Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json)
Hash identifier: WHY3l2pVyMOFZYB5FB8xC9/3v5sCQisg5/6/mdB4PbI=
Subject key identifier: CB:AB:EE:24:AC:6D:C5:03:2D:70:4E:4C:67:E1:FA:76:6F:88:F1:F2
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial: 01935809410BFF864CEBAEBFAA03C2558CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
Manifest number: 0272
Signing time: Sat 23 Nov 2024 08:00:21 +0000
Manifest this update: Sat 23 Nov 2024 08:00:21 +0000
Manifest next update: Sun 24 Nov 2024 08:00:21 +0000
Files and hashes: 1: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: YP9R8fiFCYzxOFMm5GaK0sPZDPhkW6WU7qRZPNtc9g0=)
2: yyw0M-nZ6YQVzDgSq0IkU_RhWEU.roa (hash: s6vdmgLOQf1Xdis+izLAMimWGvTGUazrI/VryUSy7rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:41:0b:ff:86:4c:eb:ae:bf:aa:03:c2:55:8c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Validity
Not Before: Nov 23 08:00:21 2024 GMT
Not After : Nov 24 08:00:21 2024 GMT
Subject: CN=cbabee24ac6dc5032d704e4c67e1fa766f88f1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:14:65:58:0f:ac:ed:ae:0a:57:28:01:be:
84:65:10:15:e5:01:2b:d1:ec:e0:78:72:d4:62:04:
58:84:3f:0d:d8:62:fe:a5:28:e0:be:a0:93:4d:d2:
89:78:97:7c:6f:cd:9f:ff:ad:ff:36:94:16:18:68:
4e:da:fe:48:63:f5:b7:f3:98:97:57:d4:cb:03:ac:
0d:66:3d:85:cb:b9:0c:c5:6e:25:d5:fd:1e:72:63:
cc:e1:0d:5c:65:4e:58:b9:24:f5:50:81:b2:1c:c0:
86:2f:7e:0a:ff:c1:d8:dd:27:1c:a1:81:46:c3:5d:
78:c4:d8:df:ca:b1:35:63:b8:4b:cd:85:9b:ea:05:
a1:6d:b5:80:0f:4c:44:fd:e5:9d:2e:61:ad:3c:2d:
f5:47:fb:a5:96:d3:06:83:8f:49:27:3d:07:08:7f:
03:5f:25:3f:ad:a1:4f:0f:17:fa:96:d6:3c:7d:2b:
78:7a:f9:a4:dd:e3:23:0e:49:4e:31:f8:04:c4:a8:
96:94:cb:96:5c:5a:c2:29:74:1a:02:20:36:cf:94:
57:24:5e:28:2c:19:b8:3a:b0:6f:e6:4b:69:34:89:
2b:1b:e3:9d:96:3f:e9:7e:4e:17:71:91:e7:d9:54:
6c:f4:cb:a6:c1:6f:98:7d:98:28:94:e6:a4:e5:a3:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AB:EE:24:AC:6D:C5:03:2D:70:4E:4C:67:E1:FA:76:6F:88:F1:F2
X509v3 Authority Key Identifier:
keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8e:7a:24:be:c5:85:5f:f9:1c:53:ba:d8:d9:ee:a4:03:34:
69:87:be:29:8b:b2:ef:96:cf:e5:5f:00:ca:75:fa:e6:33:14:
a6:10:fd:3c:f7:c3:e8:82:bf:d0:63:91:c4:b0:80:f0:0e:86:
a6:fb:25:2d:b3:3d:42:4a:76:47:06:d4:b2:ea:09:f6:d6:28:
e7:91:28:50:bf:d9:95:d4:b2:74:35:77:d8:a9:b4:62:dc:e6:
ea:35:0f:09:60:ab:9a:60:5c:8c:4e:3c:f2:be:3d:cf:21:c0:
b6:fa:c3:20:e0:70:96:19:f5:95:f1:8e:56:96:46:c3:6d:c7:
8f:87:33:4a:c3:3c:4b:c9:00:13:fb:04:95:c4:c2:7a:46:ca:
f1:00:49:1f:2a:66:6e:4a:19:d1:fa:94:69:ae:4f:1a:65:69:
a5:b7:79:01:f9:9b:fa:b1:65:b8:f6:54:8a:ca:b4:1f:9d:79:
4b:18:e4:9e:07:1e:c6:7a:66:84:01:51:9a:6e:5a:3f:37:ba:
ed:13:98:c5:8f:2d:e3:4f:10:f8:98:ce:93:5b:19:9b:e4:43:
b5:23:e5:82:07:a4:1a:16:1c:95:ba:fd:f9:8a:c5:72:9b:da:
d9:69:6b:6f:3f:5f:fa:61:d7:6d:d2:5c:35:ef:10:05:7b:ef:
d6:00:4a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:37 2024 by rpki-client on console-fra.rpki-client.org