Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
File: xddsGvj60uvGNOouIzcPEMXFnQs.mft (raw, json)
Hash identifier: TYQfcBaKacY0KK5S/W6Rmtha3XDpq5Ih6ZOQm0SSpqs=
Subject key identifier: E0:0C:9A:09:FB:F6:8F:7A:73:86:D5:52:C1:82:9F:C4:95:60:5D:E1
Authority key identifier: C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
Certificate issuer: /CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Certificate serial: 019364B26FCF0B57D0F6A16D2DAC54B2DFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
Manifest number: 02AE
Signing time: Mon 25 Nov 2024 19:00:35 +0000
Manifest this update: Mon 25 Nov 2024 19:00:35 +0000
Manifest next update: Tue 26 Nov 2024 19:00:35 +0000
Files and hashes: 1: 6LhPUI-gmyCqv6fqP-Nf6XwkQwo.roa (hash: +EPtXUuwUzGLzsL5b26eU7EitQzi9kmFWV9fYO8XubU=)
2: xddsGvj60uvGNOouIzcPEMXFnQs.crl (hash: AGy8c7fBn52SFpGV6nyDP1MyjxvI31YmnpGm/n04aXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:b2:6f:cf:0b:57:d0:f6:a1:6d:2d:ac:54:b2:df:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Validity
Not Before: Nov 25 19:00:35 2024 GMT
Not After : Nov 26 19:00:35 2024 GMT
Subject: CN=e00c9a09fbf68f7a7386d552c1829fc495605de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:b7:35:be:ca:16:b1:c3:99:37:34:dc:dd:
60:3d:14:24:c7:b8:d8:96:89:46:65:eb:02:54:de:
23:45:83:19:6c:c2:e5:0e:f7:c2:d9:8c:89:e4:e4:
b0:6e:9c:90:b3:82:7e:93:c2:2e:b2:6b:91:6f:60:
b8:7c:3d:3c:33:a0:2d:12:29:a2:1c:1d:7e:3b:ce:
f6:9d:f2:33:57:3a:d8:d0:b9:2c:d3:b3:76:64:b6:
be:16:83:53:16:ef:47:e8:69:5d:12:10:74:ce:06:
05:dd:15:87:fe:8a:79:72:7b:95:1c:71:06:90:06:
b0:2f:47:13:82:ee:05:52:1a:c6:9e:d8:34:27:ed:
35:1b:db:48:f0:be:41:49:86:b8:ee:62:c1:82:d3:
25:d7:d8:ab:9b:f9:93:7c:16:c5:ee:2d:67:2a:73:
98:d9:53:ab:35:b5:63:59:67:cd:ab:19:8b:5a:f6:
9d:e9:46:e9:75:43:a3:bc:5b:20:b9:1e:09:81:29:
72:ce:d8:69:8e:b4:d3:18:9f:bd:9d:93:41:8c:ab:
2b:a2:7c:48:61:44:9f:2c:08:86:01:1a:62:b9:97:
93:a6:11:74:71:0d:7b:60:65:c6:2f:94:fb:0e:96:
11:a1:06:16:80:7b:22:9c:ad:78:b5:29:d2:62:63:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:9A:09:FB:F6:8F:7A:73:86:D5:52:C1:82:9F:C4:95:60:5D:E1
X509v3 Authority Key Identifier:
keyid:C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:74:23:3d:ca:34:a6:45:3c:67:51:cd:76:44:89:95:48:d6:
29:56:32:2f:fd:e1:ea:88:68:6f:1f:04:bb:2f:84:20:f0:73:
98:e5:04:0a:81:82:a8:08:01:0c:26:fa:3e:86:bd:c8:ab:8a:
a0:a2:95:02:b8:36:5d:a8:d5:eb:76:a2:2d:d4:55:1b:2f:e4:
b6:df:02:6f:e4:fb:30:1d:ff:f7:b7:f9:04:c0:88:ee:a2:30:
4d:b2:92:b4:7c:51:f6:91:5a:91:d5:29:58:13:97:bb:48:e8:
e9:2e:93:ea:f3:8e:b7:52:9d:be:f5:91:55:5e:8f:6c:8e:98:
e7:f0:b6:23:ba:0b:c1:f9:ef:f6:f6:41:01:d4:63:66:79:f2:
bb:02:8b:80:9e:3e:b2:b2:64:ac:59:b0:75:5d:b5:e3:a9:ea:
a9:3f:52:43:72:19:69:1d:34:bc:34:b3:8c:fb:9c:77:3e:61:
34:b4:6f:df:b1:39:4d:cd:ef:ac:e6:7c:b6:7c:88:55:73:b4:
73:b2:3a:18:b6:58:ab:49:20:62:5a:cc:93:58:11:60:b8:48:
52:87:84:92:2e:1c:93:6a:2b:91:3b:c3:7c:2b:61:49:7b:4c:
bd:28:ea:ce:96:db:f1:6e:dc:26:61:2c:c2:e2:cb:7d:df:77:
d2:5d:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:08:49 2024 by rpki-client on console-ams.rpki-client.org