Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: JussT//oz6nAOcUpJaIpKfpVgd4gGwK8+jb1IRUXhqE=
Subject key identifier: 4A:97:5E:07:4D:37:A9:A3:82:48:5F:F5:7D:FF:9B:E0:41:33:D2:DD
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 0191FA7E0D7C1A613BBD8FDF8CE126BB380A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: CF
Signing time: Mon 16 Sep 2024 11:00:50 +0000
Manifest this update: Mon 16 Sep 2024 11:00:50 +0000
Manifest next update: Tue 17 Sep 2024 11:00:50 +0000
Files and hashes: 1: Y5BuI3IqBGS32NBT88Iwjd8NfU8.roa (hash: +FD66zPjxSegJfM17hGY02MgO0CZz9DnDIlSw8uJoZo=)
2: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: rNI2vlUBhtXOfQLMnYF31Se4eUCYVQAy8W0xU0912Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:7e:0d:7c:1a:61:3b:bd:8f:df:8c:e1:26:bb:38:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Sep 16 11:00:50 2024 GMT
Not After : Sep 17 11:00:50 2024 GMT
Subject: CN=4a975e074d37a9a382485ff57dff9be04133d2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:d6:7a:77:fa:26:fd:80:fe:7a:49:e2:1a:
5f:09:7b:20:13:2e:ac:b4:0a:b0:d2:f8:e0:bc:5d:
87:13:e7:74:d2:82:f3:b1:11:d2:4e:54:71:0a:25:
63:ad:fc:7b:91:ee:10:00:7f:1b:84:f0:e4:e4:fe:
61:b5:ff:83:41:99:19:b5:24:e8:68:eb:55:ba:ed:
3f:e6:ed:c4:62:e0:47:46:8b:28:41:83:5a:f4:21:
80:53:a8:32:b2:20:d3:26:0a:c2:bd:40:93:d8:c5:
3a:63:85:36:96:86:2f:c9:d8:28:e9:f7:bb:e9:53:
21:c6:be:bd:c4:7c:74:c9:b7:6b:cd:a7:6f:2f:ea:
79:cc:98:11:38:1e:82:df:12:db:9d:bf:ee:1a:bd:
c8:f3:6f:1f:98:8c:25:f3:19:95:0f:1f:98:5b:77:
56:47:6d:63:d6:27:31:f1:90:eb:cd:0b:7d:1c:da:
4f:43:82:19:e2:bf:d0:4a:d8:a8:26:a6:8c:b1:61:
ee:6d:ff:b6:0f:69:cc:af:48:e3:b0:69:99:4a:c6:
76:19:60:93:b8:a3:45:4a:30:58:06:d6:2c:c5:bf:
06:d7:74:60:32:54:d4:91:98:5c:b0:09:8d:ab:91:
33:de:b2:b1:61:41:65:a6:c9:92:4d:0e:81:c0:b3:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:97:5E:07:4D:37:A9:A3:82:48:5F:F5:7D:FF:9B:E0:41:33:D2:DD
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3b:08:f1:b5:11:b8:3e:25:8c:34:1d:0c:44:83:00:f7:0b:
e3:45:02:c6:ba:9d:a1:30:26:08:d9:6a:1e:e8:fb:bc:eb:a7:
4e:7b:27:01:d2:9a:05:dc:94:07:fa:ea:2c:f5:d6:24:1b:5b:
cc:ff:f8:2b:ef:9d:8b:00:ed:11:61:98:77:42:f8:7f:15:de:
87:c9:1e:88:74:72:2b:07:9d:70:f1:6a:76:f3:f6:6e:26:2f:
9b:a2:fe:ec:e9:c2:5f:6f:05:8a:7a:a5:11:32:3f:a8:69:49:
9f:a7:47:43:e6:de:fb:36:8e:cc:11:84:3f:66:68:f2:c5:86:
eb:de:20:a6:16:32:66:0a:ce:fd:2e:19:0f:06:9b:7f:20:54:
43:b1:13:3a:61:e3:91:41:cc:54:20:0c:2b:f5:c7:bd:16:ea:
20:40:4c:2f:7d:11:34:99:ca:c4:ba:43:1e:4d:51:3a:02:8e:
6c:c4:eb:1d:a9:36:c1:bf:2a:ed:11:2f:82:18:d6:9a:f7:9c:
16:5b:60:c3:b7:38:bf:26:ed:25:46:0d:3a:47:e8:59:1c:54:
d1:7b:92:82:51:b9:fa:33:3c:4e:32:41:76:fc:4d:d4:e3:4b:
c5:a7:9a:59:74:cb:46:e3:8c:2b:6d:be:52:ca:40:25:d5:d9:
22:43:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:14:52 2024 by rpki-client on console-fra.rpki-client.org