Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier: 6lX3Yp03kQUrQdpigr1hjdqS2FJjfC2tsR0gEFzfoA4=
Subject key identifier: 08:9A:72:1C:DA:A2:28:D5:31:83:62:65:AD:AE:E1:EF:5A:99:14:1A
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 019369DA19BD635884BCBCC8F133C6F3762D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 19:02:01 +0000
Manifest this update: Tue 26 Nov 2024 19:02:01 +0000
Manifest next update: Wed 27 Nov 2024 19:02:01 +0000
Files and hashes: 1: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: +cMZF5CUedfLeLV6607RDE1OUqugZJmNX1gG6GE1sAg=)
2: Z609qW5B5CPcGG79C_Ndf9PHCd0.roa (hash: +iu9cNAY/5Yt2JTqT+oPOlmsy4k1DrZ6kyUJ3z670w4=)
3: nw7R6o0Nahsy8Yxqld0wWC5TK8k.roa (hash: /09ZnuntbtTGuPB7v6lSWJ+P24BU0LbGAxEq/AZj3W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:19:bd:63:58:84:bc:bc:c8:f1:33:c6:f3:76:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Nov 26 19:02:01 2024 GMT
Not After : Nov 27 19:02:01 2024 GMT
Subject: CN=089a721cdaa228d531836265adaee1ef5a99141a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:81:ba:31:88:7b:f5:e5:e0:3e:5a:86:eb:d5:
aa:0d:35:f0:4a:d8:e4:d7:d8:61:c6:b8:3b:ba:ba:
4b:03:8e:f4:b5:0c:33:09:d5:a2:8a:7e:ed:f7:6b:
0b:2f:89:25:4b:92:b2:29:0e:23:a5:93:00:55:6e:
48:b6:39:c1:96:41:d9:68:0a:90:01:f2:ce:ec:64:
d3:3f:3d:40:d4:71:9a:b7:92:2e:98:35:17:f8:b7:
e3:fe:72:95:a8:b3:68:67:33:0b:49:ae:b5:f9:86:
22:3d:e1:d2:f0:84:1b:3b:f6:3b:09:e2:63:ac:07:
c9:3f:5c:34:26:62:02:47:00:8d:9a:a2:96:ec:1a:
0c:78:6f:0f:67:a8:73:1b:53:52:cf:34:21:a2:03:
2b:d3:7a:58:5b:84:dd:31:d7:90:c3:56:3c:d8:dd:
11:17:dd:bf:70:98:c8:23:36:11:1f:d0:68:4a:5d:
ba:df:d2:f2:a9:7f:bc:26:5a:1a:e8:ba:34:22:21:
34:54:d4:9c:52:22:c4:69:42:11:b8:b5:4d:86:a5:
ca:41:74:71:98:62:81:67:e9:9e:9a:3d:49:ef:44:
ab:70:24:e2:5f:5e:9d:8a:63:c4:d3:74:a2:6e:d4:
a9:87:5d:72:a9:26:ce:7d:d4:e3:1d:24:f6:36:93:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9A:72:1C:DA:A2:28:D5:31:83:62:65:AD:AE:E1:EF:5A:99:14:1A
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3d:f0:16:03:1f:4e:9c:65:70:60:45:99:f2:22:eb:44:af:
37:ce:c8:ba:1c:8c:89:36:3c:66:af:88:b8:ec:18:56:f8:c4:
50:cd:46:ad:46:20:0e:af:59:b4:69:6c:73:02:ad:cf:1b:a5:
17:42:75:f5:75:11:dc:e1:26:ff:15:65:f3:2d:0c:e4:d1:aa:
67:d8:4f:6a:a6:28:06:50:ff:63:a6:cf:b1:0e:7e:04:2e:54:
cd:50:e9:33:7d:63:72:76:86:b6:ad:6f:3b:0f:f4:a6:e0:ee:
cb:33:36:c5:9d:05:b9:33:f7:9f:ab:87:1d:4f:2c:94:f1:b2:
57:7c:b3:c7:bd:e9:6b:41:65:53:72:80:29:1b:d9:4e:2a:0f:
07:24:ab:8c:18:27:c7:ed:b8:e0:0d:1f:a1:17:c4:b7:2e:da:
95:7c:ca:12:90:6e:f9:b8:c7:f6:d9:c0:87:f2:20:8d:47:77:
7a:fc:65:ce:c6:52:04:b7:49:42:c4:30:6b:19:91:91:b0:64:
01:7d:77:05:41:25:73:21:b7:7e:46:48:33:0c:21:40:7d:71:
d4:51:c0:ca:ca:4f:6b:ab:37:88:18:47:cc:d4:a0:f4:88:54:
d3:ab:ed:c0:7f:51:a0:4e:23:ad:87:3b:52:f2:f7:24:e3:cd:
b9:73:72:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:06:47 2024 by rpki-client on console-fra.rpki-client.org