Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: IH6mVD06gvnbyZxaZfdnOAz7kP79uVTEGGkMCt7Pf4c=
Subject key identifier: 11:0C:C8:9A:92:A2:F7:27:77:99:E5:EA:7A:1F:62:FC:90:E8:54:75
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 019356892813A1778AA041D7A15AB9C4A5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 12E1
Signing time: Sat 23 Nov 2024 01:00:49 +0000
Manifest this update: Sat 23 Nov 2024 01:00:49 +0000
Manifest next update: Sun 24 Nov 2024 01:00:49 +0000
Files and hashes: 1: 0wrjQ-aZBX0Y0hHne0lcEKzSpAU.roa (hash: bpQ+oALdIgKDN8MgT07KJs/paBsG4wNbHAwm6occFQs=)
2: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: kgd/AhK0PWHivpusAPJPmcwfhd33dLuzuIgu0oQGKbQ=)
3: pU3TAr8ROVvCB_iRU49bILZzoas.roa (hash: aIrOTyq5ElibqaetiObSxXLL+LibKJwmQIkzLTVmdGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:28:13:a1:77:8a:a0:41:d7:a1:5a:b9:c4:a5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Nov 23 01:00:49 2024 GMT
Not After : Nov 24 01:00:49 2024 GMT
Subject: CN=110cc89a92a2f7277799e5ea7a1f62fc90e85475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:2a:75:17:44:8b:a0:6a:b5:97:60:44:a8:
87:08:62:e5:4e:39:fe:7b:7e:26:ae:ad:a0:30:62:
be:98:07:dc:ec:36:99:11:89:e1:5c:5b:29:f3:f6:
97:6e:d8:69:5c:1f:f8:3a:88:66:3c:63:60:66:2f:
59:77:94:63:47:74:fd:46:c3:53:d3:a8:28:d1:a3:
6b:79:45:6a:68:f9:f1:43:db:96:3a:fd:30:93:ce:
04:8a:39:d6:84:b9:61:af:ec:71:6a:80:f0:14:fc:
d5:63:36:39:d0:4f:80:c7:4f:ff:db:bf:83:51:fe:
e9:5a:dd:8f:0f:e7:e5:19:83:85:a1:4b:56:08:b7:
ec:27:40:a6:22:6f:e9:c7:5d:73:01:8d:be:8f:46:
10:61:c1:e4:8f:cf:db:78:f5:26:8b:b8:3d:ef:a0:
8a:58:11:41:4a:37:82:7f:4b:60:67:ac:ff:cb:26:
4b:7e:43:55:21:5c:b7:d7:29:99:15:9c:42:46:f8:
a2:bd:59:4a:2f:21:b6:0b:c3:e2:ab:f0:19:d5:3e:
9f:f0:34:5e:4a:94:e1:bd:d0:04:1a:39:76:38:91:
64:17:00:ab:7a:3f:3d:c9:04:66:88:27:c2:e5:22:
51:35:e2:2f:55:a3:34:17:9b:d0:bc:e9:f8:31:2c:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:C8:9A:92:A2:F7:27:77:99:E5:EA:7A:1F:62:FC:90:E8:54:75
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:ec:91:e5:71:38:4c:ba:dd:12:04:0b:eb:55:5e:44:e1:e2:
64:f4:31:49:69:19:28:1d:eb:6c:ca:04:cb:10:6c:ad:ba:8b:
d4:be:8e:fd:b0:3f:c0:2a:cd:7f:7e:98:49:37:6a:a7:5f:6f:
2f:68:e3:54:05:e3:c3:0c:03:fb:c1:8e:28:83:7e:9d:63:07:
cc:21:f1:33:5b:6d:80:1c:ff:43:0a:86:d4:e4:9c:92:c3:97:
0c:2b:12:03:10:e6:21:5e:56:0a:dd:b5:75:c0:b7:aa:5d:9d:
4e:0a:87:75:98:bb:5b:51:08:10:27:ad:cf:8e:d5:b3:62:b9:
56:0d:c9:86:d0:c5:b2:72:55:d9:05:96:98:86:95:47:4a:05:
31:ac:82:a9:f7:bd:d7:f4:cb:01:e1:60:fe:29:a2:35:ac:60:
75:75:c9:92:e6:75:2b:09:b2:6e:02:b5:6f:76:1e:ba:9b:48:
1b:64:0d:63:fe:ef:bf:74:44:c2:45:2a:99:67:ca:ba:48:0f:
3b:57:15:39:11:4b:db:6e:0d:98:4f:eb:2d:d6:fb:06:ae:30:
4d:00:de:75:d7:7c:e4:02:79:30:a0:a2:62:cf:a3:03:50:38:
e2:78:1c:1a:85:1f:bd:0f:e4:95:cf:6b:2f:32:8a:eb:df:13:
f6:93:b8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:18 2024 by rpki-client on console-fra.rpki-client.org