Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier: yWQ2jWxGF9kP6RJy+YYNBCSrJlxfowSZ45EYbTNq75M=
Subject key identifier: 32:9C:4A:20:A4:F2:F0:01:32:F0:DF:E6:15:C3:F4:5B:4C:E9:C0:59
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 0193617A902642A508D5F702D548633ECDA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number: 0928
Signing time: Mon 25 Nov 2024 04:00:42 +0000
Manifest this update: Mon 25 Nov 2024 04:00:42 +0000
Manifest next update: Tue 26 Nov 2024 04:00:42 +0000
Files and hashes: 1: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: JSlAy8UiEuCiRrgUXQk5GT5nZU3uP78pHQKsYxm/NxE=)
2: v9Lt3fGaEcduUjlPyMTA0-TU3m4.roa (hash: I2UdTH3ckCCUc0ttLHdJWn9TsqIWijWeNc//Mt1750g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:61:7a:90:26:42:a5:08:d5:f7:02:d5:48:63:3e:cd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Nov 25 04:00:42 2024 GMT
Not After : Nov 26 04:00:42 2024 GMT
Subject: CN=329c4a20a4f2f00132f0dfe615c3f45b4ce9c059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:02:cb:7d:37:c7:b5:de:54:02:05:af:6d:16:
90:84:1c:53:92:5f:f0:6c:a2:8d:88:03:8a:74:96:
33:da:f8:1b:d4:2d:70:44:6f:aa:45:3e:66:a7:72:
dd:35:98:42:c1:31:f1:27:40:55:fc:4d:5c:32:38:
d0:48:d6:d0:e4:22:f2:47:3c:2e:8a:77:e4:d7:60:
27:8d:7e:f8:4d:96:b0:88:a9:91:07:02:e5:b4:c9:
ea:50:54:9c:40:2f:e8:99:ad:23:25:8d:9f:29:3d:
7f:ac:6a:58:0a:55:9d:25:c4:9a:c1:6f:22:2b:11:
19:62:0d:5f:84:bf:cb:47:4e:46:6e:da:5d:0c:8c:
8c:e2:92:61:32:ef:aa:08:76:5f:75:50:e2:48:81:
78:73:6d:d6:65:ae:8c:d0:6c:dd:b0:4e:dc:7d:0a:
de:de:74:bf:c6:cb:76:e2:d2:f6:7b:fb:bc:4a:8b:
9c:45:1c:91:72:fa:1b:ed:9e:7a:6f:f6:4d:13:a0:
ad:31:d0:fd:c3:e3:58:6f:25:af:f7:7c:e3:7a:52:
e2:d0:af:57:49:b4:83:fe:6b:0a:26:93:87:78:e3:
73:83:fd:fe:d2:6f:b8:27:34:88:1c:43:72:cf:b1:
9d:57:d7:41:b6:c3:5c:7d:41:43:28:37:18:3c:f9:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9C:4A:20:A4:F2:F0:01:32:F0:DF:E6:15:C3:F4:5B:4C:E9:C0:59
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:32:af:80:51:69:00:56:2a:70:fa:f6:82:94:90:d3:e3:af:
16:91:f2:b2:f9:75:1d:34:35:9c:a0:e7:07:81:ff:eb:d9:fc:
fa:2f:bb:22:f5:3d:58:7b:a2:06:56:8d:b4:5e:24:45:e4:9a:
e7:ce:d1:d0:48:c5:b7:16:09:6c:44:7c:df:cf:16:6d:bc:8c:
a1:43:3f:ef:f2:9f:b0:d6:fc:0a:aa:49:6e:fb:c3:0a:43:cb:
d2:f5:63:7c:80:d4:c2:d8:c0:0b:1e:26:bf:d6:d6:6c:2c:11:
25:ca:32:a5:d2:77:9f:c3:98:57:a7:ee:f7:86:6f:f3:b3:a4:
4c:15:51:85:0f:77:aa:b8:6e:55:9c:66:45:b6:54:ab:ef:7a:
c5:a5:46:0d:78:74:9f:71:21:42:9f:f4:02:03:35:ae:fa:b9:
b5:ac:46:84:fb:7c:5f:27:e0:e6:0b:09:da:cf:b1:bd:73:d4:
1f:0d:be:3e:b2:c2:cc:67:ee:ee:f5:4c:61:65:28:2c:3f:32:
1d:d8:1a:51:3e:ed:93:3f:90:45:c9:60:27:45:6d:a4:a8:62:
5c:c8:7e:f0:be:94:d7:7c:5c:5e:0c:7b:31:ac:dc:ea:3a:37:
d9:2d:35:df:aa:71:6e:e6:3c:b7:4c:97:5b:e2:2d:1f:27:03:
a5:99:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:07:45 2024 by rpki-client on console-ams.rpki-client.org