Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: Jvig5mW20DijWupWhfJYFpTOAL2pXLvx+n0jq36/u1k=
Subject key identifier: 6D:90:51:2F:0B:1D:60:D2:C9:8B:61:D7:5A:53:B9:10:3D:FF:9B:57
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019362FAC1D6177967EE031735D9A5FE97A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 1376
Signing time: Mon 25 Nov 2024 11:00:20 +0000
Manifest this update: Mon 25 Nov 2024 11:00:20 +0000
Manifest next update: Tue 26 Nov 2024 11:00:20 +0000
Files and hashes: 1: GDu9UTwUw2mbVfh-cjDWi1Vy2v0.roa (hash: FmUzJNzNiaHbkwh0d9w0h84Dyy3XTM1pMxH/etArrLQ=)
2: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: Khyr/TtHF3d94uTFAwYN62C0f0PW9Ymg/tpmiOtjT5M=)
3: mqmGBwbbm27yeAeqT_vkQTPOwMg.roa (hash: Y0HjEXilvhKWRhjYGZ6xahhczlUpJ4L6t3QFISuSqx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:fa:c1:d6:17:79:67:ee:03:17:35:d9:a5:fe:97:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Nov 25 11:00:20 2024 GMT
Not After : Nov 26 11:00:20 2024 GMT
Subject: CN=6d90512f0b1d60d2c98b61d75a53b9103dff9b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:2d:df:2d:1b:1c:69:46:e6:99:81:98:06:
2a:b6:a8:82:6f:06:93:a2:75:16:b7:28:fe:97:43:
01:95:c2:eb:10:1a:7c:db:1c:a5:ee:74:33:8f:03:
e6:7c:ab:89:ad:f9:48:19:2e:b1:81:45:f6:aa:9e:
31:b0:38:a1:b8:44:fd:da:65:15:5b:7f:df:7d:42:
4c:3d:7a:fe:df:f8:e5:fb:03:7e:48:e6:99:3f:15:
e4:5f:bb:45:77:d0:93:b2:1a:f0:52:ae:b2:44:eb:
3b:94:94:23:58:8f:4d:d5:a4:87:52:11:ff:99:94:
cb:88:e7:9c:68:6d:b8:6c:38:5b:da:8d:31:40:18:
f0:6e:94:82:15:3c:1e:f8:88:44:d3:1c:91:7d:c7:
4e:54:e4:e6:bd:2b:52:b9:76:bf:e6:6a:87:e8:ac:
c8:97:df:d4:3b:ae:60:b4:08:eb:fc:56:04:94:15:
a4:43:45:07:71:1a:66:55:8d:39:b6:bb:a6:c4:ec:
60:d5:77:ed:58:5d:5f:e9:80:eb:19:76:6d:b0:a4:
bc:c2:27:43:dc:53:1e:f6:0c:72:5c:48:e7:9b:13:
ba:48:d5:8f:ec:4b:9b:f5:5a:46:81:96:3b:0e:55:
6e:e8:70:06:20:ac:b1:33:f7:7a:4d:71:41:e8:61:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:90:51:2F:0B:1D:60:D2:C9:8B:61:D7:5A:53:B9:10:3D:FF:9B:57
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:76:d7:1b:38:9b:7d:5d:1a:ee:a6:b7:ec:47:d0:39:f0:87:
0c:bc:5a:f3:98:da:5a:7d:57:39:f2:42:00:01:30:dc:5e:b2:
f5:7c:8c:8c:27:63:8f:41:0b:b6:14:fc:c6:97:f1:87:e3:8c:
6e:ed:14:8f:03:73:38:00:77:6c:1f:6b:ef:00:07:30:d0:dc:
c6:af:29:4d:aa:16:81:16:4d:6c:56:43:54:94:3d:a2:29:89:
64:14:ce:06:0d:3e:39:4d:d0:48:5f:58:0c:0d:12:d6:04:30:
a2:6a:39:30:18:98:20:a1:cf:1b:f0:50:49:07:1e:48:8b:57:
9d:17:e0:a7:3f:f6:c8:bd:6e:79:5b:7c:82:e7:cc:e5:6f:58:
db:1f:3c:74:1d:cb:ff:ea:b1:51:07:64:9b:7d:b3:99:a2:3d:
65:42:54:0c:11:a4:5a:52:0c:90:69:ce:09:ae:4e:7b:8b:dd:
84:f4:c6:ab:5d:be:1d:35:92:90:65:f6:53:7e:eb:57:33:c8:
aa:7d:86:f8:c1:f4:41:2a:35:7a:07:2e:41:2a:a3:dd:cb:24:
88:89:da:95:d1:0c:d4:7f:ee:89:f5:84:0b:bf:85:e2:cc:9e:
f7:21:b5:4f:8d:ee:19:4c:99:16:42:f7:28:c1:56:99:24:1d:
3e:93:b3:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNi+sHWF3ln7gMXNdml/pemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzUxMTRhZGMyY2Y4ZWRlYTUwNTk1N2U3OWU4OTA0NDI2
NmMyNGUwHhcNMjQxMTI1MTEwMDIwWhcNMjQxMTI2MTEwMDIwWjAzMTEwLwYDVQQD
Eyg2ZDkwNTEyZjBiMWQ2MGQyYzk4YjYxZDc1YTUzYjkxMDNkZmY5YjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeYt3y0bHGlG5pmBmAYqtqiCbwaT
onUWtyj+l0MBlcLrEBp82xyl7nQzjwPmfKuJrflIGS6xgUX2qp4xsDihuET92mUV
W3/ffUJMPXr+3/jl+wN+SOaZPxXkX7tFd9CTshrwUq6yROs7lJQjWI9N1aSHUhH/
mZTLiOecaG24bDhb2o0xQBjwbpSCFTwe+IhE0xyRfcdOVOTmvStSuXa/5mqH6KzI
l9/UO65gtAjr/FYElBWkQ0UHcRpmVY05trumxOxg1XftWF1f6YDrGXZtsKS8widD
3FMe9gxyXEjnmxO6SNWP7Eub9VpGgZY7DlVu6HAGIKyxM/d6TXFB6GHvVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2QUS8LHWDSyYth11pTuRA9/5tXMB8GA1UdIwQY
MBaAFFx1EUrcLPjt6lBZV+eeiQRCZsJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMt
YzVkYzA5NGRmOWM0LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMtYzVkYzA5NGRmOWM0
LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXbXGzib
fV0a7qa37EfQOfCHDLxa85jaWn1XOfJCAAEw3F6y9XyMjCdjj0ELthT8xpfxh+OM
bu0UjwNzOAB3bB9r7wAHMNDcxq8pTaoWgRZNbFZDVJQ9oimJZBTOBg0+OU3QSF9Y
DA0S1gQwomo5MBiYIKHPG/BQSQceSItXnRfgpz/2yL1ueVt8gufM5W9Y2x88dB3L
/+qxUQdkm32zmaI9ZUJUDBGkWlIMkGnOCa5Oe4vdhPTGq12+HTWSkGX2U37rVzPI
qn2G+MH0QSo1egcuQSqj3cskiInaldEM1H/uifWEC7+F4sye9yG1T43uGUyZFkL3
KMFWmSQdPpOzUg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 14:04:51 2024 by rpki-client on console-ams.rpki-client.org