Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: ivB5h6st4JwYDrJ3GAOXA++pVbHtLLy/4OFJdooZCzk=
Subject key identifier: 1A:52:71:4F:82:EE:41:F8:F0:3E:F6:86:7E:B4:B4:BA:B7:C0:7E:7F
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019351623D3F7AC00321D50EE7E37EC00311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 0F2C
Signing time: Fri 22 Nov 2024 01:00:12 +0000
Manifest this update: Fri 22 Nov 2024 01:00:12 +0000
Manifest next update: Sat 23 Nov 2024 01:00:12 +0000
Files and hashes: 1: WhnQOZGjUQpKET5r00_Alc-1jFs.roa (hash: KObK9MeirlWw5Sz1xgr7nJOUDxeuld9tBNALw5iAX/M=)
2: wGY7r8IEZfBqtDPeBvIGKDDr31o.roa (hash: FnruvgEbj+Jd7zEEu8uypOOheS/usNund8JbrSMLSXM=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: ekxseVNt4MUVzPheql7AUcxedVkZjSs493CI2YLqpXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:3d:3f:7a:c0:03:21:d5:0e:e7:e3:7e:c0:03:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Nov 22 01:00:12 2024 GMT
Not After : Nov 23 01:00:12 2024 GMT
Subject: CN=1a52714f82ee41f8f03ef6867eb4b4bab7c07e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:78:45:ce:35:14:be:47:3c:13:25:22:66:
9b:2c:63:92:e1:0c:57:91:df:1d:03:03:28:b8:57:
d5:6f:20:45:10:b2:7b:ff:85:8e:1c:a5:f2:52:44:
8e:83:e2:e0:b1:0e:75:29:32:f0:d9:52:d8:3e:98:
88:bc:25:98:ea:a6:cc:73:a0:69:f1:82:ec:10:36:
8d:8b:3a:d9:7d:88:28:12:0b:5b:f8:0d:b0:e1:4b:
54:0f:a9:f2:e7:ab:3e:4e:95:b8:19:6a:a6:e0:76:
61:9b:ec:85:5c:a1:90:41:77:45:86:61:db:35:4c:
18:e9:c3:c3:34:30:ac:dd:03:54:ae:89:77:45:e8:
3a:35:03:08:e1:c2:c3:ce:dd:88:82:5d:31:21:6d:
45:ea:24:2e:ab:54:fe:34:8e:f0:b1:24:1a:05:02:
66:98:8f:c3:16:72:b7:b4:d6:61:6e:a9:fb:71:85:
cb:d2:2d:14:a5:09:d1:5c:2f:83:2a:8a:0a:0d:3e:
18:c7:e8:9a:6f:1d:f9:35:77:a8:24:ca:4d:be:e8:
e2:e1:0b:4b:34:b7:84:32:7e:79:4f:0f:10:0e:10:
f2:c4:bb:12:74:46:85:2a:27:8c:34:94:6e:ab:98:
f3:f6:fb:da:06:3c:c8:5d:97:41:7d:b3:10:3d:12:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:52:71:4F:82:EE:41:F8:F0:3E:F6:86:7E:B4:B4:BA:B7:C0:7E:7F
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:82:c0:73:15:f1:76:f7:dd:3a:bb:50:b4:15:26:e9:3b:cb:
17:2b:88:9c:cd:ec:46:e2:ad:2c:1b:f5:dc:7d:9d:81:bc:63:
b1:44:00:44:f1:d6:43:b8:b6:d5:cc:46:67:bb:51:c2:03:cd:
b3:3a:92:ce:20:b0:7f:11:c1:dc:3f:9f:0b:96:9e:1a:49:f2:
c2:2a:6f:e5:60:e9:41:70:32:c1:a2:fb:85:13:94:cd:76:a3:
2f:8a:db:01:74:88:64:81:a3:e0:80:41:3c:af:9d:2f:07:f7:
8b:2d:4c:9c:a7:cf:59:fe:93:b0:53:36:91:02:21:35:66:56:
f0:d6:20:58:e0:65:e0:d4:17:4a:68:4f:89:a0:89:fd:67:52:
bd:a6:8f:cb:77:c7:6e:02:d8:7e:1b:e3:cf:5c:40:30:92:b5:
c3:e6:8a:d6:9c:1a:c8:89:15:cd:40:ed:52:94:0b:19:b2:e9:
30:ef:a3:4c:c2:35:64:12:d0:ff:7e:fb:c7:a7:5e:05:38:78:
ba:81:af:27:e3:e4:b2:df:b8:78:c0:51:c0:d3:b4:0f:61:7f:
d8:85:17:88:14:02:8e:97:2a:f9:32:e7:6a:7e:00:8f:5c:8a:
2c:49:20:3b:9c:cc:8d:55:14:1e:85:3b:4a:f1:92:cf:72:f5:
c9:33:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:40:45 2024 by rpki-client on console-fra.rpki-client.org