Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier: jaxoL7heXRp801WjUUQ60INxtSvCuv1nZEt+Kgrd0UI=
Subject key identifier: 43:CA:B6:C4:5F:A9:80:8D:B3:11:FA:3A:19:27:07:27:AA:D1:E5:07
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 0193579BD467EC7DD3FD5D82DA036CC4D102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 06:00:50 +0000
Manifest this update: Sat 23 Nov 2024 06:00:50 +0000
Manifest next update: Sun 24 Nov 2024 06:00:50 +0000
Files and hashes: 1: b7uA8D8D-ikPeMGQhnz1YTQ3Fpk.roa (hash: BHi6qqx7QzasRGGtvWY5t6ZCrpQJsOM7XcTyXMYLTyc=)
2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: nh+BwcySyo3CazIgbOnfJojuE7Z/aTBwpI5IliswZRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:d4:67:ec:7d:d3:fd:5d:82:da:03:6c:c4:d1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Nov 23 06:00:50 2024 GMT
Not After : Nov 24 06:00:50 2024 GMT
Subject: CN=43cab6c45fa9808db311fa3a19270727aad1e507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:35:45:62:ed:59:c1:45:8c:53:0a:9b:96:
02:6e:1c:c3:8c:0f:73:40:dd:36:c0:c5:3c:d9:a2:
84:f5:4b:01:b8:81:72:85:70:68:73:b8:4d:b3:56:
f7:eb:3d:ca:cb:8e:88:13:20:f3:62:be:76:c6:6f:
cc:1e:6c:c2:a4:cc:d0:42:3a:80:ca:4d:33:4d:89:
d4:d4:15:84:55:c0:7e:35:d2:e5:79:19:fb:31:6b:
17:b5:03:c0:dc:f4:1c:40:a4:9c:62:35:fc:8b:ad:
d5:32:d4:9e:9e:c1:18:26:58:31:bc:cd:41:df:3b:
a4:75:47:86:3b:9a:42:b7:81:5b:a6:af:94:9a:e4:
d8:e4:e8:77:b0:a2:e6:21:7b:b7:73:81:e8:7e:e7:
ca:f1:4c:39:b2:5d:fe:12:cf:e8:06:8c:5f:6b:e6:
88:71:e8:39:3e:1f:98:34:ad:f6:42:19:3b:95:ad:
f1:03:c1:7e:3b:46:ec:49:86:cc:5c:2c:63:c2:93:
e9:2f:6b:2f:5e:7b:77:d4:cb:11:e6:f9:d8:e7:5d:
13:dd:1c:31:71:6e:fb:ad:35:39:3f:53:f9:ca:2e:
1c:37:32:05:51:34:df:e3:ea:b4:34:b1:8b:4d:3c:
49:67:17:ac:cd:64:7b:63:dc:9e:81:0f:5d:f1:8c:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CA:B6:C4:5F:A9:80:8D:B3:11:FA:3A:19:27:07:27:AA:D1:E5:07
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fd:42:b7:91:18:c7:11:f1:95:73:2c:86:95:7e:83:45:0d:
c1:8a:70:fc:4b:a3:d7:c9:58:fe:20:55:82:ed:60:f5:b6:dc:
38:dc:08:b1:d6:a0:55:62:f8:26:6e:02:bc:9b:ff:af:a4:f6:
45:21:b7:2c:3f:c0:d5:a0:ce:d4:3c:a8:14:45:24:86:83:75:
74:81:d3:c7:9b:c4:fe:00:33:11:c0:e7:a7:34:16:58:17:57:
7d:4e:20:f6:fd:8d:d1:79:7d:81:f8:55:a8:50:5f:ef:77:90:
6d:d5:b9:9c:02:ed:91:0a:5b:dd:2d:15:81:77:15:32:20:35:
c6:d8:f4:dc:b7:7c:82:68:80:63:0f:60:36:ce:8c:04:74:4c:
72:8d:9e:d3:49:7e:9c:f4:20:43:fe:13:98:f0:51:63:8d:7c:
f3:a9:17:ce:f2:cc:a7:bc:35:de:70:85:2e:05:2b:9a:7a:98:
57:9b:6c:55:c2:d0:e3:65:99:3d:36:c9:df:b0:3e:92:e7:3a:
3e:cf:dc:a4:6d:14:c6:0c:38:72:67:15:af:e4:e8:b9:7c:e2:
cc:45:d6:94:b0:36:ac:f1:2b:40:08:13:07:f8:f7:47:b8:74:
05:84:3a:96:c0:93:41:c0:97:2e:7f:6d:35:4e:a5:b1:ae:52:
21:0a:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:08 2024 by rpki-client on console-fra.rpki-client.org