Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
File: XD6sD3atIc1SRFk-TBe6Zxtejuk.mft (raw, json)
Hash identifier: i5JZPk+e4tOPcow/8lOE+hXvRHteVBslSiSILv588kg=
Subject key identifier: 21:F4:00:76:CC:28:71:47:09:BE:6D:68:FD:4F:A8:E9:69:B2:31:48
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 01936A7D992C675E5A82C1C76220BD44101E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
Manifest number: 0FDC
Signing time: Tue 26 Nov 2024 22:00:36 +0000
Manifest this update: Tue 26 Nov 2024 22:00:36 +0000
Manifest next update: Wed 27 Nov 2024 22:00:36 +0000
Files and hashes: 1: FXi1vQVx5ubWeAw4ZDMD4VBZ2yc.roa (hash: /xZavsExFDgX790W8KQRVd78IuqSI5reHzufc8rnc8w=)
2: XD6sD3atIc1SRFk-TBe6Zxtejuk.crl (hash: VDqGlDduLhxytuoG0Hc/fzhGuPfP9ZWgFvxqdbHw7Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:99:2c:67:5e:5a:82:c1:c7:62:20:bd:44:10:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: Nov 26 22:00:36 2024 GMT
Not After : Nov 27 22:00:36 2024 GMT
Subject: CN=21f40076cc28714709be6d68fd4fa8e969b23148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:92:38:5c:48:3f:2f:ac:cb:55:fc:a6:41:
ad:4d:f4:77:d3:7c:b5:71:bb:d3:e1:bc:75:9b:31:
26:06:48:23:3b:d7:00:68:df:1c:fa:9d:f0:3c:23:
24:c5:ee:c2:7c:33:76:b8:3c:c9:a1:5e:bb:d6:46:
46:f7:87:e7:ef:27:f8:7c:6d:d3:59:4a:2d:7b:40:
08:ce:4b:48:87:ee:d1:43:5c:a3:e2:76:d3:30:39:
d2:2b:22:cc:3b:4c:90:47:53:97:cf:ca:61:5c:fb:
f5:00:ce:c7:0a:65:fa:44:d1:ac:df:10:27:ea:88:
85:84:ee:27:d5:9f:8c:77:88:63:79:9f:14:3d:3d:
01:94:d9:ff:23:7a:68:7c:eb:dd:39:c7:e5:38:29:
13:cc:a3:56:52:e6:dd:51:08:48:77:9f:9b:1c:b6:
24:6d:4c:ca:6a:37:61:49:f2:bb:1d:f2:1b:1e:7f:
75:60:f9:c5:54:dd:58:27:93:21:21:4b:9b:fb:59:
32:2f:11:a1:64:a5:e8:b7:48:38:0b:0b:b2:72:e7:
a8:08:c3:b9:f5:97:77:71:0c:11:c9:7e:5c:42:ef:
f3:0e:aa:f4:2a:28:ac:f0:e8:ab:fd:97:56:09:a4:
01:c9:c2:4d:2c:2c:7e:8d:af:c5:7f:8c:b4:c2:ea:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F4:00:76:CC:28:71:47:09:BE:6D:68:FD:4F:A8:E9:69:B2:31:48
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e6:c5:87:b6:d4:aa:f7:c3:2f:7b:35:f3:b5:1b:b6:e6:c5:
aa:c0:97:af:30:85:a6:0c:86:ba:11:65:12:0a:6b:db:05:20:
65:ad:41:da:09:9b:ac:5d:b3:1e:37:1c:8d:aa:8a:27:8c:3b:
20:d9:12:28:4e:2a:5f:1e:71:cf:af:a3:b8:59:6d:20:6c:3c:
1d:77:ec:cf:a8:d6:f0:6a:5d:2a:2e:25:07:13:d2:81:b9:45:
6a:71:99:e1:c5:3a:95:03:4c:b1:0a:95:6c:5b:9f:cf:56:33:
1d:f5:3a:0e:82:b8:14:df:76:bf:2f:7c:f6:44:80:68:0d:e3:
61:e1:4a:21:41:11:fb:16:25:e7:64:57:12:c2:7f:8e:a4:33:
e5:37:c1:48:37:a3:74:4b:32:4d:7f:38:17:6d:45:b6:aa:26:
22:0f:90:0f:0f:b3:06:b0:36:95:74:90:95:91:c8:89:07:e2:
86:34:31:36:21:bf:cd:3e:a8:47:5d:e2:51:09:33:59:fa:7a:
ea:74:0a:3c:c9:4f:09:84:13:c6:72:43:e3:99:4e:7b:d5:0d:
d8:e9:c0:4c:6d:b7:93:26:e3:dd:7e:b2:bb:21:07:6c:f2:05:
85:04:13:bd:4c:8c:ff:66:00:a9:4e:d8:45:67:b5:88:8f:d5:
b4:09:ed:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:58 2024 by rpki-client on console-fra.rpki-client.org