Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: ikImigIU/pYpZRdtGdp1CBr2EayHJgEJn3ZQZ6Ck0D4=
Subject key identifier: 63:D2:BB:D5:C2:98:E7:07:E5:E9:AE:76:A8:0C:6F:27:25:DB:E0:27
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 01935162472291C940FD55AAB32100091E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 0387
Signing time: Fri 22 Nov 2024 01:00:15 +0000
Manifest this update: Fri 22 Nov 2024 01:00:15 +0000
Manifest next update: Sat 23 Nov 2024 01:00:15 +0000
Files and hashes: 1: 20GXTANrkWw7HA32B3sHGLw2mDw.roa (hash: roOnjyGlc+xGAQu7zfE28QHfURp5NiSDecKrNG0Aewc=)
2: LfUAeq4HoqluHslZzpNUz5HEhDc.roa (hash: y9gnbVVxIl48xMNvYwTjS72tAVL5JTRCMWMJoqC66Y4=)
3: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: FPqmFN7hwKZlz1FzPpZ2yWcYNxoE2caJPjgzxBwmelA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:47:22:91:c9:40:fd:55:aa:b3:21:00:09:1e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Nov 22 01:00:15 2024 GMT
Not After : Nov 23 01:00:15 2024 GMT
Subject: CN=63d2bbd5c298e707e5e9ae76a80c6f2725dbe027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:90:d4:05:f3:88:d1:b4:d3:d4:31:0f:b7:
7f:a6:1a:c0:d0:c8:ea:81:6d:8a:24:4e:88:7e:b8:
96:37:c5:7a:43:12:b3:92:a3:b9:6b:6a:66:8c:bf:
01:40:c7:fa:fb:8b:3d:41:a2:f6:8b:9d:84:30:37:
26:96:06:fe:21:de:84:22:ad:7c:78:1f:b4:78:05:
bb:39:bd:46:b5:9b:6b:cd:94:3c:92:ac:c5:27:7b:
d5:72:f5:f7:8b:3e:61:72:ff:12:e8:57:50:b5:0e:
43:ad:69:9c:51:5f:ee:f5:b8:fe:fa:33:cc:d8:b3:
b6:fb:95:08:af:da:02:de:df:db:1e:1b:97:75:6f:
69:a2:87:58:a5:9c:f7:2f:61:e2:45:1a:3c:2f:ac:
a9:a6:10:35:d9:a0:8e:b4:6b:38:e8:4b:a6:5a:68:
fb:17:80:26:89:39:35:3d:1b:7c:79:1f:8e:2b:3c:
18:21:01:f9:38:ac:9a:bf:4b:1c:ed:d2:65:ea:2e:
8d:01:45:cc:ce:19:dc:bd:db:b6:2a:6b:d8:32:49:
14:dd:ce:38:09:fd:8d:99:34:b4:4c:1a:9e:cc:df:
29:95:06:a6:cc:59:01:7b:14:e6:50:da:cd:9f:cc:
31:ec:b7:48:4f:07:ad:ae:9c:4d:43:ff:2a:f1:11:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D2:BB:D5:C2:98:E7:07:E5:E9:AE:76:A8:0C:6F:27:25:DB:E0:27
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:92:4f:1e:45:04:a7:8b:1a:68:51:0a:9d:42:98:2c:f4:88:
16:9e:f8:dc:90:1c:51:4a:60:6d:fe:06:19:88:40:00:50:ba:
14:fb:5a:38:f8:05:70:e7:20:01:60:b1:89:00:e0:d1:0e:90:
bb:c9:dd:db:e5:3c:12:0b:87:42:1e:de:69:66:e5:87:4c:12:
c0:12:ef:13:ba:df:ed:64:e9:71:26:c5:5e:ff:eb:be:0f:20:
a5:5c:64:a4:bc:d0:a6:44:df:2b:b8:3e:ac:d1:71:a7:5a:e3:
85:79:7f:b8:4a:d8:df:c2:38:c9:8a:cc:6f:cb:47:28:6b:51:
b4:76:8c:9d:56:a7:70:99:19:10:1a:73:51:88:79:68:27:42:
30:67:55:46:14:9d:6f:e8:3a:d7:78:2b:a2:7c:67:e8:7c:43:
8e:9f:ce:b1:c1:e8:e2:8b:82:c9:27:8a:09:e3:a2:6c:a3:44:
b0:38:76:28:63:21:57:aa:8e:45:89:18:ec:4e:fd:4a:f1:60:
60:83:18:3f:4b:d2:9b:81:48:85:63:70:18:25:07:f5:37:f0:
e7:44:1e:4d:1a:b5:b0:fe:e3:ca:42:5f:13:76:58:d2:34:79:
57:80:05:2d:68:a3:a2:4e:d6:ec:12:30:cd:d9:27:d6:a6:c8:
d7:71:cc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:50:28 2024 by rpki-client on console-ams.rpki-client.org