Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier: PsL9nz/G95nGkBHab5zU8tBtrqac/uXyCWWUif/RTAc=
Subject key identifier: 68:9D:B1:EF:B5:10:82:35:36:2D:3F:13:FA:DB:81:1E:C4:60:53:C7
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 019050239D575BF1583821E59F6A174723E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number: 11E0
Signing time: Tue 25 Jun 2024 16:03:49 +0000
Manifest this update: Tue 25 Jun 2024 16:03:49 +0000
Manifest next update: Wed 26 Jun 2024 16:03:49 +0000
Files and hashes: 1: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: FfkU9RqZMy010PWhRP6o4RZgrp7+nsw1W5/HDdHALd8=)
2: Z609qW5B5CPcGG79C_Ndf9PHCd0.roa (hash: +iu9cNAY/5Yt2JTqT+oPOlmsy4k1DrZ6kyUJ3z670w4=)
3: nw7R6o0Nahsy8Yxqld0wWC5TK8k.roa (hash: /09ZnuntbtTGuPB7v6lSWJ+P24BU0LbGAxEq/AZj3W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:50:23:9d:57:5b:f1:58:38:21:e5:9f:6a:17:47:23:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Jun 25 16:03:49 2024 GMT
Not After : Jun 26 16:03:49 2024 GMT
Subject: CN=689db1efb5108235362d3f13fadb811ec46053c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b2:71:eb:13:f1:3b:ec:c4:b2:de:1d:83:76:
b3:bb:57:d1:de:8d:ef:4a:99:cb:ac:39:17:a0:e8:
c9:00:61:b5:ca:5b:71:ca:40:a4:d0:c5:b6:32:36:
10:44:8e:42:08:c9:45:27:c8:f2:97:b4:8f:4a:45:
ab:b1:79:96:93:81:ec:db:8a:d4:8a:9b:65:91:ef:
3c:46:b4:ca:65:0e:b6:0e:08:6a:51:03:b6:ff:b9:
5d:de:bc:cc:af:bf:2b:0f:48:37:03:f8:1e:67:f8:
73:fc:d5:e7:5a:13:01:af:03:05:63:c6:b5:1b:09:
09:34:bd:86:6f:c1:ed:da:de:eb:b4:30:cf:b8:c2:
88:6f:89:5e:bf:64:f5:f7:0a:c3:75:69:78:04:18:
ad:c9:60:21:b9:a2:fd:09:09:05:e5:d0:1f:1a:81:
35:36:e7:a7:bd:24:75:06:e5:2f:06:74:2a:e0:53:
74:ed:0f:a2:fa:5c:89:c0:08:29:9d:38:09:1a:3c:
83:91:42:fb:2e:ae:8d:97:0a:27:8e:b2:2f:f1:93:
63:2d:f8:f8:c2:d2:6f:fb:19:c3:3d:fe:6e:1c:80:
ef:e0:21:19:7a:15:19:24:e7:fe:0f:80:81:59:31:
15:ce:ce:cc:3b:ca:37:e3:73:bc:a7:6f:0b:bd:95:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:B1:EF:B5:10:82:35:36:2D:3F:13:FA:DB:81:1E:C4:60:53:C7
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b6:89:af:0a:d7:0e:27:1e:4b:ea:ae:b6:5c:b3:9d:ba:3f:
1a:10:45:f3:dc:d8:7b:e0:58:25:6d:a0:ee:50:8e:69:bd:e2:
39:a8:9b:6e:7c:5f:be:0f:5d:52:ff:28:cf:fb:89:9c:68:4e:
22:de:29:ef:8c:7a:c4:d5:51:bd:a3:e9:43:eb:b2:28:01:41:
f6:d5:42:b6:1a:b9:f8:94:98:a4:5b:3a:0b:e9:5b:40:d0:7f:
c4:9b:0c:6b:5e:dc:5f:5a:fb:64:95:f9:22:d7:4b:37:83:80:
90:69:be:29:1c:b5:5b:f9:1b:dd:a7:cd:75:30:a6:09:32:93:
a2:14:de:b3:9c:c3:35:ce:b5:2a:fe:8c:bf:2c:e9:b5:89:c8:
ee:c7:ba:de:61:e1:71:28:3f:1e:76:26:9d:2b:4c:51:b9:97:
e3:7c:9f:8a:02:84:c5:ff:ed:ce:27:ea:55:f9:b4:eb:d3:0b:
60:b2:bb:b9:d2:fb:9a:f7:87:44:c7:7f:3a:6c:8b:47:80:6b:
c7:c1:18:9a:98:bc:ad:ca:63:70:ca:21:58:de:eb:df:c9:02:
c6:ef:ee:40:66:a9:77:a0:9d:25:a7:20:e6:2e:38:d7:bb:58:
f6:f1:05:b6:31:e2:45:8a:13:ba:85:6a:d1:08:fe:c0:5b:88:
39:2e:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:48:08 2024 by rpki-client on console-ams.rpki-client.org