Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: NBDxqwbN4xTvonjQ6DNzJ+sqR0QLe4TzjeFbpd67wIk=
Subject key identifier: 13:B9:3A:7B:7A:F8:18:BF:1A:2E:A1:C2:13:EB:C5:BD:74:7B:EB:88
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 01901DECB99ED1079EC3C5F41804C1894C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 0ECE
Signing time: Sat 15 Jun 2024 22:02:51 +0000
Manifest this update: Sat 15 Jun 2024 22:02:51 +0000
Manifest next update: Sun 16 Jun 2024 22:02:51 +0000
Files and hashes: 1: LpKCzSUTISdjMEMcN_78uSHLNYA.roa (hash: rCz3kNaw5t8EdsRPD+lOpqx/ZQ3IkXfBPJxgUSPmsnM=)
2: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: GeGg6sFF+6LbpPDubmM5MFE68NGLih/iSJpJvlgPnuQ=)
3: wGFkrHDcrAGgGYj_3_M1rspDbEk.roa (hash: hVn7CQxG3WI0sTMTo9g6HAzbB/pBLkCtH6MUYxgzy+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:b9:9e:d1:07:9e:c3:c5:f4:18:04:c1:89:4c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Jun 15 22:02:51 2024 GMT
Not After : Jun 16 22:02:51 2024 GMT
Subject: CN=13b93a7b7af818bf1a2ea1c213ebc5bd747beb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:cf:f3:a9:4b:d5:21:4b:2c:ea:c5:10:07:
a9:24:8e:be:85:e3:e0:84:9a:ba:a7:1d:fe:c5:a0:
87:f5:35:51:98:71:56:52:a4:dd:05:1c:5a:06:b7:
53:8e:83:8e:24:db:66:ef:fa:07:aa:c5:0b:4c:01:
91:d9:ff:20:5d:52:19:93:e4:9c:4d:83:89:c6:bf:
fd:ac:e3:5d:4c:1a:17:44:1a:6b:4c:74:a2:bc:94:
f1:86:57:7e:b9:ba:84:12:55:44:0a:bb:ed:c8:a2:
d8:de:1d:34:0e:48:b6:2f:2b:0f:c0:b9:4b:12:82:
3a:ee:50:2b:da:00:82:ec:f8:fa:24:f3:2e:58:d6:
cf:e8:20:53:a7:0f:cb:ee:eb:78:ef:4b:02:61:47:
09:70:c7:f6:38:7c:27:01:0f:e5:22:cc:51:a9:a6:
f6:6f:cd:ac:06:c7:69:e0:96:74:c9:3b:14:30:34:
88:ac:06:67:3a:33:a8:e7:8d:68:8b:40:bb:7c:27:
a5:48:af:9a:9d:70:4c:e9:f1:b4:91:20:de:82:08:
f2:f9:68:2d:a7:06:06:91:0a:da:5a:3e:e3:a3:05:
03:e3:5a:ef:29:da:2d:54:23:7f:09:70:e0:d6:15:
94:a6:c0:1b:d6:4a:57:79:32:ac:f6:0f:b4:f5:0a:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:3A:7B:7A:F8:18:BF:1A:2E:A1:C2:13:EB:C5:BD:74:7B:EB:88
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a2:2c:07:df:f9:dd:f7:ff:47:32:f9:8e:dc:2f:7f:4a:30:
dd:45:e2:4d:b2:7e:9c:93:63:e9:49:7c:dd:b8:56:ba:52:ab:
46:2a:ed:37:c1:af:4a:7b:7e:14:31:4b:a9:9f:63:17:25:71:
c4:0d:d5:ac:62:4a:31:9d:4c:64:20:a8:df:fc:a7:c8:e5:f9:
79:b3:f8:7c:1a:51:77:9b:57:9f:bc:02:ed:56:16:6c:c1:a3:
42:72:97:32:15:d7:ae:57:f0:d1:e3:e6:e1:02:66:29:b4:cc:
35:cf:d3:d8:06:d5:de:13:8b:74:de:3b:24:08:bb:91:f5:70:
e8:b3:87:2d:29:67:aa:1b:17:9d:59:67:20:87:b4:4a:31:7b:
33:a9:7f:93:0a:32:df:59:94:a8:f8:bd:43:83:6a:1f:2b:cf:
09:45:3a:7c:63:8d:4c:d0:c4:0b:e6:97:26:88:ab:c5:62:1d:
3f:13:59:e7:22:8f:d6:e2:b7:bd:65:ad:9b:60:b4:22:9e:7c:
6f:c2:2f:6f:0b:e5:2f:8e:cf:80:a2:a5:54:ec:fa:9e:ae:d8:
6e:2b:fd:a5:b0:e7:1f:36:a9:69:7e:2b:1c:19:95:9a:02:45:
8c:17:e0:45:1c:31:75:b2:4d:a9:a6:6f:bc:4b:d6:80:70:d2:
f8:64:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:00:46 2024 by rpki-client on console-fra.rpki-client.org