Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: T3UHzRswGzAWvH3/Oj3hbFXXTA5k0hqW9KiUfmH4kzU=
Subject key identifier: 64:1B:94:E2:05:F9:38:76:51:06:59:03:7F:35:8B:FA:0A:D1:7F:A9
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019352AD6E130892678E54635C03B2E85E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1375
Signing time: Fri 22 Nov 2024 07:01:57 +0000
Manifest this update: Fri 22 Nov 2024 07:01:57 +0000
Manifest next update: Sat 23 Nov 2024 07:01:57 +0000
Files and hashes: 1: H-1q34KVRZvsoX_6nZcQwhDpUHc.roa (hash: jq3GJpIVWlvUeLD3fbBxkItFCo/+OJY4mYkLapKDQrA=)
2: thed-l6Hqgw3bEK-oFYf4KS9Cnw.roa (hash: F/C6KO0kkWCFUWJ0VBjBj0LzNMxOuF3eZfmn3QQ+WjI=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: wBIvzt4IXcIOJYBLuldPwFUtM4uFVHl0HRBkN9nBIzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:6e:13:08:92:67:8e:54:63:5c:03:b2:e8:5e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Nov 22 07:01:57 2024 GMT
Not After : Nov 23 07:01:57 2024 GMT
Subject: CN=641b94e205f93876510659037f358bfa0ad17fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:60:b1:9f:7b:d9:46:04:f8:f1:bf:61:86:
6a:b6:b9:db:69:18:20:29:3f:b1:cb:8f:d2:d2:97:
78:8e:f0:89:1d:aa:99:c4:76:9f:84:fa:5c:ad:5d:
32:ca:17:07:97:b1:0a:04:91:b6:b7:a0:13:1b:26:
a3:10:4f:84:99:ae:42:67:6b:13:08:39:ca:f1:bc:
e1:1e:4c:e1:b3:14:ff:2c:68:e3:48:e9:85:ec:e5:
b5:e7:27:79:cb:87:96:8e:94:b4:a5:45:a9:d6:e9:
a6:e9:de:b6:8a:8d:43:58:7f:24:66:e0:66:2e:e7:
1b:f8:f0:e8:bc:b5:02:58:87:c0:0c:4d:b6:2b:b9:
bb:c9:87:bf:60:c1:e4:8b:cb:46:8b:a5:75:6f:91:
81:77:f2:3e:35:7f:0b:d2:5f:cb:6a:f8:67:c4:1d:
13:c5:38:e7:69:ed:5f:59:ed:bc:49:fa:98:f9:66:
79:7b:b1:a7:35:31:2c:b4:a9:42:5b:e2:2a:39:96:
9a:11:53:d7:a4:7c:65:31:8d:79:be:75:de:1e:aa:
7e:e9:53:bc:76:c2:2f:1a:71:1e:ed:27:83:24:72:
a2:bd:99:e9:dd:53:28:78:90:ad:14:49:f5:2d:db:
b9:c1:a6:f1:8c:12:36:d6:5b:20:4a:b4:ba:9c:51:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1B:94:E2:05:F9:38:76:51:06:59:03:7F:35:8B:FA:0A:D1:7F:A9
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6a:c0:38:c9:54:ac:40:ff:1d:cf:bb:59:0f:5b:22:98:6a:
12:38:9e:5e:5f:8f:a8:db:97:58:49:0d:38:2f:52:dd:87:bf:
ad:cb:5d:f4:70:82:26:41:f1:9a:4d:7a:8d:85:65:da:84:b9:
33:62:d3:f8:a7:12:42:5e:95:1e:98:c7:c4:2c:63:38:cc:f3:
61:63:d6:19:31:99:32:32:3a:59:5b:4f:c9:5a:af:ba:da:35:
39:e1:0c:51:c7:b8:0e:0a:ef:05:35:cb:39:a8:30:02:3a:ee:
22:4a:ce:74:45:a0:a4:1f:a2:68:11:b4:9c:62:fe:1c:e0:04:
28:cd:66:9c:2f:27:0e:64:54:8b:09:2a:0b:e3:19:cd:f1:05:
a6:1a:d7:c3:3a:b4:4e:fe:42:e2:2e:55:9b:67:96:32:cd:40:
bc:0b:5d:16:4b:87:f4:57:2f:b8:91:98:1b:f2:b8:08:fc:b9:
7e:ca:2c:85:1c:31:7a:01:5c:96:a2:0e:0a:f8:35:0d:d5:cb:
eb:b7:25:9f:2b:c9:37:78:26:5a:a2:9f:8a:07:c6:93:d5:fa:
7f:79:9c:2e:95:a8:82:e1:e8:dd:2a:58:7b:0e:ef:0a:4d:16:
5b:18:53:18:74:74:18:63:aa:22:e4:52:42:b9:ac:44:3b:cd:
5f:34:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:17:31 2024 by rpki-client on console-fra.rpki-client.org