Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier: uDp8dv8mc1Luar9TMk0hCnhnO0E9FLftMVp2kbDYhdI=
Subject key identifier: 92:56:D5:7C:60:A8:14:62:A5:50:2C:A5:C2:52:0A:9E:9C:FF:BE:46
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 0193568931263D4631C9EF2482BCC8632EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:00:51 +0000
Manifest this update: Sat 23 Nov 2024 01:00:51 +0000
Manifest next update: Sun 24 Nov 2024 01:00:51 +0000
Files and hashes: 1: BFvI0ANym3QoN7I-RQKbMIt6gig.roa (hash: GrlnaBdw7dBvLMUTrNOXUqsN/qRKJzGUYDALeRJwyFA=)
2: TRXJl1FHjHUFLAbPXioeeQS0GU8.roa (hash: v3IBf+nGF2X8TNJR1+CHrX1MQgZ+C2257d1namFw/P4=)
3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: 5O8Hjn4IFSsauOP8qtRj9w40LY12ED9Hl1/tlEOG8vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:31:26:3d:46:31:c9:ef:24:82:bc:c8:63:2e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Nov 23 01:00:51 2024 GMT
Not After : Nov 24 01:00:51 2024 GMT
Subject: CN=9256d57c60a81462a5502ca5c2520a9e9cffbe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:7a:ce:a1:ae:8d:08:e8:62:99:f5:5c:d9:
a0:f1:cc:7a:34:5d:95:00:cb:92:49:81:25:e8:91:
51:5e:3b:a2:48:8a:78:8f:35:69:aa:f2:51:0a:41:
85:98:36:96:a2:6d:b7:4d:a1:0c:15:3f:05:2f:07:
8c:ba:74:44:63:3f:66:aa:82:7e:94:f1:83:8e:3b:
77:d1:fc:64:4a:68:93:f4:ba:3d:cd:44:c0:b5:86:
7a:dc:29:01:c2:75:8f:f4:9c:7c:a7:a7:36:1f:06:
c3:63:8a:69:a0:bb:e1:d5:ab:af:fb:28:b7:f7:9f:
30:ff:d8:1a:54:95:bd:17:3b:c7:aa:31:48:98:a3:
4b:0b:1f:dd:7a:8d:d0:78:2f:f1:29:fa:e8:fc:cb:
6b:03:37:12:7c:9d:21:d9:c6:70:f2:d0:b4:f2:70:
43:f8:ee:a2:7b:04:b3:70:84:5a:02:39:dc:5a:43:
80:c7:3d:5c:be:9c:9e:34:09:f1:8b:50:41:72:54:
e5:40:b1:9f:19:42:99:5e:06:09:dd:b1:b4:d2:31:
5a:90:f5:d7:5a:26:04:56:3a:fb:42:c4:b6:72:ab:
a6:af:9e:55:16:9e:26:dc:7a:f4:2c:aa:18:aa:d1:
13:4e:7a:e5:ab:42:63:8f:5d:9d:bf:a2:ea:e2:a9:
c2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:56:D5:7C:60:A8:14:62:A5:50:2C:A5:C2:52:0A:9E:9C:FF:BE:46
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:43:c2:3b:13:12:a2:11:d1:3f:0c:5e:01:25:dd:d7:a8:4c:
f0:55:c5:15:1a:e1:ea:46:f3:bf:c8:a2:c9:7e:98:f1:4a:07:
7f:05:70:0f:5d:16:d3:5f:4b:8b:e6:a4:87:c3:79:d5:61:e6:
34:35:56:92:01:34:5b:9f:df:68:31:0a:1d:ed:6c:91:b0:0b:
19:69:27:42:9f:b2:1f:22:51:74:59:35:f7:c6:d6:a1:4e:93:
b0:77:7d:ea:03:9f:d4:2a:7b:b8:30:f8:32:63:e0:10:a0:9b:
d9:15:f8:3e:01:60:f7:4f:ba:04:4a:6b:e5:b5:af:f5:d3:4d:
51:b8:bc:94:b0:7b:2f:c1:f0:6a:79:20:f4:80:e7:ca:ec:62:
e7:4b:e4:0a:96:79:73:17:69:10:1a:0b:e0:f5:ae:a3:b6:49:
99:62:e4:5b:3c:ed:75:f9:99:a9:aa:6c:f7:c7:5f:2e:38:79:
6b:d7:eb:6e:57:32:90:60:d0:5a:29:3a:74:4b:9f:63:60:e2:
fb:b2:26:dc:94:e4:cf:71:93:ac:ff:30:07:82:c5:85:b9:82:
f5:05:c9:00:af:e0:4c:d5:96:73:30:3f:63:3e:ae:90:13:88:
dc:ca:e8:a2:8e:e2:a4:25:41:5a:81:a6:61:12:0b:c3:8f:5f:
e3:60:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:21 2024 by rpki-client on console-ams.rpki-client.org