Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: JYMPZC5UHZptJY6TJXry14Nxt6O5L44MfsK4eKXr0PA=
Subject key identifier: 5E:7F:4D:C1:75:BE:3B:6D:B0:5C:AB:52:A2:A4:BD:31:F2:C1:EF:B9
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 019355AD35D42488049572128AE51E1C28E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 21:00:34 +0000
Manifest this update: Fri 22 Nov 2024 21:00:34 +0000
Manifest next update: Sat 23 Nov 2024 21:00:34 +0000
Files and hashes: 1: NU2ucgoxUD9Ll5QUQnA-tVRGbp4.roa (hash: txCh70u8QbDPLIvr6bAFME89YMTmxKrstmr4Ls8D2OY=)
2: hlXsROypaaVSV1BMYUNuzr7Krac.roa (hash: 9iyo6yQdVfG3KH09ThzxvwfVcS4/pvopJiWLUGqJkV8=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: JGypzkJt2NAQ3SbhpJjJvKRShzgZF2s/x3WX9I1PGUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:35:d4:24:88:04:95:72:12:8a:e5:1e:1c:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Nov 22 21:00:34 2024 GMT
Not After : Nov 23 21:00:34 2024 GMT
Subject: CN=5e7f4dc175be3b6db05cab52a2a4bd31f2c1efb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:9f:bb:8b:7d:9a:97:2a:82:6f:55:63:8f:
c3:fc:6a:30:5b:f8:9d:4e:6d:c3:95:2e:5d:83:bf:
a5:36:02:d7:7f:df:5f:39:45:10:9f:4e:4b:3b:33:
7a:73:74:f2:4d:20:5e:96:7d:39:cc:33:ad:f4:38:
48:99:f6:67:1e:5c:be:ac:88:b1:09:cb:05:6a:eb:
78:ae:c2:fe:9e:0e:5a:ad:a8:b9:40:69:5b:60:17:
28:ae:72:69:7e:83:db:dc:23:be:2f:d6:1a:60:b0:
aa:be:5f:8f:1e:4b:c3:75:e9:24:b3:2a:dd:4e:e5:
06:84:07:db:fc:d3:8a:cb:48:34:20:5a:9a:49:6f:
9b:94:7d:5b:1d:16:da:9a:46:cb:44:12:84:0b:ab:
74:9e:80:c8:89:8f:c9:fe:a7:1e:d0:1f:95:65:53:
5e:75:c3:48:52:43:c6:40:57:11:6c:5c:34:cf:a8:
3b:2c:fd:0d:71:f4:ef:cb:80:94:c4:85:79:e3:27:
12:06:0d:c0:f6:dd:c0:ed:cd:d3:93:3a:cb:05:aa:
aa:f2:11:b5:c2:60:da:6c:5a:3b:81:13:98:80:f2:
01:d7:6a:40:c7:6e:78:88:0f:a0:88:9f:08:06:71:
73:ca:5a:0d:8c:72:90:d1:1e:a1:65:8d:d4:28:74:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7F:4D:C1:75:BE:3B:6D:B0:5C:AB:52:A2:A4:BD:31:F2:C1:EF:B9
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:54:38:02:69:c9:a0:42:38:69:7c:e0:e5:eb:df:65:de:4c:
dd:6d:83:fe:4e:19:18:89:be:29:e4:41:dd:63:96:ce:ef:3a:
4c:ac:6a:40:ea:0e:69:94:0a:dc:d4:03:ac:8a:9d:e2:fc:e9:
3e:0e:c6:13:51:e0:43:87:5a:6d:9f:b2:41:95:39:0d:f4:e3:
a9:7e:f5:f1:69:75:0f:47:da:06:4b:36:4f:e4:06:28:12:2b:
b5:d1:bc:17:ee:cc:57:ba:bf:2c:70:62:c9:eb:dc:13:10:c8:
fe:3a:70:a6:8a:52:46:e6:49:1a:3f:b6:b3:6d:21:f6:78:da:
c7:2d:4f:74:46:13:7f:88:6f:15:93:f4:06:05:26:5a:d9:4a:
0d:d9:53:46:52:c2:91:cc:24:02:2d:b7:1f:8f:b6:25:72:96:
66:22:31:b6:9c:7d:94:17:0f:24:ed:68:77:9b:d6:b6:93:de:
15:6d:7d:4f:2b:90:ca:6f:c0:25:15:d4:e3:d6:52:b4:2b:90:
6c:71:88:a6:40:d3:f4:de:2c:2c:e3:07:71:73:60:c6:84:c7:
7f:88:9d:e8:80:9d:cb:64:86:2a:b3:ae:a1:a8:fd:06:45:58:
5e:7f:82:8c:96:1a:ca:ca:ff:37:f4:5a:b6:cd:37:04:cd:62:
cd:f4:c0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:10 2024 by rpki-client on console-ams.rpki-client.org