Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: JPJKrx56wyt54h0SzTO+p/fywlHii5z5xBbqMnuAlOw=
Subject key identifier: F1:9B:5A:C1:B4:6B:79:02:66:B8:37:1C:C2:9D:67:B3:83:C9:08:19
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 01936A7D48CBC5DD114E19D602FAE1BFC2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 22:00:15 +0000
Manifest this update: Tue 26 Nov 2024 22:00:15 +0000
Manifest next update: Wed 27 Nov 2024 22:00:15 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: 0IQY2hl14eXLQ1qPMXZVPKNTdvxjv9/45RO42IG77pI=)
2: bD8y3CrlHmdP0D8gmbV0q2bE7MY.roa (hash: BjMvOoxfQwjqHVsLjoQqT8eG3s4d4OJMFwIINRMycOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:48:cb:c5:dd:11:4e:19:d6:02:fa:e1:bf:c2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Nov 26 22:00:15 2024 GMT
Not After : Nov 27 22:00:15 2024 GMT
Subject: CN=f19b5ac1b46b790266b8371cc29d67b383c90819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:bb:14:4f:2b:8e:6b:10:e2:5c:45:2c:b2:
d3:ff:80:35:8b:97:13:3b:a2:4d:a9:70:45:f3:da:
2e:a2:47:42:b7:09:5c:c0:9a:4c:06:08:d4:fe:e0:
4d:6d:bf:7e:5b:34:dd:23:f1:ee:28:cf:9b:c6:57:
58:73:ad:fa:aa:d3:58:40:a0:09:a0:4b:47:4e:0e:
04:0e:00:5c:fd:5d:25:16:7e:9c:5a:c5:92:b6:54:
a6:11:72:4c:34:2e:3d:2d:72:e5:d8:b5:56:ec:26:
65:f5:d0:22:d2:a1:a2:2f:19:ed:24:2a:4d:bb:c9:
99:83:a9:37:6c:94:3a:98:e4:d1:46:74:85:5b:54:
45:9a:e3:c9:a3:39:43:14:58:b4:f4:b0:e8:8a:b4:
3b:bb:06:4b:26:9b:72:d3:cc:d3:eb:fa:f6:a8:d2:
d3:41:94:c7:f8:0d:93:17:01:de:5b:1e:e4:e6:9d:
a3:e6:bd:01:18:84:7d:64:7a:75:36:6f:7a:e0:77:
75:db:de:29:d6:84:7c:4f:ba:af:04:02:3f:7b:e8:
9b:ea:b9:07:f8:d1:18:d0:31:71:91:80:2b:7b:c3:
a8:48:95:e1:bd:1d:ab:df:85:31:be:43:39:06:45:
20:ed:44:e6:b1:10:36:06:76:d1:58:13:66:a9:93:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9B:5A:C1:B4:6B:79:02:66:B8:37:1C:C2:9D:67:B3:83:C9:08:19
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:88:0b:37:f6:b3:dc:20:68:0a:32:8f:c7:36:26:63:d6:f1:
a9:9d:df:06:3d:e5:1d:2c:ab:43:1e:c4:fe:37:1e:69:ec:69:
26:d1:e8:45:aa:97:0e:6e:a9:f9:cb:09:de:4e:ad:0e:42:32:
30:5c:3a:17:9f:8e:8d:6b:6e:69:6b:60:fd:c9:d5:32:4a:aa:
70:a2:01:ff:20:23:36:17:d3:ef:76:a1:e0:56:7e:f2:5a:39:
40:7c:77:17:67:33:e7:f7:09:dd:39:7a:19:ad:05:b0:34:22:
4c:38:5d:19:be:83:ba:dd:d7:3d:7d:79:bb:dc:f2:d5:4d:99:
10:e5:8a:f9:25:c6:fb:f5:c0:ff:d8:c8:07:5c:b5:4b:7d:0e:
e0:0b:fc:20:92:15:f6:eb:bb:7a:1b:65:32:0b:de:c1:2c:43:
cf:75:e2:b0:58:91:b0:fb:9e:fd:8c:66:26:53:ed:d7:77:85:
1e:5a:0a:6f:30:0f:54:60:f8:e6:46:15:bf:be:d3:76:70:16:
a5:cd:c0:31:ce:e9:5b:c6:93:28:e4:94:f6:0f:2e:8e:2e:e5:
62:d9:e7:b3:7f:fa:45:5c:44:3c:cf:5c:3e:4d:ed:92:02:48:
a9:45:c9:fa:99:73:f1:9c:83:e8:76:86:73:3d:df:ff:6c:f5:
67:0e:3d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:12 2024 by rpki-client on console-ams.rpki-client.org