Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: 74cnvZvLYVKVHxRW18hOaTlCSd4ethjUeT2zYhzT0o8=
Subject key identifier: 02:35:FD:EE:CE:05:3D:EB:E5:B4:77:DD:56:4D:B7:1E:5E:75:79:E0
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 019237A5A3462609F2E9A8968D0CBD1FB84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 12E1
Signing time: Sat 28 Sep 2024 08:00:54 +0000
Manifest this update: Sat 28 Sep 2024 08:00:54 +0000
Manifest next update: Sun 29 Sep 2024 08:00:54 +0000
Files and hashes: 1: X7kMx1kMRS-H2kcOkSFoUc_7enY.roa (hash: U3yCCUszVPVm9LM8wpsO2Pkkyp5Rr9rqKUKakYmvS/Y=)
2: u3neHGntDt95dz05wDP8ysoR2wQ.roa (hash: 4X0IWoouLLAosmMEAqakvpj6XHBAaZQoHM5TKd0N9y8=)
3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: TiQXRuL/YvPkKMegZs39bdIOxrLkkQloGRg8fcupEmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:37:a5:a3:46:26:09:f2:e9:a8:96:8d:0c:bd:1f:b8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Sep 28 08:00:54 2024 GMT
Not After : Sep 29 08:00:54 2024 GMT
Subject: CN=0235fdeece053debe5b477dd564db71e5e7579e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:fe:5c:42:60:58:8c:8f:2b:cd:97:8b:f4:
bd:37:c4:10:86:14:a6:f0:c7:da:10:4e:58:e7:b4:
f7:59:36:2c:cb:ad:75:be:3c:de:c5:97:7b:e0:b4:
af:9d:75:24:bc:e3:ff:21:f0:71:f6:79:0a:89:59:
1c:94:05:89:4b:21:fe:9a:29:f8:af:88:31:59:d3:
ed:7b:12:55:f0:c9:5c:70:bb:93:23:75:04:b6:e2:
1c:da:1d:a0:3a:0d:97:8f:f4:0d:82:23:a0:31:4a:
53:16:8a:f9:7e:37:5d:29:62:64:2c:fd:12:6d:ac:
76:c1:32:40:51:8d:7a:66:58:35:2f:70:0f:82:aa:
2a:db:81:3b:e4:2d:5b:3f:2e:88:b5:db:ae:d8:90:
d0:d6:e5:1d:bb:fa:d8:2d:8f:5b:0a:25:20:fa:77:
50:32:33:21:87:02:bd:db:67:5d:dc:46:92:e8:36:
dc:38:be:9c:7f:3f:cc:9b:ac:8f:bd:89:79:91:53:
a6:10:a3:dd:be:d9:46:21:17:c2:eb:f3:38:2a:af:
d0:80:38:3d:e2:34:bc:ef:32:6f:82:42:27:e7:c6:
b4:1f:53:16:03:a8:98:9d:13:a9:f9:29:58:e8:2f:
68:03:2e:bd:5b:90:62:a7:a8:c0:e7:74:e6:2a:a0:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:35:FD:EE:CE:05:3D:EB:E5:B4:77:DD:56:4D:B7:1E:5E:75:79:E0
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3a:ce:df:10:9c:43:92:e6:7d:d8:24:48:b9:7b:42:39:5c:
64:fd:1a:28:54:55:1a:b1:2d:44:c7:ab:df:76:7b:1d:ef:54:
52:99:2b:04:3e:2a:e0:03:6b:17:e5:1e:13:f4:4a:ba:21:99:
c6:24:3e:3b:08:2e:57:73:b7:53:bb:30:c5:fb:41:77:3c:d7:
74:14:f2:a8:10:77:1a:50:5b:7e:36:e1:23:e3:7a:44:02:59:
bc:7b:ef:a4:c1:c0:57:f7:9c:c3:86:35:a4:f9:76:91:da:e5:
01:90:f4:78:d8:d1:9c:dd:0e:1c:26:6a:e1:42:3b:18:48:ac:
f7:a8:e2:89:2a:78:be:e6:87:fd:6e:a8:a2:8f:6e:3e:b4:41:
e9:58:8f:4b:23:a7:25:66:b7:70:99:a0:90:cb:3d:ec:97:cb:
1f:9f:f4:f3:2f:da:6a:4f:0f:1e:50:a2:45:a0:47:e9:32:b1:
53:19:26:2a:18:8f:1a:da:35:9b:ef:27:e3:d2:4d:91:fc:32:
8f:c5:63:98:4b:4e:d4:7f:13:fd:20:aa:a0:9b:d3:2b:5c:6d:
0c:cf:91:ae:bb:a3:59:e2:a2:22:1b:2c:94:7b:9a:c8:d9:91:
52:fd:54:e4:57:93:60:7c:42:55:2e:29:f3:88:d8:82:fb:72:
d8:c3:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:13:51 2024 by rpki-client on console-fra.rpki-client.org