Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
File: x0HESpzVjhJWkGY32TXDGQ9_6xo.mft (raw, json)
Hash identifier: Y3/TaGpwZg3HWIiRdr9Z9WCy5z6q/+hj7+fLozKSn8A=
Subject key identifier: 60:DB:6C:81:4F:68:B3:12:21:FD:04:26:D0:09:B0:DA:4A:DA:AB:E6
Authority key identifier: C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
Certificate issuer: /CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Certificate serial: 018F8749093CC816C29BAB21D71AFE6BB355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
Manifest number: 0F19
Signing time: Fri 17 May 2024 16:01:01 +0000
Manifest this update: Fri 17 May 2024 16:01:01 +0000
Manifest next update: Sat 18 May 2024 16:01:01 +0000
Files and hashes: 1: GpsmHV8ERxI6Bkf_qVCmUC-6Yw4.roa (hash: R2IhZ/x9hNwlh+TKo8F3mQifo7UyRgek0acnMkUyUR8=)
2: x0HESpzVjhJWkGY32TXDGQ9_6xo.crl (hash: gc43I2unFj005JXK0vtrlk0rQkEEiOviootZB7Oly70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:09:3c:c8:16:c2:9b:ab:21:d7:1a:fe:6b:b3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Validity
Not Before: May 17 16:01:01 2024 GMT
Not After : May 18 16:01:01 2024 GMT
Subject: CN=60db6c814f68b31221fd0426d009b0da4adaabe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:4e:25:90:e1:24:88:d3:52:81:42:85:4e:
2c:ba:00:7f:3b:2c:5c:cb:f6:bc:8c:de:71:c7:ac:
07:1b:b8:64:48:55:9f:aa:50:c4:46:60:90:24:3c:
82:7a:81:8b:9d:60:21:ce:2a:85:21:89:5a:e7:26:
8e:2e:db:09:e3:82:aa:a9:22:6a:e9:31:b4:1d:38:
5a:dd:94:ad:2b:70:40:04:28:d0:58:dc:61:45:28:
a1:8a:ea:c0:4a:2f:65:17:54:30:d9:28:13:d2:ad:
b3:6d:0c:d7:7e:9b:5c:77:72:c4:0e:49:35:41:b4:
6a:7f:b2:70:bf:e9:f9:fc:14:84:c7:f9:11:17:66:
2d:0d:70:df:77:8f:c9:f9:79:b6:a9:3a:e4:9b:4a:
c7:2d:72:68:96:6d:68:05:4f:03:2b:59:29:fd:b2:
96:66:4c:89:a8:dc:7f:24:41:c2:ed:e6:fd:51:16:
c8:15:4f:3d:8a:81:e5:e3:a9:e7:f3:5a:3c:85:97:
ee:8c:b8:f2:b2:f3:27:71:3e:c4:f0:d2:3a:4e:6e:
81:e0:98:7e:31:a4:4c:62:a6:7a:01:4a:4c:74:3d:
6e:1f:30:23:62:b2:b8:0f:16:2a:80:47:95:63:83:
29:57:8e:a4:cf:11:35:4b:74:23:97:a6:1f:35:31:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DB:6C:81:4F:68:B3:12:21:FD:04:26:D0:09:B0:DA:4A:DA:AB:E6
X509v3 Authority Key Identifier:
keyid:C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:82:70:b9:96:92:03:62:2e:64:4e:12:85:90:12:e8:d6:13:
40:51:65:bc:0e:cf:96:aa:42:e6:41:8b:2a:70:b1:6d:f7:49:
44:d5:ae:c0:e0:43:cc:ef:4a:de:d4:2d:09:83:1e:11:a9:d1:
3e:37:92:0f:f4:e4:18:30:ff:5d:cb:c3:67:9c:aa:dd:9b:97:
02:2d:64:e2:4f:9b:ca:81:c9:80:08:f2:5d:05:5a:64:0d:bc:
d9:5f:f5:19:ae:88:3a:7e:5b:b4:9c:cc:7a:f4:9a:7d:87:7c:
36:ca:89:f0:d8:96:d8:7b:34:65:7b:1a:f1:9e:26:9a:d7:e4:
09:78:a5:fc:9a:b2:7c:5c:3c:76:37:bf:40:b5:1b:1d:de:69:
32:2a:56:02:3b:89:dc:04:38:46:61:b2:d0:ab:1a:ef:23:ec:
43:dc:d2:a5:f3:91:24:fa:6b:db:12:5a:a4:e6:a9:b2:1f:e5:
4a:92:62:2c:31:c3:00:15:de:e2:1f:a9:bc:98:dc:24:7c:4d:
91:72:78:fa:b0:a4:74:45:40:32:6c:fe:7a:1d:be:6c:10:c1:
3d:56:98:e9:d7:74:13:75:e0:91:a9:32:73:41:d0:ea:50:50:
90:a6:6e:63:fc:81:98:f9:7e:b9:83:b5:9d:f9:d9:ea:94:df:
7d:2e:e8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:37:57 2024 by rpki-client on console-fra.rpki-client.org