Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier: I+LLjvd/MCq53Jhlk5vHLCBHySKWA+5xptrNEBVUB0E=
Subject key identifier: 3F:6E:D3:02:DB:B0:8A:62:E8:18:E8:26:9D:ED:54:B9:97:08:7C:34
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 019358E5715297E57280ECA484A4EBC9B079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number: 1203
Signing time: Sat 23 Nov 2024 12:00:51 +0000
Manifest this update: Sat 23 Nov 2024 12:00:51 +0000
Manifest next update: Sun 24 Nov 2024 12:00:51 +0000
Files and hashes: 1: AV9CRX7lmTCc6GiIB9AhztHDQH8.roa (hash: avTjSORCfSpHNnGS9iKwoelJhRj1BAFKAzEYLASj++Y=)
2: HI1gRqYcsBQEA0gJUy_CB8vGUTQ.roa (hash: tnF7G1LPxAHiuOg1UiNbStFHEPcqkW70yTDAcJkZ/xY=)
3: NF5dCK3ro94upZ4jxfRhAfO6zcw.roa (hash: KbcOrVdni201rwCjhihrhI5cxPkdnYBOFHx8VTZXzpA=)
4: gXsnJLvq4RrJMSAItrBhvLUwjUI.roa (hash: uaMt2RM6isuZ2VdSSk5IkaM3w/d33BhNRJN6sjz20MA=)
5: giC_SNoQ789b8qQg47muxMxKeTU.roa (hash: NwcxZB6wPvwXoUeqMUplmFCX1Vj1Kgw6D2UzZyDXpbY=)
6: k-X-FBMD1vFJaKVIMx4D3da3teQ.roa (hash: 3hQn6E4ou8HLCMPGsS5R8ZCGGRHQDvhbCgIh7xwoyK0=)
7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: cRskIc0wa6NogAzfBu6oONEgpumHhErgdG411WVy3DA=)
8: zrD2bHxMbNqX9h1vgZ78C7pq7w0.roa (hash: idRqYHF5sdoRm+Ej+1aBGEG3u+00jq3PN3DsN0cTo8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:e5:71:52:97:e5:72:80:ec:a4:84:a4:eb:c9:b0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Nov 23 12:00:51 2024 GMT
Not After : Nov 24 12:00:51 2024 GMT
Subject: CN=3f6ed302dbb08a62e818e8269ded54b997087c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:01:bb:25:dd:dd:29:a9:2b:8d:05:40:2a:
8a:a8:9c:49:fb:27:3f:93:ca:0e:28:4a:b7:02:09:
a8:15:59:63:78:fa:e6:ef:51:8f:d5:53:a7:6a:46:
82:93:52:78:24:7b:2f:cf:fb:fd:59:b2:69:f3:e4:
e7:44:1f:e6:5a:13:ec:ad:f6:7b:a4:41:35:7c:a9:
7c:35:3a:3c:20:b8:36:38:55:72:db:89:64:03:91:
b0:1d:1d:14:ed:57:4a:3f:32:17:6f:39:70:5d:6e:
d8:c2:63:97:9b:c9:1a:54:c4:e4:a6:a5:b8:90:56:
a0:37:59:d8:18:c1:5f:ac:22:7a:26:d4:57:7c:d2:
b1:4d:b1:73:c5:da:ac:6d:02:da:b3:dc:ff:93:2f:
a3:83:bb:0f:d0:f4:83:50:6b:cf:3b:b7:1d:aa:67:
88:92:ff:c7:ad:c0:6e:55:67:28:f8:38:5d:c9:97:
ef:67:c2:1c:a6:8f:5d:6a:5d:eb:b3:e7:aa:b4:8f:
d0:96:d4:0e:ae:f5:8f:32:12:b3:82:af:1e:ba:90:
8c:3b:9f:24:c2:a3:1c:a5:0f:34:b9:1e:d5:bf:cb:
db:26:cc:d0:bf:02:cc:0f:66:3b:40:0d:4d:fa:5f:
9c:78:f9:ab:83:60:7f:f3:21:01:fa:68:f9:92:51:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6E:D3:02:DB:B0:8A:62:E8:18:E8:26:9D:ED:54:B9:97:08:7C:34
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d0:e5:42:12:6f:ce:42:51:39:22:55:1f:ae:b5:17:f2:df:
2c:24:91:21:40:cc:49:45:33:b6:91:28:ad:8c:0c:e0:a9:b4:
5e:97:56:08:41:0c:ac:c4:ce:17:75:12:3b:83:fc:3d:af:43:
0b:3e:6f:76:6e:80:8b:f7:55:36:ba:6b:2e:be:03:8e:77:db:
d4:40:7c:f0:12:79:0b:7d:f1:ca:1d:87:d8:73:65:23:c2:a0:
cb:06:14:da:8a:15:57:9a:f8:f4:49:65:ee:a6:0b:07:d6:e9:
ce:a2:de:ff:d9:c4:43:12:ec:cc:a8:8c:dc:0a:09:39:26:20:
b0:2c:ea:a5:40:8d:ff:e6:50:db:24:d7:5b:1b:56:ac:8c:78:
1c:f2:2d:4c:45:c1:d3:3b:9f:8e:cc:e7:8a:f8:6c:35:18:c7:
be:06:d7:36:20:9e:7c:13:2f:76:36:f5:2f:d3:16:93:51:94:
ec:64:6c:0c:62:86:ea:79:11:c6:5a:26:65:0e:5a:a9:48:5e:
d9:25:4d:bd:29:25:91:63:e6:10:04:d6:22:81:d5:59:6a:3b:
b3:df:45:c5:d6:02:ed:2c:29:a9:ae:18:3b:ec:f6:c8:91:e3:
d6:e1:d5:ec:8b:29:3f:86:3c:0d:e0:28:fe:a7:e1:6a:fc:41:
8c:fb:d3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:52:52 2024 by rpki-client on console-ams.rpki-client.org