Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: GTjBiJ4f+FTMI1Q65eg1Hnnb4UXHFMS0GeKrkwD9tJ4=
Subject key identifier: 71:B6:84:8A:26:6E:AD:8D:FA:AF:9D:67:4E:8B:74:0E:02:1F:0C:20
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 0193674540327EB22D2960CF581EDCFAD803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 0395
Signing time: Tue 26 Nov 2024 07:00:11 +0000
Manifest this update: Tue 26 Nov 2024 07:00:11 +0000
Manifest next update: Wed 27 Nov 2024 07:00:11 +0000
Files and hashes: 1: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: 4A76WyIeqJoP24mpmNIpv9Qm14FYrLkAjOQwbHKHzQY=)
2: ZJRZosDYC3cC_G8gCBZWZvgIhB4.roa (hash: Xr9KQrOcLlbYCphMxrllusjJzp/LvzgenWK27GvHZMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:45:40:32:7e:b2:2d:29:60:cf:58:1e:dc:fa:d8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Nov 26 07:00:11 2024 GMT
Not After : Nov 27 07:00:11 2024 GMT
Subject: CN=71b6848a266ead8dfaaf9d674e8b740e021f0c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:a1:78:1d:8c:f7:a7:35:f7:74:fa:d2:ee:
c7:9a:5b:58:3e:08:5e:3b:ea:5d:22:17:99:67:67:
66:b9:b6:15:8d:08:f6:6b:ef:00:2e:b7:17:a0:bb:
3f:df:ef:53:b3:bc:c2:d1:2e:63:d0:29:54:e5:7a:
04:06:c6:ea:31:01:24:bb:7d:cf:e8:73:b2:8e:af:
a6:97:60:96:16:73:9f:f0:79:0d:a8:a7:e7:9b:55:
1e:5d:fe:ba:20:0b:ee:e2:07:e6:19:aa:d7:03:08:
4a:91:28:94:95:a6:89:85:dc:3e:f3:d8:5b:bb:5c:
0a:92:f8:c2:25:11:05:ed:48:56:41:a6:f3:3d:87:
11:5b:b6:d5:60:20:1b:a3:98:f2:ae:ca:a9:94:f9:
5a:4f:d8:cb:20:0a:61:f7:56:ef:00:d6:75:93:61:
7a:7c:46:0d:f5:44:32:97:c1:43:76:49:d4:e0:41:
e0:5a:4b:fa:1d:a9:ff:b8:5c:55:24:99:d5:cf:9d:
ca:f4:1c:74:9e:18:e4:83:da:13:3b:77:64:e2:a9:
41:b1:e1:41:54:16:80:ef:f6:3a:73:1c:cc:54:e8:
3e:c6:8e:7d:2d:3c:43:68:31:74:6c:a2:96:af:1f:
df:2c:05:e6:97:8d:f3:be:53:0e:9b:43:7a:1d:ec:
a5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B6:84:8A:26:6E:AD:8D:FA:AF:9D:67:4E:8B:74:0E:02:1F:0C:20
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b2:1f:d5:9b:b9:bc:e5:53:06:4b:68:31:93:ca:be:e2:ee:
0a:c2:76:3a:c8:6b:a1:9e:d3:26:32:d5:f6:49:5f:6d:41:b2:
16:de:8a:35:04:11:47:fd:c1:d7:a1:68:76:6e:88:58:c3:55:
d0:a2:5a:75:87:92:94:d9:8e:35:91:9e:50:a9:e0:d3:a7:54:
28:91:06:37:99:ae:32:1c:83:1b:99:11:98:e3:95:8c:ed:db:
e7:c2:5e:14:da:1b:a6:64:84:7c:b0:d6:bf:88:43:67:07:f2:
18:88:34:01:af:e0:eb:19:2d:a8:45:cc:73:29:bc:28:0d:5f:
48:21:1e:00:4f:5b:5b:3d:ea:da:71:c6:f1:c6:78:d8:c2:76:
9c:d9:26:97:1d:66:95:fa:55:88:51:ce:0a:28:5c:6f:89:9f:
06:0b:8e:81:52:80:a1:1c:fc:4b:1f:a5:41:46:fc:b8:16:71:
f6:59:d3:99:1e:78:77:a0:cd:b9:ef:8d:22:88:7c:77:fb:23:
48:2a:6b:25:cc:03:f1:fe:53:db:67:e5:73:22:4c:44:55:15:
f8:f0:c6:30:bd:93:23:b8:6a:d9:0a:bc:93:0b:e4:5c:3d:dc:
58:63:77:ea:a6:c9:6c:b2:b1:b8:ca:eb:84:cf:15:9f:56:7d:
df:a3:67:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:17:57 2024 by rpki-client on console-fra.rpki-client.org