Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
File: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft (raw, json)
Hash identifier: ljYka9G/JxFf7lLGrz3Zk+ZXUxtSwGGjoyUK8NATk+o=
Subject key identifier: F8:FB:6B:30:A5:C4:CE:AB:96:B5:6E:42:0D:9B:3E:27:4E:D3:8D:25
Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
Certificate issuer: /CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Certificate serial: 01936A7DB8434C9E334C0452E257AF3EDC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
Manifest number: 0339
Signing time: Tue 26 Nov 2024 22:00:44 +0000
Manifest this update: Tue 26 Nov 2024 22:00:44 +0000
Manifest next update: Wed 27 Nov 2024 22:00:44 +0000
Files and hashes: 1: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl (hash: PrTLZ1+fqhLX/XAo6hHB1YWugUTsOY9gLRwzmyob/YA=)
2: k43Vns8Jbsruig421RH-iw0YKkw.roa (hash: YeC4iy8SibCXOaCQ0yO0VcjKFaZmSnM4e94UCPQgWIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:b8:43:4c:9e:33:4c:04:52:e2:57:af:3e:dc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Validity
Not Before: Nov 26 22:00:44 2024 GMT
Not After : Nov 27 22:00:44 2024 GMT
Subject: CN=f8fb6b30a5c4ceab96b56e420d9b3e274ed38d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:b4:2c:2f:dd:73:78:40:b0:56:24:80:63:
26:6b:5a:55:48:c6:4d:f4:c5:aa:66:f6:74:40:00:
f9:e2:be:0d:85:45:39:c4:5f:27:ab:e6:a9:c8:da:
e9:6e:f6:d3:1e:6b:03:b6:d7:46:d1:ae:e2:b4:8a:
47:1d:a3:35:f4:17:2b:59:73:94:0a:ec:d7:7a:5d:
62:d6:5a:05:f6:9d:86:a7:ac:99:d4:25:99:d7:60:
e1:e5:5c:8a:d3:55:14:c7:a6:dd:e4:8e:af:76:ed:
b3:42:9f:a8:65:43:8a:9c:c0:0f:f1:75:33:d5:05:
4c:d9:c1:ee:da:0f:b6:55:5f:aa:59:62:a2:f1:e3:
5a:f3:8b:5b:74:bc:b1:07:1b:33:3d:47:9c:da:ea:
56:57:6c:de:c3:14:30:05:77:5f:60:8b:83:e4:0e:
eb:b6:f6:79:6f:e7:93:ac:29:99:19:53:64:01:bd:
36:15:1e:a8:2c:8a:a6:31:dd:e2:31:f2:81:c9:f9:
29:77:9f:ba:bc:4d:69:1c:54:1f:4c:f0:ed:ad:9a:
a1:bb:2a:43:0f:cb:50:59:27:c9:c0:d6:66:5b:cc:
9d:a8:b1:e3:0e:c9:0f:18:e1:cf:d5:2f:79:3c:fb:
31:2a:58:96:61:29:b3:1e:db:70:6f:82:e9:3b:33:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FB:6B:30:A5:C4:CE:AB:96:B5:6E:42:0D:9B:3E:27:4E:D3:8D:25
X509v3 Authority Key Identifier:
keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a0:c4:0d:fe:c4:01:b2:32:d3:08:7d:23:b6:54:31:cc:8e:
9f:05:81:ad:93:9c:92:e3:6f:21:7e:ff:f6:fc:3a:79:19:14:
55:75:e0:77:9e:25:d9:2e:e1:76:b3:fd:76:23:e8:b9:90:01:
b4:30:0d:17:1a:bd:3d:d7:eb:87:d0:35:0e:ee:58:ca:fe:13:
c4:85:72:34:34:37:7a:e3:bf:b5:a9:d8:05:18:e2:b8:ff:a0:
96:d1:45:6c:6c:b1:3c:f6:91:a2:6c:d2:ed:be:f2:fa:92:16:
a1:52:1b:c8:b5:cd:96:45:52:65:8f:26:25:cc:b0:83:3d:c7:
43:07:22:59:61:41:e5:da:22:d6:d9:c1:59:c3:e0:e9:53:1f:
8c:08:ed:14:48:6e:5c:e6:16:56:1d:87:5a:f7:89:09:5f:66:
83:01:58:82:af:c9:33:72:33:b4:2f:bf:0a:db:1a:3b:72:ff:
6b:65:6e:96:11:e8:30:50:da:0c:ab:3e:01:f2:35:0e:b1:27:
92:27:0a:76:ee:a6:2a:95:1a:b7:97:e5:ab:41:fd:61:4d:c3:
e5:12:f6:e3:3c:91:35:1e:a0:e1:bb:70:46:32:99:4f:c4:08:
2a:e7:c6:c1:56:41:ca:91:77:48:34:6c:a7:1d:39:45:01:b9:
fe:c2:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:31 2024 by rpki-client on console-ams.rpki-client.org