Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: LjeI2PYdGtqS8ibBcMZ/DcU4XL6sC2yLf5Ub9D8uJkY=
Subject key identifier: 22:9B:BF:99:6D:89:44:1E:E8:C0:B0:19:DE:FF:62:41:55:3B:3C:98
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 01901DECF9FAE2DC6A12360CF7E4F7BAC585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 11C5
Signing time: Sat 15 Jun 2024 22:03:08 +0000
Manifest this update: Sat 15 Jun 2024 22:03:08 +0000
Manifest next update: Sun 16 Jun 2024 22:03:08 +0000
Files and hashes: 1: U-r6NiUcxOsfE-4goSYM1HYz9tI.roa (hash: ev/z2RUdIk0c1IQG469Zd3Eb0VJTfOmBH8av8WKsEBA=)
2: XrVoIgy1S_BdtsysqVLW8ZiH2kg.roa (hash: e0RQb2qbB2ocnesXsyEtAcqHAjUcNrmK014SX6gal40=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: kF9lt0vv6ZWN1qGfAeU2G2m02v2ycupiUnigKJz8Yyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:f9:fa:e2:dc:6a:12:36:0c:f7:e4:f7:ba:c5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Jun 15 22:03:08 2024 GMT
Not After : Jun 16 22:03:08 2024 GMT
Subject: CN=229bbf996d89441ee8c0b019deff6241553b3c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:f7:43:2f:dd:c8:fa:04:9b:e6:3c:5a:ea:
80:cb:bc:7e:05:3a:ef:0f:2f:39:b8:3c:2c:2b:44:
5c:85:2e:0a:37:fe:06:7f:6d:3c:87:ef:b7:0d:5a:
2a:18:ab:dd:49:9e:bc:4f:98:8e:56:3f:81:eb:36:
8b:bd:98:44:a3:bd:f1:fd:1e:d5:a6:e0:c6:c6:91:
4f:31:bc:5f:1e:b3:37:83:8f:b0:32:68:0d:91:a5:
7f:c8:a9:4d:34:f4:21:88:29:9d:f8:85:b2:d2:fb:
0b:43:ec:44:13:b7:7b:03:23:c7:e4:24:6c:1e:75:
f6:2c:9b:60:36:71:fe:67:30:0f:df:d5:f0:4c:cd:
e4:21:83:58:34:66:c0:29:0b:62:9a:52:af:04:a9:
0b:94:b4:d7:aa:18:c7:fe:62:d7:78:4e:af:f9:d8:
ff:82:3d:9a:0b:6a:13:37:cc:9f:e1:53:0a:50:92:
3f:84:a0:06:51:6f:9f:f0:1e:3b:80:26:a5:40:1c:
68:ae:3d:9c:26:c7:10:b8:1b:fc:97:e8:69:06:b4:
89:65:b0:05:a4:0c:21:ca:b1:7d:4f:47:76:7c:2e:
21:43:52:aa:f6:08:9f:ca:c0:1a:18:07:4c:21:71:
66:1e:32:9d:9d:7f:31:a5:6d:04:0f:8b:3b:60:2f:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9B:BF:99:6D:89:44:1E:E8:C0:B0:19:DE:FF:62:41:55:3B:3C:98
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:91:8c:f7:0d:f8:08:23:66:de:34:be:4b:5c:fd:68:01:b2:
5f:53:5c:d2:8f:7b:41:b3:1f:14:63:9d:4b:d5:e4:00:bb:ba:
73:d5:7f:e2:3a:5c:de:bc:16:b7:d2:fc:4a:ea:cd:05:07:29:
17:3d:25:40:8b:4a:c4:6c:c8:39:e0:09:cb:5d:5b:6f:f4:06:
00:b3:78:a7:42:0f:2f:e2:2c:5c:2e:6d:0d:e4:1a:1f:71:b6:
15:69:b1:38:29:0d:bf:31:cd:bb:d3:75:43:f6:f6:e7:b7:78:
59:03:4d:24:44:9c:3d:1b:c5:7b:27:d1:ee:38:a0:46:d8:f8:
28:5d:43:76:64:11:c7:72:ad:a4:11:40:40:1f:95:2f:06:b6:
a5:1f:10:a9:83:28:3c:a0:14:b7:94:4c:39:05:d5:e5:d4:37:
7e:52:85:53:02:ba:c1:54:6c:1e:bd:19:0b:09:03:35:76:f8:
6f:c9:5e:0a:97:29:66:8c:a2:fb:6b:6b:ae:04:bf:5d:9d:12:
04:d4:46:74:cd:13:91:bf:f9:78:2a:1e:69:45:1f:71:6e:26:
31:ec:b8:94:a8:67:32:ba:0b:d8:f3:97:e8:2b:07:c1:91:c5:
52:1f:ad:e8:cb:9f:39:a6:a7:07:93:ea:bf:aa:9d:86:25:2c:
93:05:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:58:34 2024 by rpki-client on console-fra.rpki-client.org