Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: W5egcaL7bCnLEHKO3Aj9mMO7+pKPmHVkoSS8RJjUECg=
Subject key identifier: 70:1B:AB:3D:56:D3:83:4B:85:44:E9:13:92:51:05:ED:15:D9:AA:3F
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 0193572E0A2DD8AB83F1FC6AE3C193BA4506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 04:00:55 +0000
Manifest this update: Sat 23 Nov 2024 04:00:55 +0000
Manifest next update: Sun 24 Nov 2024 04:00:55 +0000
Files and hashes: 1: UaCItnYbx90QuSpCocMbct-s6G4.roa (hash: 3V8BFn37E2wP9cPkV/kW9Tu4l2d86g0py/4TIiCzRMA=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: QOZL2tnAVVxRVqItm/Noz4uBfph/FcYsdqfs9IdFV5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2e:0a:2d:d8:ab:83:f1:fc:6a:e3:c1:93:ba:45:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Nov 23 04:00:55 2024 GMT
Not After : Nov 24 04:00:55 2024 GMT
Subject: CN=701bab3d56d3834b8544e913925105ed15d9aa3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:f9:fc:e5:c9:75:a8:61:55:02:71:37:d2:
28:52:b8:c6:af:74:55:92:df:89:06:82:ef:8e:34:
47:40:ea:1f:15:bb:da:35:34:5b:5f:8e:96:1b:1f:
1e:ba:f5:10:5f:3a:92:4c:7c:e4:88:a0:fe:11:31:
2c:37:82:05:27:2a:aa:92:6e:91:9d:30:99:3a:ca:
0d:91:97:c0:e4:88:44:25:2f:0b:fe:f0:9d:eb:50:
cc:20:98:9b:79:26:10:26:f5:80:74:32:d6:7c:55:
1d:cf:6a:88:ce:9e:74:0d:95:42:3c:a3:f9:41:90:
6f:7c:f7:f9:5d:40:49:83:a9:b4:11:b1:49:82:d2:
09:48:fb:a0:4e:e5:8f:c9:9f:1f:2f:b3:87:3c:fb:
10:59:e2:90:c1:89:6d:3c:24:a3:b7:7b:5a:ce:fe:
81:f3:aa:d7:60:ea:98:33:af:16:18:74:06:ff:30:
e7:43:62:94:e0:62:d0:40:eb:25:17:92:c6:ee:3d:
81:4f:e6:f0:c8:c9:36:01:4f:cc:0c:97:96:e8:df:
c5:09:df:60:da:68:bd:e6:b8:c8:f4:20:41:23:1e:
49:fc:54:aa:12:11:03:f4:d5:4b:6e:4a:a5:21:cc:
18:ac:c9:da:ec:a3:16:f9:b6:87:0b:e7:36:25:92:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:AB:3D:56:D3:83:4B:85:44:E9:13:92:51:05:ED:15:D9:AA:3F
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a6:3f:16:9b:67:27:87:eb:bd:b8:08:cb:04:85:14:58:39:
8e:de:a7:19:e8:1e:57:71:e5:87:7c:67:ed:32:e7:5f:33:9d:
34:d8:46:0c:40:f4:79:80:36:ac:b2:fd:27:8f:b5:f7:e3:0f:
63:c6:90:26:f3:17:bf:92:48:d9:ef:14:58:95:1b:73:73:71:
35:b6:bb:ef:cd:57:1a:9b:55:c1:99:ed:03:6c:be:f0:3c:75:
43:46:c8:de:20:b2:6e:30:b2:0a:53:bd:c1:c9:f6:e5:8e:30:
c1:24:ca:ad:78:89:14:fd:24:27:fe:d8:24:5d:5f:fd:35:4b:
23:8e:a7:68:c5:47:95:8e:88:98:17:84:00:99:4b:dc:7e:bf:
38:8f:b6:ca:3b:c2:75:17:f6:3d:13:dc:2c:cd:88:fc:64:16:
b8:17:d6:79:39:8c:bf:73:bc:6d:31:b5:44:74:ad:fe:26:ae:
de:a0:88:8c:ea:a1:ac:30:48:21:6f:d4:a8:85:04:25:8b:df:
19:42:99:6e:1c:cd:0f:bc:7c:c1:ee:45:2a:b5:5a:c2:34:88:
ca:4e:02:b9:1d:a8:92:07:52:ad:15:75:43:af:80:5f:12:80:
f0:d5:ce:18:03:98:bb:dc:40:10:a3:2e:7a:c7:6d:ea:99:6d:
d9:9e:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:10 2024 by rpki-client on console-fra.rpki-client.org