Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: zbFquMVVhojVlwVgV+pn6lXkvL85dPRS8WrmDfIKlJw=
Subject key identifier: 11:60:B4:7B:80:08:C2:46:3D:C2:A0:2C:5E:A5:F8:AF:08:7C:76:FA
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 0193579B9924258E625979575C7031D9E036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 0E1E
Signing time: Sat 23 Nov 2024 06:00:35 +0000
Manifest this update: Sat 23 Nov 2024 06:00:35 +0000
Manifest next update: Sun 24 Nov 2024 06:00:35 +0000
Files and hashes: 1: Ji4sou3Slw8YIhYNoVVUvH3ejRM.roa (hash: x0qcVxp8ATOZHKRCmGByOANukSYZqZYdVLr7LKi7c34=)
2: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: ZBnjAmZ67nBy5N4mDej6qUstl1evoJT4DbSeNY4530w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:99:24:25:8e:62:59:79:57:5c:70:31:d9:e0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: Nov 23 06:00:35 2024 GMT
Not After : Nov 24 06:00:35 2024 GMT
Subject: CN=1160b47b8008c2463dc2a02c5ea5f8af087c76fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:1c:72:dd:c3:a1:68:cc:04:a5:39:c2:f6:
2a:8a:b0:ad:a7:74:37:38:a0:45:1a:92:ef:f0:6f:
b8:93:0a:df:a3:96:23:ee:a1:ba:ca:1e:7e:3b:0b:
ba:77:dc:53:59:f9:e0:e6:1a:a2:32:de:f8:11:ae:
99:72:ba:fd:86:96:9a:34:e0:e5:aa:46:c6:02:84:
a9:3a:00:7e:75:93:62:62:77:59:8b:60:a6:97:84:
9a:d3:1f:8c:81:e2:5d:51:6c:d3:4b:e8:06:d8:54:
ad:47:3e:e2:87:a7:cc:a2:62:94:74:00:cd:0f:a5:
f6:b2:74:46:15:cd:08:6e:68:89:6f:29:46:ec:cb:
a8:ed:5c:ac:9c:b9:ee:b5:cc:70:34:f8:c9:c6:04:
55:24:59:83:1c:84:3c:d4:b0:df:6a:24:95:d1:5c:
ab:9a:5c:00:20:8a:cc:90:2f:e0:1f:9c:bb:4e:84:
52:a2:3d:f0:6d:3d:40:c6:ef:05:ee:d8:14:51:d8:
96:3c:95:52:31:79:be:33:98:32:a6:67:3c:23:1f:
08:65:9b:f3:43:fe:ff:a0:b7:86:45:80:1c:7f:c3:
c0:eb:fd:0f:94:d1:a8:ea:6c:fb:70:1c:dd:c5:70:
dc:6e:f1:8e:f5:be:12:0f:dc:e7:a2:3e:24:2b:06:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:60:B4:7B:80:08:C2:46:3D:C2:A0:2C:5E:A5:F8:AF:08:7C:76:FA
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d3:ff:e4:a1:b5:b6:3a:2c:55:18:8d:dd:7e:48:7d:b7:e0:
e2:e1:c1:77:e2:76:64:47:84:cd:85:57:dc:46:65:33:7a:9b:
53:53:0b:d8:09:8a:4c:20:bd:f6:9d:f9:d2:2c:51:b2:e8:6b:
12:50:93:53:14:3e:fe:01:0e:ac:64:c0:c9:92:1b:0b:d7:4e:
2a:26:8f:57:b4:93:0e:72:dc:95:9b:eb:c9:a4:ea:09:91:db:
d4:5b:13:11:55:97:a8:b1:5c:70:53:36:a8:85:10:2a:f7:05:
3a:33:11:55:37:19:aa:3a:25:8e:c4:93:58:35:81:49:0a:29:
68:2b:de:1b:e2:1e:b3:1c:62:6f:fb:cc:2a:73:48:eb:0c:51:
db:53:5d:5c:ff:cb:f0:9c:30:d5:78:e4:9f:18:fb:9b:27:22:
da:02:ce:20:e5:e3:33:df:7c:eb:36:b9:5e:4d:61:d5:a4:a6:
0f:3e:df:59:c9:a0:30:bd:72:58:bb:a2:a5:bb:56:22:71:d3:
ec:46:b9:b8:72:3c:d8:ae:59:8b:cc:03:3b:fd:aa:0e:31:1f:
78:9f:cc:e2:0f:68:99:5a:cf:1e:95:ca:7e:df:fc:07:f8:92:
4a:80:7e:d5:a8:8e:16:9a:19:50:f8:f5:4a:4f:6f:4b:c0:fe:
0d:33:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:23 2024 by rpki-client on console-ams.rpki-client.org