Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.mft
File: xfn1DKHDSjvmEASNE4rzwHU6-Ss.mft (raw, json)
Hash identifier: 9zcYjBMHPvKcjbWiRYPJqjSkT+8jQrdn/pljQ0qRpoA=
Subject key identifier: F9:1C:41:C4:7F:A1:8E:FC:48:61:2E:80:19:8A:FD:67:EB:2C:02:4B
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 019355ACF63ABBDE8E503FDFC5FB04536AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.mft
Manifest number: 4B
Signing time: Fri 22 Nov 2024 21:00:18 +0000
Manifest this update: Fri 22 Nov 2024 21:00:18 +0000
Manifest next update: Sat 23 Nov 2024 21:00:18 +0000
Files and hashes: 1: QXIFSJn5XnNmunv220FXvb5iEBw.roa (hash: 4hL8B7fttYYpPHUHvYatvajSs7A11Xtumh3RifQ0nuc=)
2: xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl (hash: cCUIoVvoOlsLi3HIXWYJPVnQd1oQ5/+p3Jx3PQg4zms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ac:f6:3a:bb:de:8e:50:3f:df:c5:fb:04:53:6a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Nov 22 21:00:18 2024 GMT
Not After : Nov 23 21:00:18 2024 GMT
Subject: CN=f91c41c47fa18efc48612e80198afd67eb2c024b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:27:a8:54:b1:51:23:91:9b:98:9e:35:41:
ee:7d:fb:e3:21:6c:b5:a9:bc:e1:d8:82:02:b6:a7:
5b:de:09:60:de:41:67:ec:c9:a2:db:71:42:1e:a9:
0c:b7:43:f9:bc:ec:ab:02:1e:7b:20:d8:57:ec:5e:
32:46:14:be:50:9e:a0:f1:04:d7:8c:4b:00:77:2e:
71:5b:fc:88:d5:a6:13:35:77:b3:9b:1a:79:52:ce:
35:ca:d5:86:e3:ee:a9:d5:36:53:cf:3a:a6:6c:8f:
ba:be:d1:3e:10:27:68:48:e4:7b:bb:84:6e:5a:7d:
d4:be:21:44:14:09:5a:ed:0f:04:c3:84:b6:a0:3f:
b3:5f:07:b8:0e:4a:19:c1:fe:0a:f7:32:99:e5:34:
c6:79:a1:83:81:0e:ef:59:28:8a:6e:be:ab:3e:68:
a5:42:4a:b2:7a:25:ea:41:93:38:ef:18:e4:b5:c4:
13:f9:fa:16:f1:1d:2f:d5:e8:97:f9:59:bf:2c:b6:
c0:33:4c:54:b2:bb:59:60:27:8f:ef:0d:14:cf:94:
1d:a9:61:b6:03:88:b7:fd:84:59:c9:a0:d8:8e:2d:
f4:55:7d:a0:35:45:5f:a2:25:ee:1d:ef:76:2f:7c:
9b:94:74:c5:fa:55:4a:28:e4:4c:dc:07:b1:4e:6b:
c2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1C:41:C4:7F:A1:8E:FC:48:61:2E:80:19:8A:FD:67:EB:2C:02:4B
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:68:be:c5:81:88:cf:cc:26:45:7c:b9:cb:6f:45:cd:6f:f6:
cf:13:ea:ce:fa:71:b6:8c:8d:d5:c4:58:75:b1:71:53:a4:09:
de:2f:61:ab:94:46:7b:a7:13:f6:bb:ca:1b:19:c6:a4:db:ea:
1a:b4:ab:52:96:c1:78:17:eb:5e:7a:b7:14:3d:15:0e:4c:a6:
8d:44:55:44:1b:a2:bb:4e:02:19:19:f0:8b:ae:2b:b9:5e:22:
1a:52:c9:60:d0:d1:c7:29:74:bb:b3:a7:96:55:d6:ce:73:b0:
a7:05:21:ba:3d:de:34:d0:57:d4:2c:c2:37:a5:a6:f0:87:ae:
4c:6c:bc:cd:a0:cb:51:d9:60:54:34:c5:ab:1a:4c:0c:bd:1a:
d8:76:dd:7e:93:ad:8d:ce:5d:12:6e:b5:f5:53:42:b0:d2:a6:
01:9e:8f:37:b2:06:a8:2a:b1:7d:4c:f6:d4:19:e1:1e:b4:df:
6e:cf:38:47:05:7a:09:65:80:0c:57:6c:14:ba:c4:5c:c9:ef:
65:fd:24:6f:28:e3:c0:9c:cb:d1:e8:cd:40:ce:9f:88:b1:77:
61:dc:40:7b:cb:3f:68:09:54:75:f2:fe:c9:32:27:b4:e8:68:
b2:a4:e1:9d:43:0e:4e:45:33:e7:bf:1e:21:17:a3:ce:5a:2a:
24:b8:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:35 2024 by rpki-client on console-fra.rpki-client.org