Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: Q6Qp0QY59CIDgDv1cjzrsoPes70hFDGkr4kyW62XAdM=
Subject key identifier: DC:4F:0A:AC:6C:D2:99:69:B8:14:9E:C8:B4:03:BA:99:A6:F8:1C:21
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 019043E5FB04AA8A26F00CFD25C791D3A5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 0FB3
Signing time: Sun 23 Jun 2024 07:01:03 +0000
Manifest this update: Sun 23 Jun 2024 07:01:03 +0000
Manifest next update: Mon 24 Jun 2024 07:01:03 +0000
Files and hashes: 1: WUiXj3GjUmJGJY1w1lU8vl74uiA.roa (hash: i5IT94Om3IUa+kfLYPnU/J7mNiFFo15dzoQLlAFeK1w=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: L0+B4QPjK7l99jWN22TTRgpRhY3RtbhEE9bo1S5HIIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:43:e5:fb:04:aa:8a:26:f0:0c:fd:25:c7:91:d3:a5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Jun 23 07:01:03 2024 GMT
Not After : Jun 24 07:01:03 2024 GMT
Subject: CN=dc4f0aac6cd29969b8149ec8b403ba99a6f81c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7b:a5:9d:da:fb:df:bf:1b:e5:d0:b8:d2:d0:
94:90:a9:26:b5:dc:61:39:4d:6a:ed:50:7c:68:52:
48:60:71:82:bb:cd:b1:94:bc:0a:9b:05:7b:45:bb:
7f:d6:80:e9:44:4e:ec:f0:7f:5d:ed:e3:e8:a3:4d:
37:e9:7b:e5:51:6e:08:dd:d0:4a:11:bd:51:fa:ed:
94:19:64:34:de:a7:5f:80:ec:02:be:ae:ec:86:62:
26:0b:8f:7f:4e:d6:52:71:8a:44:92:53:15:06:aa:
f7:c4:2b:8e:c0:69:bf:fe:12:3f:0f:03:10:78:19:
41:6c:ad:18:33:92:7e:8c:61:80:07:8f:fa:52:9e:
5c:53:83:55:43:9a:15:90:5a:bf:46:33:4e:36:45:
58:44:8f:2b:71:77:77:a4:8d:42:45:69:8b:59:af:
5f:f2:6b:84:96:f8:1f:8d:9d:86:40:c9:87:7c:02:
51:2f:40:91:82:41:d9:72:21:62:fe:43:bb:22:f5:
2d:57:43:26:9b:4c:2d:26:91:86:ae:ef:c8:e6:49:
df:4c:2d:f7:3a:00:81:84:28:77:00:1f:9a:e2:74:
d9:fe:a3:d6:e5:9b:78:38:82:b4:4f:ed:c0:47:92:
70:f0:59:f4:da:cc:54:39:f0:df:20:09:f3:7c:4b:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4F:0A:AC:6C:D2:99:69:B8:14:9E:C8:B4:03:BA:99:A6:F8:1C:21
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:51:ee:9a:0a:8a:14:94:02:d5:a7:b5:f7:cc:ea:c8:88:50:
b4:11:5e:82:33:22:77:4c:15:60:3e:18:96:43:42:d2:76:0d:
a7:29:48:6c:72:45:dd:2f:1a:6d:72:f5:55:60:68:71:4e:e0:
48:96:02:46:62:6e:28:7a:1d:67:bc:d3:9b:70:7e:ab:a0:b6:
df:33:85:ef:2d:c3:2c:d8:d2:70:8a:0f:1a:29:68:87:01:27:
af:a1:d5:bf:07:30:ce:99:2b:87:22:ca:de:14:3b:d2:87:dd:
04:b9:6e:a2:cf:05:24:7b:fa:df:e1:33:6a:54:e2:98:b9:75:
6e:dc:97:3f:51:e1:c2:77:9c:78:b3:b1:2e:0e:36:55:a3:2d:
d6:4c:aa:36:78:5a:e7:87:61:cc:df:f3:5b:c6:ff:46:6d:5c:
43:13:e7:e0:05:e5:b8:e8:70:32:4f:ed:2f:ba:16:c1:be:87:
ab:a5:3e:1b:25:b1:c9:1d:c3:76:f6:d1:d1:e3:93:60:3d:71:
ac:f3:1a:dc:a7:cf:f5:70:80:b1:75:86:a0:61:e6:ff:1e:a8:
38:d2:c0:e1:e6:fe:78:8d:b8:bb:bc:62:56:92:12:a8:e5:02:
dd:24:6c:64:d9:93:7f:e2:69:6f:3f:29:a7:c8:2f:b1:c0:c5:
e7:38:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:53:13 2024 by rpki-client on console-fra.rpki-client.org