Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: VTYGkNzRyRBgodYnN49bukP3DMAIeovOrTerY51Ks6I=
Subject key identifier: 05:50:9C:71:5E:48:5A:DE:06:2C:3C:32:35:01:E2:E1:08:11:66:90
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 01935207524E679D37C6680351B15A819066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0857
Signing time: Fri 22 Nov 2024 04:00:31 +0000
Manifest this update: Fri 22 Nov 2024 04:00:31 +0000
Manifest next update: Sat 23 Nov 2024 04:00:31 +0000
Files and hashes: 1: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: 6y2Hay/2Zt6Ae9YsvmFY0NoGB+DvKqNUxZEytZzUbnU=)
2: oO73xnVmghPdJHnSUgx6oeBeigE.roa (hash: ZSF1KyRURnq3ymIVmy/+YRXXjOXqyDXQrF1ze2a8DoQ=)
3: wbBdIZ72KmkGPINWNX-dv5PQlvI.roa (hash: RyHYhPLqMM0Zs8CjVO4mQya9Yecue77o/Ld42R+L3ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:52:4e:67:9d:37:c6:68:03:51:b1:5a:81:90:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Nov 22 04:00:31 2024 GMT
Not After : Nov 23 04:00:31 2024 GMT
Subject: CN=05509c715e485ade062c3c323501e2e108116690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:07:c6:69:83:23:f4:11:b0:da:cf:3f:30:
c1:7a:e8:15:92:0b:e0:63:e5:27:40:7a:ed:7b:5a:
d4:5f:88:9c:7a:46:99:32:e6:86:07:32:c0:f1:bd:
e1:e6:5c:57:94:c5:32:b8:83:36:31:80:c0:ed:98:
3f:4b:8c:74:8f:dd:00:71:43:3a:78:18:b1:59:44:
dd:70:4b:aa:cb:d4:63:3a:4a:51:a3:df:f1:fd:26:
c7:30:dd:c8:c6:bc:ea:b1:dd:79:cb:a6:66:aa:04:
3f:de:cc:19:89:91:a7:9f:84:51:88:92:56:0f:ef:
02:e0:7c:71:59:ad:ea:a4:17:54:65:76:dc:3a:ad:
c8:bf:11:f6:17:31:ee:26:04:2b:b9:23:cc:60:39:
75:ec:d0:fa:a6:16:25:98:2d:9f:5e:d8:6c:9e:37:
3d:95:d4:db:3b:66:b3:1c:eb:11:25:3c:bf:31:76:
1d:93:23:52:18:3e:20:9c:f4:4a:7c:84:80:25:0e:
8e:72:3d:59:cc:d2:c3:82:2f:0d:6e:22:af:80:ca:
93:b4:98:55:96:da:06:bf:08:55:eb:39:fc:2e:1e:
ca:88:98:bc:27:a0:b6:49:e0:ff:52:84:08:81:25:
9c:bf:f6:01:c0:cb:6a:5b:d0:80:29:fe:17:92:ea:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:50:9C:71:5E:48:5A:DE:06:2C:3C:32:35:01:E2:E1:08:11:66:90
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e4:13:dc:c1:f3:10:21:c3:14:35:15:37:00:74:18:49:72:
68:6b:d9:d0:b6:43:0e:4f:3f:64:04:b7:28:4d:d0:b4:9a:b9:
b7:71:53:c4:97:ab:da:78:53:79:fc:e3:53:f2:03:01:e1:ce:
d1:45:08:03:d8:6a:45:01:ea:29:c8:fb:81:08:50:8d:97:56:
90:f8:0b:d3:db:03:60:7d:91:22:32:03:c0:d0:a0:60:2a:a5:
71:5d:4c:fb:c0:c0:ee:14:a3:74:22:21:c1:05:f9:e4:a8:04:
b7:12:71:f0:46:cc:21:39:bf:ce:b3:db:bd:21:c5:40:80:7e:
78:84:66:e4:a5:30:66:35:aa:10:5d:0e:f3:76:8b:9b:0d:24:
2e:53:f5:24:77:72:f1:76:bf:3a:b4:50:e1:e5:8e:81:12:02:
54:24:7d:33:50:34:74:81:7c:5b:44:bd:51:5e:23:7a:d6:0c:
d0:0c:2d:c5:12:b8:fe:ac:93:b4:55:fc:00:99:ad:7a:c0:e4:
d3:68:57:5f:c7:a0:8f:12:06:09:78:89:0b:78:5a:9a:a9:45:
b2:9a:c7:d5:9a:30:f7:35:70:7b:c6:c7:31:20:23:c9:83:db:
ed:8b:10:a0:34:3b:3d:22:8d:53:cd:d3:61:1f:0a:b8:0d:a6:
90:22:ea:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:23 2024 by rpki-client on console-fra.rpki-client.org