Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
File: xUIOtdlPD6uGLghAQU9DK3heYFQ.mft (raw, json)
Hash identifier: Y0EE97PveYee4PN2Vm6rPyzVrvPyl0l34B244pzq0ro=
Subject key identifier: EE:7A:3A:76:3E:EA:60:2C:4C:BA:0C:30:A6:32:40:D7:7E:2B:42:79
Authority key identifier: C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
Certificate issuer: /CN=c5420eb5d94f0fab862e0840414f432b785e6054
Certificate serial: 01936A7D99F00B204151970BB39ECB9FBCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
Manifest number: 018F
Signing time: Tue 26 Nov 2024 22:00:36 +0000
Manifest this update: Tue 26 Nov 2024 22:00:36 +0000
Manifest next update: Wed 27 Nov 2024 22:00:36 +0000
Files and hashes: 1: Z3KBABiqWZcaTP-LR48ilDGmr80.roa (hash: 29KqLZnznCR6BdzPVF+Lq6aPDIO780NX73twzGt8BAI=)
2: xUIOtdlPD6uGLghAQU9DK3heYFQ.crl (hash: XJh1PlmOxau+EsvvTd7t3DVKKEj2k0FYIfLdTp788hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:99:f0:0b:20:41:51:97:0b:b3:9e:cb:9f:bc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5420eb5d94f0fab862e0840414f432b785e6054
Validity
Not Before: Nov 26 22:00:36 2024 GMT
Not After : Nov 27 22:00:36 2024 GMT
Subject: CN=ee7a3a763eea602c4cba0c30a63240d77e2b4279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:43:58:be:d7:c8:ef:83:bf:32:63:7f:8d:
1c:3a:6d:8f:aa:5d:26:33:5f:c6:b1:fc:99:95:74:
fa:ed:b4:d0:a8:30:1b:7c:01:67:70:a4:2d:fa:15:
fd:55:df:5d:3b:a9:6b:b1:b3:5e:54:40:84:f1:3d:
68:2d:5f:8d:8f:c3:29:c8:dc:57:c4:5f:ba:b0:99:
4e:4a:9d:c6:7d:f9:b6:6e:10:4f:7c:56:03:cc:59:
76:44:f8:d3:60:8b:56:27:74:11:2f:5a:5d:ed:c6:
22:32:b5:3a:bb:93:71:fd:2e:b4:88:92:a7:e2:ee:
a1:c0:d4:aa:91:9b:e4:32:91:b9:ea:2a:ad:53:82:
a2:af:d7:da:39:9b:af:a6:3a:a6:72:f2:d6:9e:88:
64:f0:59:e5:0e:b2:39:83:a2:fb:ac:70:52:37:ab:
64:51:6d:87:df:53:11:76:91:20:06:85:21:bb:14:
da:ff:5c:54:cd:a9:eb:32:4a:6d:8c:b7:5b:95:3c:
da:b8:da:fe:64:ec:62:a9:65:55:41:50:59:49:e7:
cc:78:53:d1:da:ba:08:3d:78:7b:f1:e4:aa:d9:50:
12:ac:53:56:a2:77:13:5b:60:bd:34:30:f7:c6:c8:
cb:60:48:dd:f5:8a:cc:b0:a8:1e:e4:ff:28:8c:78:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7A:3A:76:3E:EA:60:2C:4C:BA:0C:30:A6:32:40:D7:7E:2B:42:79
X509v3 Authority Key Identifier:
keyid:C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a4:3d:9c:ab:ee:38:b8:2b:79:45:f1:ba:42:58:d0:5a:67:
e0:bb:09:3b:87:c9:97:8b:9d:cd:46:e4:16:76:46:25:69:f7:
13:36:21:d1:bc:cd:b8:60:82:b3:f3:33:09:f6:85:a3:00:36:
b0:8f:e2:de:7b:28:d5:bf:7a:89:f9:3a:3c:5b:8a:05:e2:ff:
0c:e6:7c:ff:e3:50:13:7c:8d:cf:29:02:17:04:f8:31:0e:3c:
05:39:c0:42:c8:9b:32:97:39:30:98:11:6d:2a:96:12:d3:48:
cf:cc:e9:66:39:e5:c9:0d:7e:69:49:31:e7:6c:18:11:c8:71:
8f:2e:cb:9a:71:fe:95:32:c6:c7:89:f7:cb:ac:38:0c:01:cb:
cb:e8:ba:16:aa:e4:d2:45:16:16:7f:24:f4:d5:9f:3c:42:10:
28:b7:5d:f5:a9:b3:a8:98:8b:bc:0f:c7:fa:ee:22:c7:01:17:
bf:42:86:2d:6d:3c:30:88:f6:d7:75:f4:99:71:2a:78:78:32:
fe:e6:e3:1f:3c:3c:25:2e:d1:57:f5:48:69:0a:48:0b:1f:df:
a7:44:d1:47:73:fd:d2:43:dd:c0:1c:60:c7:46:e8:a5:2f:2a:
ec:0a:b4:b2:c0:12:50:93:3b:12:55:aa:3f:b7:b6:b4:e3:ab:
01:be:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:21 2024 by rpki-client on console-fra.rpki-client.org