Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: zcS+lsxJK5LL/8NfEtdmj3oawQ0uBe4jeBWeYlpGLDs=
Subject key identifier: E1:FF:D8:05:3B:0D:CC:BF:E6:C7:AC:EB:C5:71:B1:DF:E3:18:DF:55
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 0193579BAAB9B414313B2E99F7DC3738F9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 06:00:39 +0000
Manifest this update: Sat 23 Nov 2024 06:00:39 +0000
Manifest next update: Sun 24 Nov 2024 06:00:39 +0000
Files and hashes: 1: D3CAgRBHSLJuMDA0v5v-gJiwvm4.roa (hash: MepX9Ns9PXI1x+ywtQ3ISGa68yxN2hloDL1CvNtpFag=)
2: Mxhv7uZp6AnaPqTYgMggLcktoPg.roa (hash: KfU8wSsATezro4WhhKeAoUdJE8dnuj0338goIH+nYeM=)
3: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: w8Vnb9VFFwkQo4uDwbLkiXrmILKAjnstph0tflFz5ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:aa:b9:b4:14:31:3b:2e:99:f7:dc:37:38:f9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Nov 23 06:00:39 2024 GMT
Not After : Nov 24 06:00:39 2024 GMT
Subject: CN=e1ffd8053b0dccbfe6c7acebc571b1dfe318df55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:aa:b0:9e:d5:99:a6:04:3d:2f:c6:fc:a4:
bc:07:a8:18:0d:4f:d9:94:69:dc:3d:b6:8d:bc:07:
79:d8:ab:56:48:27:84:48:3b:de:be:48:1b:a8:78:
ad:d4:13:73:a7:fe:f5:6b:95:22:64:26:fc:95:4c:
c0:15:b6:d0:d0:4b:48:f7:31:e9:bd:44:b0:ef:dc:
d5:b2:59:02:21:94:59:27:58:07:6b:19:9e:06:a0:
cb:7f:17:4b:cb:87:09:64:c2:6b:2f:65:47:38:bc:
25:a3:d0:45:bd:6e:63:c4:f1:70:1b:bf:8f:3d:f3:
26:4e:8e:48:ec:0e:3f:16:43:87:37:8b:71:22:13:
4a:fc:1f:d5:6f:15:a4:26:a4:ea:db:d9:c3:c0:64:
a5:87:95:c6:db:86:71:09:d7:8a:71:9a:63:1e:c5:
42:41:52:5b:7a:90:cf:dd:db:eb:23:25:87:cd:34:
7a:a1:8e:28:85:b8:48:8f:6d:1e:0c:76:16:3e:9c:
27:7e:ba:c9:90:95:e0:44:e1:55:3a:9f:f2:a3:0e:
00:88:b4:55:7c:2f:fc:ee:71:7b:d4:e2:08:ac:70:
72:8d:4f:6a:5b:fb:a2:c8:3e:9d:a7:4b:a4:bd:b2:
91:bf:a0:c5:7c:1c:9d:20:59:c9:25:ec:8c:46:1e:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FF:D8:05:3B:0D:CC:BF:E6:C7:AC:EB:C5:71:B1:DF:E3:18:DF:55
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bf:9e:7b:5f:6f:e7:5a:e9:0f:5a:8f:30:a4:f2:27:54:a2:
86:ef:d0:6a:bf:72:45:9a:da:9b:45:7b:42:fc:79:c4:23:5b:
64:db:ed:15:d8:dd:53:48:a3:32:b9:28:1a:f6:fc:8a:47:8a:
84:2a:d9:ee:22:56:81:d9:aa:bb:68:20:42:b3:88:61:dc:2a:
51:4f:db:ee:c3:68:18:03:a7:2b:8e:ad:a1:87:25:43:18:b3:
84:09:58:a5:d7:fa:d9:8f:af:00:2e:31:68:95:28:0c:d4:6f:
0d:aa:c1:28:17:d5:44:f5:83:5a:7b:a7:61:2c:a5:57:5b:c7:
e4:d6:32:73:63:5c:4d:1f:59:30:f2:52:29:55:d0:08:2c:9d:
39:63:d3:49:2f:d4:ad:c0:8a:cb:5b:fc:74:f2:62:8b:9d:e6:
8c:f0:ce:aa:f5:28:d6:9d:a4:6d:50:96:c2:06:13:d2:bd:f5:
36:fd:4f:13:87:31:92:ef:88:06:57:12:45:31:63:95:da:d4:
93:85:5f:5e:31:20:63:fc:cb:10:4e:15:4a:21:8a:9f:a6:e1:
5d:b8:3d:7e:b2:cb:f9:ec:40:2d:c2:a1:1f:44:ee:5e:7b:e5:
cc:05:35:b5:7f:3e:c3:2e:be:cc:1d:6c:00:51:a5:4f:e7:46:
39:a6:9d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:29 2024 by rpki-client on console-fra.rpki-client.org