15 23:00:44 2024 GMT
Not After : Jun 16 23:00:44 2024 GMT
Subject: CN=5f19d463dc380d2e3575e67cdcc60f8fdbab14b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:95:e9:6e:c6:a4:e3:d6:88:8c:70:49:6f:
12:ac:9b:ab:e7:8e:b7:93:48:2b:85:63:7c:94:8a:
05:36:dc:92:12:0d:af:43:7d:8e:63:ce:75:fa:6d:
e5:ae:f9:f8:58:9f:bd:f0:0c:d4:ed:6f:a8:b7:3a:
f5:43:f0:b5:f6:a7:54:c4:89:89:68:52:ca:d2:a1:
00:64:b9:77:6b:5c:12:6d:d6:f4:1d:f3:40:d2:2d:
89:36:f1:a2:30:83:06:3e:eb:6e:76:97:d1:75:3c:
6e:4d:c2:02:80:12:28:af:83:9a:7a:46:72:6e:54:
d5:4f:95:c4:0f:cc:49:46:29:9d:e2:0d:8f:2b:81:
a9:25:f5:42:36:b2:09:73:92:29:dd:99:83:65:22:
4c:b7:8d:68:75:eb:b0:98:21:fa:ba:cf:87:cb:eb:
6f:bb:50:ec:b4:c7:94:d1:90:f1:c7:1c:38:44:2c:
58:31:3f:5c:67:13:e4:55:a8:b1:31:c6:9c:c4:eb:
bb:53:ab:d2:ca:78:1f:8e:6d:f8:c1:7b:75:51:89:
4a:6e:d6:03:f3:bd:8b:aa:66:8a:c1:79:f3:ce:bb:
9f:c3:c8:15:03:da:19:25:04:56:18:06:df:ea:40:
fb:9c:e1:77:a2:50:3f:bd:af:bf:e9:93:fb:f5:6e:
21:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:19:D4:63:DC:38:0D:2E:35:75:E6:7C:DC:C6:0F:8F:DB:AB:14:B8
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d6:fa:af:11:30:e6:0d:76:43:52:cc:10:00:cc:61:43:aa:
b9:cb:a2:6a:60:8c:d3:44:14:ce:e3:df:59:39:94:c1:aa:0d:
7b:6a:72:fd:84:22:ef:7a:8d:a1:7e:bf:a7:d1:92:2e:73:3a:
de:a3:19:e4:d3:d6:57:af:b6:a5:27:d2:20:ca:9a:81:cf:30:
c2:6d:a2:d0:69:2a:37:0f:7b:fc:e0:3a:93:43:ed:02:7a:ba:
6d:c6:92:40:8a:e3:79:dd:94:05:7c:a4:2d:e0:53:06:c9:4e:
b0:08:b8:6f:1b:ee:97:16:a8:d6:f6:a9:59:7c:95:f0:4e:35:
f3:a2:3f:14:9a:bb:31:db:44:2b:ee:7a:39:4c:e0:18:92:cf:
48:ed:d9:5b:f6:fe:c2:6c:b1:e7:28:fe:bd:cd:1b:18:fd:9e:
52:dd:c3:54:f3:c0:ce:fc:51:ce:a4:c0:3b:0f:7f:12:be:39:
1f:c3:16:78:0f:2d:ee:fe:33:6f:20:b0:9a:43:1a:33:d4:03:
87:ad:16:d5:5c:9d:1c:57:28:e5:2a:15:fd:df:6e:90:a5:ce:
06:e6:7d:b8:c7:37:c2:ab:09:d9:b5:60:f3:f4:65:7d:7a:14:
dc:42:bc:40:d6:2b:a9:b8:bf:b0:0f:17:de:47:33:2c:a1:96:
58:34:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:36:08 2024 by rpki-client on console-fra.rpki-client.org