Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: 21VR9TqNl6xxuFV554okr05c1WwiDuxZqGcvzQjEKqU=
Subject key identifier: 7E:D0:AA:7C:4C:B0:26:05:DB:1C:8F:77:C3:1E:8C:6C:C6:93:60:B0
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 01935274E8EEA7F9A3E0C970C2B852B20CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 06DB
Signing time: Fri 22 Nov 2024 06:00:13 +0000
Manifest this update: Fri 22 Nov 2024 06:00:13 +0000
Manifest next update: Sat 23 Nov 2024 06:00:13 +0000
Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: +6TEq1O6ROjrE6qDv0/D4spcMTFbXZNxV1LFi4VOxAk=)
2: _U7tppzLS7AVgs3iHGUFFobwaXo.roa (hash: JZkaNJHNhtEx3cTrwApswZY8t6qsStfc7mv+pSWGrWc=)
3: eG_11npt4gRII3ILpOg8PtVpp3o.roa (hash: BsAZWGItNqPvJffkccHKnsu/YQoglINj8yQIaW9IQMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:74:e8:ee:a7:f9:a3:e0:c9:70:c2:b8:52:b2:0c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Nov 22 06:00:13 2024 GMT
Not After : Nov 23 06:00:13 2024 GMT
Subject: CN=7ed0aa7c4cb02605db1c8f77c31e8c6cc69360b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:02:d7:e4:93:21:7c:c3:7e:51:00:87:13:
cc:be:72:72:5a:9a:3e:c9:e9:57:3c:3c:c7:6d:84:
8c:f6:c8:ba:1f:12:14:29:d4:35:36:68:a3:56:74:
b3:17:eb:7e:bd:15:ff:dc:e8:7b:8d:dd:33:63:29:
0f:b6:00:a7:85:da:fd:76:31:29:a3:b9:9d:d1:26:
23:b8:b7:78:17:35:de:e8:39:14:b8:f5:34:3a:4a:
8d:79:90:28:9d:64:64:56:14:5d:78:ae:0e:b9:92:
a1:9a:34:a9:1a:b9:03:36:15:65:9c:3e:28:5a:28:
21:1c:fd:27:17:3e:33:34:6f:d9:b1:5c:7d:06:1d:
45:ba:be:29:76:0a:31:0a:f3:5d:c0:12:42:50:86:
71:fe:04:9b:1b:e4:dd:6b:f0:35:ad:b0:f4:f0:a9:
6b:9f:b9:e4:bb:ef:fb:3a:0e:90:b0:9c:ed:21:cc:
fa:2f:b4:f4:cf:3e:60:05:5d:47:f5:41:eb:c0:fe:
e9:b1:c3:01:6b:a5:88:0d:1c:cb:d4:bb:b2:cf:b1:
60:60:a0:d4:4a:3d:87:ad:08:fb:ac:8c:53:55:6d:
cb:02:d8:66:8c:86:67:74:1e:5b:95:21:83:72:b5:
16:b4:28:5e:ad:7d:3f:72:ae:10:ab:c0:a2:80:91:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D0:AA:7C:4C:B0:26:05:DB:1C:8F:77:C3:1E:8C:6C:C6:93:60:B0
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:81:43:97:71:e1:1b:91:0a:04:fe:1b:fe:bd:2a:d1:ae:dc:
76:ec:50:90:eb:8a:1e:4a:ac:a9:70:a5:90:42:fd:f5:e8:1f:
48:0f:f4:e6:c4:91:4f:22:86:59:dc:23:c1:3e:f1:36:bb:3c:
8d:dd:44:8c:93:31:d0:d4:70:8d:f7:b8:28:93:4e:c6:15:44:
7e:18:5c:cb:9d:13:f0:3f:14:ed:97:ed:68:cb:32:c8:9e:b4:
a3:06:dc:4a:28:27:60:9f:65:62:86:ba:91:05:53:c1:35:bb:
0f:08:92:38:7b:5a:3f:f9:3b:e1:b9:01:e5:90:8e:88:9f:ca:
49:70:16:a2:87:c3:85:40:5d:04:62:c6:29:a5:ec:1f:eb:2a:
60:2c:d1:a3:e2:86:65:39:ac:5a:ee:92:db:a4:ae:c0:51:85:
d4:72:a2:a8:3e:bb:86:f9:87:9c:05:f7:ce:d2:81:53:c0:77:
34:11:2d:17:eb:89:78:5f:5b:32:2d:24:c0:43:0a:02:35:10:
77:64:02:0d:be:e4:ea:e3:61:6e:89:12:c7:29:10:16:7f:d9:
e9:e1:23:84:3d:fd:73:d6:7b:65:50:c3:a0:1a:6a:2d:7a:5b:
81:97:82:89:23:70:58:4f:2b:86:ec:d6:e4:44:15:8d:9b:c7:
7d:0f:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:39 2024 by rpki-client on console-ams.rpki-client.org