Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/Xxza2jmCQOZ-T4JugInSWxJJBAE.mft
File: Xxza2jmCQOZ-T4JugInSWxJJBAE.mft (raw, json)
Hash identifier: WieWqTg7ocSHrE8iacII6zoQh1mNKiwf1xxIvRIh5ZM=
Subject key identifier: 5B:D6:72:79:49:87:29:1B:1C:7C:80:77:1C:48:8F:44:E0:BF:D8:A1
Authority key identifier: 5F:1C:DA:DA:39:82:40:E6:7E:4F:82:6E:80:89:D2:5B:12:49:04:01
Certificate issuer: /CN=5f1cdada398240e67e4f826e8089d25b12490401
Certificate serial: 019053FF1FA294E508198F75DAD643CE66AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxza2jmCQOZ-T4JugInSWxJJBAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/Xxza2jmCQOZ-T4JugInSWxJJBAE.mft
Manifest number: 11E1
Signing time: Wed 26 Jun 2024 10:02:26 +0000
Manifest this update: Wed 26 Jun 2024 10:02:26 +0000
Manifest next update: Thu 27 Jun 2024 10:02:26 +0000
Files and hashes: 1: UzJEfYrK8k3REzILsm6rUTr9YhI.roa (hash: DqkUqMmpONDMcOkVpzft4tQW2Xpc9j0ICc+uIFw5SQQ=)
2: Xxza2jmCQOZ-T4JugInSWxJJBAE.crl (hash: V1opIr7avUTq0PW+c69mssk7swC2T1VKb2urIK9uHfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/Xxza2jmCQOZ-T4JugInSWxJJBAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/Xxza2jmCQOZ-T4JugInSWxJJBAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxza2jmCQOZ-T4JugInSWxJJBAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:ff:1f:a2:94:e5:08:19:8f:75:da:d6:43:ce:66:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1cdada398240e67e4f826e8089d25b12490401
Validity
Not Before: Jun 26 10:02:26 2024 GMT
Not After : Jun 27 10:02:26 2024 GMT
Subject: CN=5bd672794987291b1c7c80771c488f44e0bfd8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:8c:18:72:b5:98:25:0d:a6:45:ae:96:06:
1d:47:14:6a:41:0f:0f:85:73:13:e7:a4:20:1c:73:
86:2e:41:58:fb:7a:b7:39:96:98:7d:b2:e9:f8:0e:
09:33:53:1e:a2:bf:23:27:63:71:46:61:a3:8e:e0:
67:c6:04:d3:52:df:69:37:e2:1b:10:e6:b2:94:27:
f7:d9:47:28:46:03:04:1f:7c:d0:1e:7c:dd:ee:bf:
a4:9b:f6:99:6b:62:b3:5b:49:43:d9:6c:40:93:24:
51:5f:cf:56:fd:11:4e:20:58:6b:14:8b:0b:b5:ec:
b4:9b:c9:cc:c2:27:67:0e:b1:69:43:24:7d:e2:63:
3f:27:85:7c:fa:4a:0e:94:b6:2e:59:ac:0f:36:80:
89:99:d2:a2:07:da:0b:3f:35:4a:a9:e7:11:04:cb:
9c:be:e0:ab:bb:58:f8:d8:e2:84:68:6f:93:e5:0b:
43:ce:bd:35:79:1e:85:d2:d5:f9:33:80:e9:21:8c:
c4:41:22:89:d8:09:74:2d:94:62:46:34:bd:76:0b:
85:5b:20:d0:da:c3:88:81:80:ab:91:e5:b9:34:3a:
64:85:f8:10:33:38:12:2e:5f:61:b2:e9:41:8e:be:
64:0d:37:91:d6:ca:c9:60:b5:d7:68:9d:f8:ca:0a:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D6:72:79:49:87:29:1B:1C:7C:80:77:1C:48:8F:44:E0:BF:D8:A1
X509v3 Authority Key Identifier:
keyid:5F:1C:DA:DA:39:82:40:E6:7E:4F:82:6E:80:89:D2:5B:12:49:04:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxza2jmCQOZ-T4JugInSWxJJBAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/Xxza2jmCQOZ-T4JugInSWxJJBAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/Xxza2jmCQOZ-T4JugInSWxJJBAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f9:26:a0:8c:36:6b:b1:b3:85:c2:9b:62:36:cf:9d:9b:c8:
e4:35:fd:8b:bd:d1:bf:76:04:f8:d6:f9:3c:ea:ad:26:4a:b4:
58:70:a4:0f:28:71:95:0b:9f:5f:10:13:85:a1:5a:72:e1:c0:
e6:a9:d5:7d:15:b4:95:80:50:46:c9:33:9a:8c:f0:74:f0:80:
c7:35:71:84:3d:f0:f8:9c:67:ae:7b:1b:70:5c:f0:22:2c:74:
3a:25:73:ce:71:74:09:7f:ab:09:7a:c2:9e:7b:41:3e:ea:74:
b2:8d:3a:85:5a:38:93:a0:87:f7:dd:d2:db:1f:8c:dd:57:5b:
19:0b:c2:d3:c6:4b:04:b6:49:9c:d7:fd:b8:81:48:7b:93:fc:
12:ac:0e:8b:e3:3d:68:d7:91:fe:86:52:1b:c6:0f:cb:b1:d5:
8c:02:06:8d:d3:e0:50:8a:d9:ab:d1:69:97:3d:19:7d:77:3b:
65:21:2e:74:83:61:62:85:44:ed:b1:04:e0:b0:8c:a7:ca:7b:
ab:b1:c1:60:34:15:ae:f1:41:4d:d6:70:fb:eb:93:93:ce:64:
98:2f:32:a5:d7:d4:be:67:26:ec:8b:c7:c4:87:2a:ac:f5:46:
09:64:48:a8:af:dd:a4:a0:b2:c0:1c:7f:23:61:d8:91:b6:03:
bc:77:06:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:33:48 2024 by rpki-client on console-ams.rpki-client.org