Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: L73L+AQTOmTUat3AcA26obUQ0DBl4TYnKWMlZ+kAFvc=
Subject key identifier: C0:76:6F:70:36:2C:92:B3:62:37:83:5B:74:73:E5:B5:89:CA:2C:A1
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 0193520710629AEC8A54F560C4FF5C523BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 04:00:14 +0000
Manifest this update: Fri 22 Nov 2024 04:00:14 +0000
Manifest next update: Sat 23 Nov 2024 04:00:14 +0000
Files and hashes: 1: 86GDzxR4i-ntXsEjVx1DqpFWVvI.roa (hash: prNtSh0x3JQ5Z79ZzoGVnff1Xkp2ptFpVmjIp//A1Lk=)
2: Me5r2Nm9YJCMcMuL7P_zmlrKaDM.roa (hash: OPyK3AmzDouuv3s3J7TbAA/anm1D/IXyhrI34EjdiHk=)
3: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: gA3DgiJpxWYcSg5ou/v3bT6e4hlvWM2vTyepJlWj6wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:10:62:9a:ec:8a:54:f5:60:c4:ff:5c:52:3b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Nov 22 04:00:14 2024 GMT
Not After : Nov 23 04:00:14 2024 GMT
Subject: CN=c0766f70362c92b36237835b7473e5b589ca2ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:7f:d6:56:b6:79:9d:b8:6d:02:5b:a2:b6:
83:21:fd:78:83:57:72:f9:ec:7d:9d:0e:a8:74:06:
b8:a8:67:db:77:22:13:00:38:a4:9c:3c:23:18:2a:
24:a9:aa:2b:2c:47:83:24:c4:b9:ec:f7:e2:3d:24:
50:0f:44:91:2c:e8:fa:54:9e:dd:df:df:42:2b:ae:
3d:e4:32:01:11:a0:a2:61:7d:b5:fb:bf:f6:88:13:
38:fc:bb:a7:01:8f:c1:b9:7f:82:dd:c1:46:0e:a4:
cb:84:2f:a8:fa:41:5f:7d:4b:09:0c:98:dc:ff:11:
0e:cb:ce:14:4b:fd:2e:b4:78:d4:8d:f1:6a:34:14:
9c:bc:1f:e4:80:8e:83:99:4f:08:c8:24:4e:ca:c5:
55:10:fc:e1:8c:5e:2f:1b:07:4b:b5:c2:80:35:6b:
93:a0:d7:4d:2a:e3:9a:90:8a:21:43:56:cf:fe:2a:
9e:01:fb:23:50:26:dd:8a:5b:b3:e7:99:df:0b:94:
a5:8b:7d:c0:5a:aa:89:2b:d7:ee:55:98:d8:70:cc:
08:ab:73:85:3b:68:9f:b7:8e:ca:8c:4a:10:18:b6:
8f:ad:49:95:2c:64:15:ba:90:73:ea:27:9b:50:b4:
a7:b5:c3:c6:1b:5d:11:3f:b8:2d:2c:32:5c:07:73:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:76:6F:70:36:2C:92:B3:62:37:83:5B:74:73:E5:B5:89:CA:2C:A1
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cf:dc:4a:5f:3f:66:de:ad:02:fe:47:d4:b8:a5:9d:bb:f0:
a2:0d:ba:63:a0:09:fa:44:89:03:98:9c:3a:a8:12:d6:a3:ad:
68:ca:d0:59:c5:42:29:f9:a5:95:d3:3b:4f:53:27:ca:ec:e4:
06:cd:0d:53:65:09:c8:b3:aa:7d:aa:fb:84:c4:fa:5c:fc:c9:
e5:ba:69:3e:d4:4e:8f:b0:35:35:77:3c:91:80:3b:92:7f:31:
a4:7d:8e:96:d4:e5:f9:2f:e7:c7:e8:ee:a5:c4:56:45:bf:17:
2e:3b:40:d8:cd:cf:22:3d:c9:5a:66:79:38:91:a5:5d:0e:e2:
6e:12:fe:8c:6d:be:92:03:a5:51:2a:4e:47:c0:5e:af:be:35:
2b:de:df:60:eb:21:64:ce:ac:54:82:8a:7c:6c:9c:2e:88:22:
f0:d9:c2:0b:78:6f:fc:ab:1f:5f:ea:92:d1:c4:14:95:5a:88:
56:84:8d:c5:b1:3a:79:48:b2:5d:61:70:f3:94:74:59:2f:54:
c7:99:24:b4:13:08:24:6e:ef:5b:e1:e2:9a:d2:df:b2:9c:33:
a5:c2:ba:09:57:1c:b1:e3:9c:fa:dd:f5:8c:93:4f:90:96:7f:
3e:3c:74:27:f8:e8:96:ce:e2:b3:e9:0c:ab:41:90:43:4f:b5:
80:97:81:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:29 2024 by rpki-client on console-fra.rpki-client.org