Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
File: xagvOTbyRO3LYBPhIdUadpDRNZk.mft (raw, json)
Hash identifier: joQbwh7ZcdWpJ25Ny75qJ9seM9lcAQGdy7BHGI01B5c=
Subject key identifier: 9D:07:5E:E4:90:99:28:0A:9F:A2:45:52:69:2A:E4:B5:CC:4B:F2:17
Authority key identifier: C5:A8:2F:39:36:F2:44:ED:CB:60:13:E1:21:D5:1A:76:90:D1:35:99
Certificate issuer: /CN=c5a82f3936f244edcb6013e121d51a7690d13599
Certificate serial: 018FC13A98D067A7B446E5EFE2AB34467A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
Manifest number: 0EE5
Signing time: Tue 28 May 2024 22:03:13 +0000
Manifest this update: Tue 28 May 2024 22:03:13 +0000
Manifest next update: Wed 29 May 2024 22:03:13 +0000
Files and hashes: 1: 6jFqyae1Vr3T5vvLtbSqSwdARfc.roa (hash: gtkxQkEL3buyah6sBdYRakHs55aCVjSS/6hNttKvjtw=)
2: xagvOTbyRO3LYBPhIdUadpDRNZk.crl (hash: Vi7KQlKws8IkChmtTxTxhsuAvHE9DOhORRqLCFiEnLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c1:3a:98:d0:67:a7:b4:46:e5:ef:e2:ab:34:46:7a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a82f3936f244edcb6013e121d51a7690d13599
Validity
Not Before: May 28 22:03:13 2024 GMT
Not After : May 29 22:03:13 2024 GMT
Subject: CN=9d075ee49099280a9fa24552692ae4b5cc4bf217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:70:7c:26:83:0c:f7:a8:6d:f7:86:5d:bf:
ae:dd:80:11:7c:3f:52:39:ab:43:95:3b:13:e1:4a:
a7:6e:53:30:33:73:8e:de:88:fe:33:18:59:5b:96:
d7:51:37:fa:15:7a:11:51:52:0b:61:07:82:be:ba:
31:db:bb:12:40:5d:43:ac:3c:7a:8e:3a:4c:94:ac:
11:1c:ee:21:8a:f7:a2:da:e6:b8:6d:e2:9b:64:3d:
b5:1f:37:1f:51:74:6c:df:63:20:31:bf:b6:f9:2e:
a2:e0:8d:f9:a7:6c:2f:5a:af:b3:46:8b:bb:03:0d:
9c:e4:31:80:e7:e2:06:bb:88:e0:09:ae:26:40:db:
0a:cd:93:b4:2c:f2:e7:86:46:04:cf:0a:ab:16:cc:
b4:4f:f7:7f:9f:93:56:d8:fd:a3:fe:02:62:b5:3b:
7b:95:98:66:a0:39:52:33:18:2e:e8:98:42:53:a7:
16:7a:60:39:c7:2c:d3:4e:fa:07:2f:4b:e4:76:4b:
a4:a5:a9:86:82:1b:bb:44:0a:8b:b8:23:f5:80:ea:
2f:f0:26:08:ca:58:0d:7b:e4:ac:7d:a7:ef:13:1f:
da:6f:5a:fd:71:4f:92:60:03:6e:2f:c9:dd:ee:ca:
1e:20:63:62:de:d1:37:28:b8:af:43:4b:fe:91:e9:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:07:5E:E4:90:99:28:0A:9F:A2:45:52:69:2A:E4:B5:CC:4B:F2:17
X509v3 Authority Key Identifier:
keyid:C5:A8:2F:39:36:F2:44:ED:CB:60:13:E1:21:D5:1A:76:90:D1:35:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:98:82:ca:53:0b:18:23:e0:9d:f6:47:35:c5:59:a1:3e:93:
a2:e6:ec:9d:7e:2a:dc:a7:bf:0f:e4:a0:0a:f9:4d:d7:59:ff:
f8:d2:a1:64:a6:fd:65:ee:7f:ff:59:a1:06:5d:e4:a2:3c:cd:
7b:4e:18:8a:ec:58:7e:80:de:64:22:77:d9:29:51:ae:0f:7f:
c4:23:cf:cd:d7:24:5b:d1:92:1c:95:b8:af:68:cc:ba:72:30:
86:3a:95:d4:82:a4:d4:7a:a1:26:a0:bd:07:96:f5:09:ea:29:
0b:0a:f2:75:28:b9:51:24:f2:cb:f8:51:10:da:cb:b8:64:ab:
91:bb:d1:36:3e:82:35:e4:5a:2b:b2:3a:d2:a1:9f:be:db:f7:
71:3d:3a:12:ea:65:49:33:3b:eb:94:f2:b9:93:10:7a:2c:75:
88:56:8e:8f:c4:91:f2:47:e3:b0:29:59:b2:64:33:0a:2a:07:
a8:05:76:f2:38:cb:e8:b4:14:43:81:9c:63:91:2e:57:ed:33:
92:9a:39:a3:92:9e:c0:14:6a:6a:3b:62:ed:e9:c0:15:4f:64:
1b:ae:2c:8e:42:03:d2:d9:f9:ed:44:3c:a4:fe:1a:d6:03:e6:
a4:9b:66:c9:e4:41:0d:d2:3b:f7:9c:74:e1:f2:98:b3:4a:86:
9d:f8:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 01:51:43 2024 by rpki-client on console-fra.rpki-client.org