Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.mft
File: XYO1pn2S_6hHbJMhqnv21KINPas.mft (raw, json)
Hash identifier: HhnlT1AY0Y6ExqOwHPYBdNwlJXnkK4Q+GtPY9lYWW/E=
Subject key identifier: B9:89:60:A9:ED:00:B2:6B:8B:89:3E:8A:4A:6E:DE:4B:6C:88:33:00
Authority key identifier: 5D:83:B5:A6:7D:92:FF:A8:47:6C:93:21:AA:7B:F6:D4:A2:0D:3D:AB
Certificate issuer: /CN=5d83b5a67d92ffa8476c9321aa7bf6d4a20d3dab
Certificate serial: 019369DA739A837374B615A7C9834F46064B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYO1pn2S_6hHbJMhqnv21KINPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.mft
Manifest number: 0D75
Signing time: Tue 26 Nov 2024 19:02:24 +0000
Manifest this update: Tue 26 Nov 2024 19:02:24 +0000
Manifest next update: Wed 27 Nov 2024 19:02:24 +0000
Files and hashes: 1: XYO1pn2S_6hHbJMhqnv21KINPas.crl (hash: DBs4ituVilU84o5n5cdSBEDIxXo3exd1mnIhUZfZauM=)
2: tYjA70ZZuilBmqlOohdOI6JLHKo.roa (hash: PECqLqkHLJE6zy86na+6dfULVx22XsoZe+uQfg0Hx10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYO1pn2S_6hHbJMhqnv21KINPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:73:9a:83:73:74:b6:15:a7:c9:83:4f:46:06:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d83b5a67d92ffa8476c9321aa7bf6d4a20d3dab
Validity
Not Before: Nov 26 19:02:24 2024 GMT
Not After : Nov 27 19:02:24 2024 GMT
Subject: CN=b98960a9ed00b26b8b893e8a4a6ede4b6c883300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:51:45:d2:10:29:e2:71:6c:a0:10:ad:99:ef:
eb:09:ef:67:04:4f:ea:41:d0:cf:b9:67:8f:5a:2f:
3f:2b:b8:ac:ba:2e:b8:b9:c5:77:ff:ce:ed:57:e6:
db:a8:4d:8a:f0:08:eb:e9:8a:40:85:ab:ac:68:9e:
e0:26:11:52:92:06:e7:d3:d5:2c:86:60:e6:bd:eb:
84:2b:75:6c:71:a8:51:02:cd:84:15:ba:8d:0a:03:
c4:49:b1:7e:15:2d:c7:d5:b7:06:b8:ff:04:54:d4:
14:73:a1:d3:d4:2b:f2:34:25:bc:87:82:11:ae:b3:
5d:8d:4f:36:91:50:80:6c:d6:fb:7a:78:51:b5:09:
48:7d:6a:61:a0:fb:0b:19:df:a6:e6:27:ec:9b:47:
54:da:d5:b7:17:3b:31:0d:57:69:f9:12:76:47:7f:
49:8e:71:a1:b4:56:6c:ad:47:cc:ea:fd:65:d6:1f:
44:a7:49:2c:c5:08:91:83:09:3d:a9:5b:b4:14:50:
f5:54:90:ca:5c:49:44:85:b0:33:b2:cd:c5:c3:e0:
eb:df:c9:54:19:82:86:f2:8f:df:3c:6f:fd:96:36:
c5:a4:de:ef:83:f2:df:8a:bc:9b:9b:6c:49:5c:27:
c5:98:ba:a6:8b:91:81:d4:80:10:8b:d8:bd:d9:48:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:89:60:A9:ED:00:B2:6B:8B:89:3E:8A:4A:6E:DE:4B:6C:88:33:00
X509v3 Authority Key Identifier:
keyid:5D:83:B5:A6:7D:92:FF:A8:47:6C:93:21:AA:7B:F6:D4:A2:0D:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYO1pn2S_6hHbJMhqnv21KINPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/57b891-a912-4c6a-8e3b-d41fcdf57598/1/XYO1pn2S_6hHbJMhqnv21KINPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:28:10:e0:f8:4b:cd:68:2e:69:5e:65:7f:09:de:56:15:22:
f3:7c:02:73:58:0b:81:03:0f:88:27:bd:83:17:6f:87:4b:e8:
d6:83:c4:1e:ad:f5:5e:fd:10:79:08:0a:55:bc:c1:49:c7:b6:
4c:99:0f:16:11:30:f0:17:75:83:38:6e:f2:06:70:3c:f8:25:
8f:3d:a8:54:a5:db:13:f3:76:47:3d:d8:de:0d:41:57:c4:26:
b0:1c:65:09:25:4e:25:98:b5:b6:72:fc:0a:86:8c:02:6c:d5:
39:ff:bd:23:21:eb:27:a9:6a:23:72:b1:72:93:1e:de:e9:60:
d4:83:90:1b:c0:3c:12:65:47:3f:d8:8b:6b:11:b2:19:2a:6a:
35:e5:ce:45:da:0f:84:6e:01:45:27:29:70:a9:68:9b:c9:8a:
7b:5e:da:2e:e4:84:62:51:04:6f:95:c3:1c:77:44:e7:af:c0:
f7:43:42:da:38:5d:41:e5:3e:b5:88:d9:d1:0e:46:3c:36:cd:
a8:f3:51:52:90:07:9c:fd:ce:04:62:c7:90:6d:ac:bb:47:dc:
f4:c1:69:ac:55:3b:92:94:90:84:22:21:9f:ab:19:b4:62:04:
99:66:7a:2c:09:89:66:97:87:36:94:0c:86:ec:33:11:57:33:
53:41:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:17 2024 by rpki-client on console-ams.rpki-client.org