Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: QWfVUqOgNqFaJCERfHkf9o4AozzXRmsvLixWE/P+jPY=
Subject key identifier: BE:77:A3:C4:55:52:2B:F9:19:2C:FE:A9:7C:AD:EE:5D:3E:88:6A:70
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 0193550832E79B17FFDAD367E4F2809AB732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 038C
Signing time: Fri 22 Nov 2024 18:00:20 +0000
Manifest this update: Fri 22 Nov 2024 18:00:20 +0000
Manifest next update: Sat 23 Nov 2024 18:00:20 +0000
Files and hashes: 1: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: AtFC54B7QMq5YsYkSBhGZRkGNm0qNfSDBaJ80LSf3rw=)
2: ulzFEABpj3W4MgmEUXlVDFEnVpU.roa (hash: 4rTktBKhjVFWQWXeh0K3HuG8bEoz21TGjAOcfw7caHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:32:e7:9b:17:ff:da:d3:67:e4:f2:80:9a:b7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Nov 22 18:00:20 2024 GMT
Not After : Nov 23 18:00:20 2024 GMT
Subject: CN=be77a3c455522bf9192cfea97cadee5d3e886a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:08:8b:04:23:d6:34:d6:3a:6c:90:9c:57:
a5:24:1f:72:d3:28:82:f4:7d:57:be:bc:bc:ec:3b:
4e:e4:6b:90:98:0c:7d:75:90:8d:27:e2:f6:e1:99:
dd:6e:26:df:0a:94:26:44:1c:59:20:2a:7c:65:d4:
22:17:25:8c:73:60:2a:26:98:24:a2:c8:88:ae:d6:
d9:b7:4b:d2:ec:eb:21:3d:ae:49:e3:ac:1e:c1:8c:
96:c4:a1:e6:82:a9:fb:e6:6b:8f:80:a0:83:8d:6c:
5f:b4:25:68:72:18:58:62:f6:ed:ee:01:ad:62:5e:
cc:cc:12:6c:6b:43:2f:4b:70:f4:5f:4f:b3:74:ea:
cb:7c:6a:52:ba:53:7f:61:a9:cd:20:03:46:09:77:
58:ac:28:7f:a1:16:18:28:85:c1:b9:da:d5:e9:dc:
25:cf:3d:43:f6:ba:fd:73:2f:ee:54:91:25:51:5a:
0a:39:fc:d9:e5:ae:6f:4b:28:db:26:e0:07:bf:c8:
3a:b4:1f:24:c7:38:44:e7:88:98:72:22:16:12:78:
90:d5:4c:06:6c:af:6e:3b:72:79:03:23:b2:d6:a0:
2c:17:07:13:84:4d:a8:dc:ab:7f:68:0d:d1:1e:7b:
f1:42:cd:75:69:4a:42:de:9a:a7:31:d1:59:0a:5b:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:77:A3:C4:55:52:2B:F9:19:2C:FE:A9:7C:AD:EE:5D:3E:88:6A:70
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4d:51:ab:43:1a:fc:10:70:4d:0e:04:70:dd:66:21:06:e4:
7f:18:1c:3f:73:9c:8b:6d:85:59:14:25:80:7c:65:1b:37:8f:
2f:88:8c:03:19:d1:a5:ce:b2:a8:28:62:d8:3f:a9:4d:9b:98:
04:fb:16:72:a8:d1:91:89:bb:d5:2b:36:61:2e:18:77:b3:d5:
66:98:a8:b0:39:82:1c:c3:8a:8f:c2:e6:5f:5e:c7:1d:c6:e9:
9d:77:fd:f8:8a:90:f1:10:a2:87:a1:d7:b2:d6:aa:c8:76:34:
7c:12:38:92:51:f4:96:77:35:1f:58:b9:a9:27:74:cc:a3:52:
4c:17:32:67:c5:6a:48:11:fc:15:65:a4:17:d2:4d:9f:d2:97:
fe:ef:1d:c9:c8:e2:f1:d5:99:96:b6:e0:75:c2:08:4d:f9:aa:
73:f6:58:af:f2:06:8c:f3:1c:f8:0d:d2:06:ca:9a:56:e0:c6:
3d:ba:7a:57:79:47:75:5c:bf:58:4b:6e:c1:c2:65:60:91:eb:
4e:36:5f:15:0c:01:79:f5:69:0f:93:cc:3b:db:37:d4:f5:2f:
aa:ff:16:e5:0d:76:ae:be:1b:23:36:3a:33:3f:71:8f:1c:66:
96:13:03:8b:86:d3:fd:57:1b:c6:a4:e8:50:cb:b8:72:3b:b5:
7d:71:6f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:29 2024 by rpki-client on console-fra.rpki-client.org