Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: 6sqwPiTRNnn85dLg74kFenthzFBup879IskXneldHug=
Subject key identifier: 77:E3:7F:00:B3:71:1B:35:69:05:B8:31:E6:11:5E:62:B0:9B:A0:C7
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 019351D0820915F309DD2DF72BB3E310A971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 03:00:39 +0000
Manifest this update: Fri 22 Nov 2024 03:00:39 +0000
Manifest next update: Sat 23 Nov 2024 03:00:39 +0000
Files and hashes: 1: d98Fz-stE9kgCe0dVWTwZguI0Qg.roa (hash: QsOo7VDOl7r+fNK1r87Gr9x21ZhoOpl619/vMHT1ZiM=)
2: mJtJLlV8EmizpA2GCxJKoVPjoYY.roa (hash: Ry5V+A1V4BRKw3xwagFdQ0o7coHlJ3w+5VUzOLki8b8=)
3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: Zzwa0jtDSMf9qgRUrpCrTMObyv2/o8rIRG/EDjkgou0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:82:09:15:f3:09:dd:2d:f7:2b:b3:e3:10:a9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Nov 22 03:00:39 2024 GMT
Not After : Nov 23 03:00:39 2024 GMT
Subject: CN=77e37f00b3711b356905b831e6115e62b09ba0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:91:c4:94:d1:bd:e1:14:fa:2d:b8:fa:f9:e3:
f2:dd:a8:e1:f9:b0:2b:86:c8:95:0b:70:05:aa:9f:
33:c4:31:df:3b:40:89:88:ba:2e:31:7b:4f:e2:96:
f5:4e:a4:54:7a:6e:24:71:43:ae:6a:80:89:66:fe:
7b:71:65:74:c9:d8:78:f6:c2:63:ce:c0:70:11:17:
88:10:09:e2:c6:13:ed:f4:10:af:92:ba:86:2c:45:
31:6b:9a:45:4c:f9:fb:d8:bb:aa:f6:63:7f:00:3f:
80:88:7e:db:58:c0:4d:53:f8:b4:27:17:36:29:6e:
7a:37:a9:4a:40:9d:79:05:5b:4c:90:3f:ff:bf:ea:
3d:f1:6c:67:18:2a:03:ca:4b:84:c3:63:f1:fb:22:
4f:c1:d8:cd:80:1c:71:09:47:2a:5e:3f:de:df:1d:
45:b4:6a:4a:63:28:7c:08:2b:2e:60:71:7b:aa:be:
a8:7c:fa:a7:a4:52:8a:33:e4:73:f7:ab:0f:f3:78:
0c:3c:10:f8:a6:86:a1:65:87:7c:a0:29:aa:1f:0d:
ea:0d:ae:99:0b:02:99:2f:d3:9c:a0:64:a2:18:3c:
a5:e8:25:94:57:a2:35:7c:64:8d:1b:f2:13:98:fa:
8e:f3:05:c3:fe:1a:05:00:60:40:30:0b:b6:b0:6e:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:7F:00:B3:71:1B:35:69:05:B8:31:E6:11:5E:62:B0:9B:A0:C7
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1f:31:0e:20:bc:b2:6f:60:83:06:7a:c5:1d:2c:f7:2e:0c:
46:98:dd:9e:1a:d2:71:d6:7e:37:b5:04:d4:35:6d:2e:66:8b:
94:67:63:e8:2c:3f:42:65:e8:ac:1b:1d:07:64:06:2f:b1:78:
f6:e6:13:be:9e:b2:83:f8:f0:bd:3d:9b:d0:da:2c:a7:6a:1a:
1f:43:4a:be:58:47:71:e2:0d:1e:50:e0:9c:3a:ad:80:ae:ed:
7f:16:1d:06:8c:77:9a:8b:20:3f:23:fa:14:d3:ec:64:d9:75:
53:9d:72:6b:54:11:b2:9f:88:fd:ca:24:6a:58:b2:c8:17:35:
2c:77:6d:2b:bd:d6:59:62:e2:fb:40:b0:ff:b4:a8:fc:fe:a6:
e1:83:5a:86:c1:a9:f7:5f:ca:0c:bd:b6:a0:38:4b:20:36:fa:
d0:45:cf:b7:6e:ef:20:ff:d3:b9:a6:12:bc:ea:69:13:19:94:
58:92:33:88:a7:7c:1c:ed:fb:98:8d:28:8c:f9:80:b0:43:89:
9e:00:1d:60:cd:24:d6:83:85:9d:57:87:27:24:a3:43:29:e8:
e6:97:6e:74:b8:c9:b4:9f:41:2a:93:69:22:ca:4a:45:99:fc:
2f:6c:5d:e3:b5:c4:83:c4:39:ea:1d:d0:3d:e1:28:b2:eb:45:
a8:04:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:51:18 2024 by rpki-client on console-ams.rpki-client.org