Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: /JJSQPdbgaFPiC6ZGE99bwxQqj+09Lvax9xbH69jK9M=
Subject key identifier: 8E:C7:8B:10:FC:11:50:23:1F:33:D7:D5:ED:E0:DE:53:7A:23:D1:C1
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 019357D251165C8C268C53018CD429533D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 07:00:21 +0000
Manifest this update: Sat 23 Nov 2024 07:00:21 +0000
Manifest next update: Sun 24 Nov 2024 07:00:21 +0000
Files and hashes: 1: UdCc7kqo29njuIQ7gYyTnAhe9Fc.roa (hash: qAVAjWqQ9V9IkN73vNnGWW5+JUkbJk5I+Pkk1ImV/m4=)
2: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: fK+ViatFKTft6YK8BHAn7o3Rer48IBVg6PWUGQ5p/LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:51:16:5c:8c:26:8c:53:01:8c:d4:29:53:3d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Nov 23 07:00:21 2024 GMT
Not After : Nov 24 07:00:21 2024 GMT
Subject: CN=8ec78b10fc1150231f33d7d5ede0de537a23d1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:53:f0:e0:c7:d8:96:7f:2a:4d:a5:b8:d8:
b8:39:72:41:02:19:47:8c:56:55:29:6d:a1:d3:ec:
be:f3:f2:13:1e:94:8f:ee:4d:9f:5b:6f:e0:32:25:
9c:8b:80:52:d5:ad:02:ee:07:6a:70:a9:3f:0c:1d:
a4:95:7a:6c:bb:d7:6c:3f:05:c3:d0:3f:6c:93:58:
9c:c6:df:19:b2:ed:b2:5e:7e:ed:ac:ca:3a:93:6e:
6a:c8:7b:f7:36:e8:92:ea:6e:e4:98:b3:c5:85:09:
57:a1:cd:7d:bb:a9:30:24:77:77:21:34:03:c9:97:
2e:a0:a6:e1:2e:29:83:29:85:6a:40:b7:67:d4:3f:
35:01:12:8e:1b:a1:59:4b:a5:84:3f:8c:20:b5:25:
cb:c3:14:0c:5d:c7:3b:ef:1f:0d:8d:f6:b9:9a:23:
ee:8f:fb:47:5f:0e:d5:e9:e8:af:c7:7e:aa:ac:09:
c3:94:2a:cd:e4:99:03:52:91:f0:b8:33:43:0c:2d:
9c:a6:b6:75:62:2a:b4:49:b4:9b:e5:a2:13:cd:b8:
85:a5:52:32:e8:64:47:47:cf:df:5c:e4:be:c6:26:
6c:ed:27:db:39:0b:9d:2a:5d:a7:10:42:6c:81:cb:
7e:61:bc:11:8f:b0:b8:ab:1a:f4:26:89:e2:a5:4c:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C7:8B:10:FC:11:50:23:1F:33:D7:D5:ED:E0:DE:53:7A:23:D1:C1
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b8:e2:c5:34:26:8f:58:bb:43:b7:8d:28:eb:20:1e:cd:ed:
4f:35:b6:14:80:2a:98:43:d5:09:db:1a:54:14:2e:b5:44:9a:
c2:d8:a2:33:03:25:59:cc:29:9d:83:da:8d:77:f1:15:7b:a3:
ee:72:7b:11:2e:f8:91:0b:89:79:39:fe:44:34:e2:73:a6:6a:
f8:5f:32:95:1d:ca:4e:a6:96:b4:23:a9:b9:8d:ab:92:f4:40:
28:91:ed:e6:1e:bb:03:bc:32:17:ff:6d:fa:e8:31:43:cb:1d:
f0:65:1c:7d:fb:8f:55:ab:fc:c4:fa:91:62:73:60:26:96:04:
54:70:ea:31:40:78:d1:14:13:0f:3a:0e:9d:08:8a:fb:be:42:
77:25:6f:7d:cd:54:19:d2:e5:27:4b:62:84:36:d8:02:1c:a3:
06:63:9d:9a:8d:59:ed:0e:89:67:77:b2:e2:1d:7f:5e:fa:aa:
63:d7:60:14:e7:a1:f7:fe:1c:a1:8d:a1:a9:15:52:aa:0e:89:
25:0e:63:8f:22:83:70:fe:c5:02:db:49:ee:eb:bd:1d:b2:9c:
d7:12:16:cd:15:77:f2:36:8f:9e:17:7d:7a:72:c6:79:00:8a:
10:fd:53:2d:55:e4:5b:4c:ef:e8:62:af:f3:35:e7:11:b1:d1:
8a:ce:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:39 2024 by rpki-client on console-ams.rpki-client.org