Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: M232e0CkoJn3SZXZTvhRdoRUYpNAca8nMHb7j0l4xUM=
Subject key identifier: 1D:F5:56:50:1D:27:BD:7B:CC:BB:5D:8B:CC:38:7D:62:08:C6:73:75
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 01936933AFD3DB712CD5E56107B60D27AF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 1391
Signing time: Tue 26 Nov 2024 16:00:15 +0000
Manifest this update: Tue 26 Nov 2024 16:00:15 +0000
Manifest next update: Wed 27 Nov 2024 16:00:15 +0000
Files and hashes: 1: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: /VLOzrdmuDJbdWIZclYMkuVDz2aLiRopwP9fSF4iBoU=)
2: YqTqoMRBk4DwFwAFjwILOeXOiHw.roa (hash: 7zEI+pkJl9AS5kytzgxWVBT5whT9s3GyOPC8h9UUoGU=)
3: Yv0PPtOQlEuSWVvTqVeG_Rvw1gA.roa (hash: hrcon0y1HH5qkzvVRsT9kC0k9SVNOATmAWXgu9ZAiTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:33:af:d3:db:71:2c:d5:e5:61:07:b6:0d:27:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Nov 26 16:00:15 2024 GMT
Not After : Nov 27 16:00:15 2024 GMT
Subject: CN=1df556501d27bd7bccbb5d8bcc387d6208c67375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:fd:ff:ce:fb:2d:34:3c:ae:9b:c5:e0:b2:
a4:1b:15:e7:aa:e3:d0:16:95:d1:81:99:59:bf:fa:
af:48:a5:c3:b3:7d:d4:85:c1:41:ce:36:0a:14:7e:
19:f0:a8:91:b5:34:25:fc:58:ea:2e:cc:c9:06:54:
ea:fe:ee:4e:a2:ff:58:ed:b0:78:2d:64:01:2c:16:
1e:d9:71:0d:ee:a8:c9:62:87:17:8e:8b:95:5b:cc:
fb:ad:02:d5:e6:2b:2c:4c:28:ac:8a:eb:59:85:43:
f4:76:5b:b0:1a:8e:09:b5:d3:8a:36:7d:c1:a8:7b:
52:8d:fb:8d:bf:5f:f4:34:92:94:87:a0:5a:c8:f7:
34:02:bb:09:c7:bc:f2:37:64:7b:44:82:70:94:83:
c6:b8:ab:94:44:7c:35:b2:14:9d:da:8f:dc:d1:90:
c6:d1:5b:b1:37:57:69:17:2c:bc:19:88:31:66:49:
26:8f:0b:0f:bb:89:d4:d8:82:47:5a:19:08:21:3a:
99:f9:73:c7:8e:38:0f:b8:11:c4:fa:da:b8:91:35:
e8:42:cf:3d:72:fb:81:82:ff:08:75:34:6c:00:14:
ae:19:f2:ad:34:c6:e6:32:04:e0:f5:a9:29:fa:53:
9f:fb:f8:34:6e:59:c6:43:c0:b7:50:a0:1a:96:89:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F5:56:50:1D:27:BD:7B:CC:BB:5D:8B:CC:38:7D:62:08:C6:73:75
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:bc:5c:ce:86:1b:69:3a:95:90:9f:db:af:ee:93:ef:27:48:
d0:0f:04:cc:43:36:de:b6:96:17:45:54:c8:47:0b:11:fd:f0:
8d:e3:75:c8:70:61:f1:24:16:6c:37:58:0d:fa:d4:7d:05:90:
a1:d2:aa:d3:36:dd:cd:2e:82:62:81:49:74:8d:2d:b8:50:6a:
2d:e8:76:1d:90:b8:d5:f4:16:02:38:56:bd:e2:de:64:04:d0:
7a:45:74:7f:04:fe:03:2c:a8:42:7e:82:e6:6c:f0:66:c1:ec:
29:f2:78:4a:9b:bf:74:4e:8f:71:a0:1d:51:9b:a0:13:7c:99:
b6:7b:21:ad:0b:87:19:d4:78:c5:19:8f:59:cc:60:8e:46:1a:
6c:c2:96:62:9a:e0:03:16:9a:9e:c2:fc:b6:76:3e:fd:e5:62:
e9:ca:1f:ae:4a:ec:60:8b:5b:53:0f:6e:ed:64:36:f5:c2:3d:
ad:fa:1f:c3:b7:43:94:a3:54:76:d2:1d:58:f8:c7:f9:cd:ef:
0b:b5:89:4b:b5:84:bf:b3:d1:81:3c:d5:51:97:ca:59:2b:60:
77:c2:9b:5f:a7:c6:7d:c2:53:5f:10:0f:31:b9:aa:6c:cb:74:
7a:4b:72:e7:6c:78:bb:94:ca:49:20:0f:db:7d:6e:57:d9:dc:
67:c2:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:06:46 2024 by rpki-client on console-fra.rpki-client.org