Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
File: xhMz0OgQeIbQMFx72BvdNUiVJ64.mft (raw, json)
Hash identifier: 6tjlLuRW+WG+LrEeMw8lDwbFD3U0iRsKh7fj+mPqcxo=
Subject key identifier: CB:DD:B5:94:9F:A8:5E:64:C7:9C:72:98:13:16:7E:50:EF:BC:E5:13
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 0193579B9CB56B3B2B22611DFB6877F4A277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 06:00:36 +0000
Manifest this update: Sat 23 Nov 2024 06:00:36 +0000
Manifest next update: Sun 24 Nov 2024 06:00:36 +0000
Files and hashes: 1: A9WEbB-i8o5GzOL1FsT6VAtTDwk.roa (hash: aluYy7INEIaMtfKG8AKBbnLxKeyb98BHZd33AOT9a3E=)
2: xhMz0OgQeIbQMFx72BvdNUiVJ64.crl (hash: xjWk+SCPzX3fnyCMJgJ/az0c6nKoWUbAgCdDCfCYDwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:9c:b5:6b:3b:2b:22:61:1d:fb:68:77:f4:a2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Nov 23 06:00:36 2024 GMT
Not After : Nov 24 06:00:36 2024 GMT
Subject: CN=cbddb5949fa85e64c79c729813167e50efbce513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:b8:b5:ce:42:7b:b3:9e:fd:0c:e2:b5:d9:
b6:5c:eb:15:46:de:2b:b6:1f:86:19:e8:a8:f1:4a:
5b:fd:f9:1f:8d:7e:6b:4f:2d:3a:c2:63:aa:be:42:
5b:84:51:83:c3:22:aa:0b:6e:dc:68:48:f1:5e:77:
2b:d2:f1:bc:92:8c:89:9f:c9:37:1b:66:db:12:d1:
ff:35:9f:e7:0b:87:72:7f:c6:3a:56:02:bb:36:4d:
4a:ba:87:fa:ea:a2:e4:49:cd:27:23:7b:a9:f6:67:
e9:07:0a:98:4a:09:bf:2e:b9:c1:05:b9:14:2e:a4:
74:fb:4b:9e:9e:14:cc:0b:57:5a:16:5e:28:44:f1:
a7:d0:88:cb:bf:7e:05:85:01:ef:c9:16:16:45:7b:
1f:6a:ad:fe:da:d0:03:09:ec:b1:8d:38:69:e6:e4:
e6:94:27:ba:15:fe:74:51:9e:e3:87:08:25:09:9d:
5a:14:da:94:bd:eb:ec:b1:17:6c:11:ac:9c:2b:d3:
e7:52:db:b6:8b:3b:5f:33:e5:ea:92:cf:4a:38:00:
6e:26:53:83:1b:a3:f5:ad:18:5e:a2:8a:ed:72:57:
24:16:90:e3:23:f0:46:85:bd:d3:30:3c:75:39:04:
f5:40:de:ee:1c:ba:ed:58:a4:ac:cc:0b:87:07:b2:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DD:B5:94:9F:A8:5E:64:C7:9C:72:98:13:16:7E:50:EF:BC:E5:13
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bd:37:8c:f6:0d:90:b0:5a:23:40:f0:9a:d0:22:07:d0:40:
54:d8:c5:60:d1:0a:86:8e:da:ef:55:3a:4a:3e:d5:42:39:05:
59:88:17:12:f1:64:ea:89:a5:29:c6:54:fd:86:5f:fa:2f:04:
ee:71:df:0c:cb:11:bb:e9:8b:03:9e:a0:00:44:b9:1a:32:59:
d6:ff:38:4b:ce:ed:77:76:94:af:01:dd:d3:53:ac:ac:d4:9d:
34:b8:40:4d:e2:35:80:0b:9d:fe:1a:bd:c7:e4:a0:01:ad:4e:
cc:72:fd:27:60:ba:f9:aa:47:b1:c3:43:7f:31:04:f0:58:8a:
90:fc:17:db:82:5c:ba:41:c6:d4:88:f3:93:43:76:82:4c:33:
f8:8b:70:dc:4a:0c:24:4e:97:bf:76:82:12:e6:5a:fb:56:c1:
0b:5a:9f:3f:12:d9:d8:d1:31:bc:45:6a:b1:8e:62:da:25:df:
86:3b:d7:24:15:1d:63:ab:53:1e:07:c3:03:45:b9:b7:f2:a2:
e3:59:b9:c0:1d:91:39:04:ef:72:a1:5d:56:14:90:a0:ec:c1:
72:89:43:73:7e:84:24:bf:b5:b1:e4:dd:72:e5:69:e9:ef:d0:
e2:fa:80:3a:2b:1e:6f:02:74:e0:39:23:f3:47:87:18:7e:6a:
19:03:c0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:54 2024 by rpki-client on console-fra.rpki-client.org