Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
File: xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json)
Hash identifier: 2r7dNRdJtvjk5vKtlfqFJyjJ73kZkZKW+8L60BqJhFk=
Subject key identifier: 12:EA:84:14:2A:05:8E:F7:DD:E9:E1:1B:AE:50:ED:C3:0E:65:F9:B4
Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Certificate serial: 019356BFBD33FC16175E22181C9B2428187D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
Manifest number: 136C
Signing time: Sat 23 Nov 2024 02:00:26 +0000
Manifest this update: Sat 23 Nov 2024 02:00:26 +0000
Manifest next update: Sun 24 Nov 2024 02:00:26 +0000
Files and hashes: 1: 1-5dwj6SjgnHe4lBIUc8YGwbhnnw.roa (hash: EsEC33RB7zI+vHJPDsFdDwepxYIgILK+FI56kie/PdA=)
2: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: fGfCLj9vojMfb/LhzOjsLsd8If23LYPiSZkY5cc7LMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:bd:33:fc:16:17:5e:22:18:1c:9b:24:28:18:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Validity
Not Before: Nov 23 02:00:26 2024 GMT
Not After : Nov 24 02:00:26 2024 GMT
Subject: CN=12ea84142a058ef7dde9e11bae50edc30e65f9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:d9:83:82:d9:8c:84:c3:3b:7d:14:86:ac:
18:05:c1:42:5c:74:53:02:6c:ba:74:c6:1b:72:05:
f1:ac:9f:66:9a:c8:13:6c:3c:b1:0f:dc:b7:5c:74:
9a:f4:f9:16:8c:90:0e:01:88:ef:26:3f:e5:71:9f:
ed:23:1d:ed:45:e1:76:db:dd:09:51:f3:94:1f:4e:
71:c3:9e:44:e9:f0:9c:74:81:4f:86:74:73:15:fb:
ad:24:ee:a3:a3:8e:32:f7:e8:e9:1d:e1:2c:e3:59:
c5:9c:fd:01:b8:11:06:ba:bb:73:84:88:3d:c1:e3:
99:eb:9f:7e:a1:8f:38:10:e3:27:3f:f3:97:5d:2c:
38:b3:d5:cb:c1:4a:aa:4a:a7:fc:05:7b:f0:89:21:
ff:4a:7c:03:d7:d7:dc:99:37:83:89:60:ac:bb:c6:
89:e3:66:65:c7:60:a7:0d:69:c8:99:23:61:e5:de:
c4:dc:bf:f0:cc:9d:1d:2c:a2:c7:e2:25:c8:51:cd:
51:01:02:fb:1e:b7:1d:17:a2:74:34:92:df:3c:2d:
4d:46:13:5c:eb:51:82:58:32:fb:18:b5:50:d1:07:
aa:04:04:40:83:21:1e:b9:84:c2:d1:fe:08:4e:27:
4c:19:fe:a0:30:e0:54:6f:51:d4:dd:06:0d:da:bb:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:84:14:2A:05:8E:F7:DD:E9:E1:1B:AE:50:ED:C3:0E:65:F9:B4
X509v3 Authority Key Identifier:
keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:39:57:b1:c0:66:11:89:c5:dc:dd:37:26:f6:24:ac:99:a6:
99:f4:b2:c0:21:fb:f3:09:f6:27:10:1c:93:28:fd:14:7b:df:
c5:d6:1e:71:99:df:ff:6a:a4:4a:93:1d:b7:28:90:cd:be:b0:
cb:7a:8f:2a:7e:54:56:16:40:42:cc:e4:ea:31:45:f6:51:a8:
23:3f:4a:92:df:3a:63:68:37:31:2b:d8:52:8a:98:19:40:af:
98:91:6c:e1:91:a5:1b:2e:ea:d9:aa:0f:f0:07:d6:a0:25:f6:
43:ad:f0:aa:f2:42:85:b4:e8:ae:a2:46:ec:c9:a4:1d:69:31:
7f:22:ec:5d:5c:11:81:91:6a:19:0c:2b:4e:e5:42:bf:f9:8b:
4b:34:e8:23:4c:ac:87:05:a7:37:69:66:ce:11:93:31:cd:c3:
b9:50:41:42:c9:c8:40:9c:54:b9:aa:1c:5d:2a:08:f3:e6:0a:
3b:a8:9a:12:a8:9f:c1:88:ed:ab:d9:7e:47:d1:4e:d6:29:f3:
a3:2e:dd:3b:f2:31:d7:16:39:6a:d4:c2:94:8c:3a:e1:ea:8d:
81:c1:e2:a8:d7:44:44:39:44:d9:ee:76:2d:8f:04:0a:9f:a1:
8e:a2:f4:19:86:9f:5e:3b:98:5d:58:40:62:76:cc:ec:33:d1:
99:8b:df:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:33 2024 by rpki-client on console-fra.rpki-client.org