Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: 6XzafQwVkfj3BRO3pwUxNPUS91QHjFDqPTeUG9J2/aU=
Subject key identifier: B0:20:5C:ED:56:04:A6:49:CA:F8:09:F1:40:35:62:AB:A7:99:42:5F
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 0193549C0623AA20687A6D3A480147BDD9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 136E
Signing time: Fri 22 Nov 2024 16:02:11 +0000
Manifest this update: Fri 22 Nov 2024 16:02:11 +0000
Manifest next update: Sat 23 Nov 2024 16:02:11 +0000
Files and hashes: 1: BmLRT8VCFTL7EByBWG3MxY6cefw.roa (hash: wsKHUuO5u0Xw6h9XT5J6QsNfUtJ6T3wiGucZizMxQSU=)
2: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: KBLmBUfRQRSEaxoMcfj3ZqPj/zcxonQEy47cC5YfPxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:06:23:aa:20:68:7a:6d:3a:48:01:47:bd:d9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Nov 22 16:02:11 2024 GMT
Not After : Nov 23 16:02:11 2024 GMT
Subject: CN=b0205ced5604a649caf809f1403562aba799425f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:07:36:3a:62:dd:4e:c7:f7:ca:6d:fa:5f:
90:6d:ad:77:a7:89:9c:56:95:6a:7c:3a:38:37:8d:
b6:d9:fc:c1:67:bb:db:fc:1f:de:7a:03:14:05:34:
4c:7c:eb:c3:37:81:00:64:51:bd:29:0b:11:71:6b:
c5:50:3e:38:95:01:2f:52:ec:3e:20:7d:9b:e3:67:
70:24:3a:36:21:49:fa:81:95:4a:fc:80:f2:fd:e6:
3a:df:5d:b5:84:1d:1b:fb:18:9f:5b:ac:9c:e0:74:
e8:be:6e:d8:25:f4:70:8a:29:8e:2d:61:ae:3d:8c:
76:ce:b5:98:0f:31:a7:aa:63:6c:0a:af:35:e3:9a:
2b:43:62:57:0d:ba:62:c1:e2:c7:ff:f9:e4:93:24:
61:e7:19:66:d0:cc:a1:e2:f4:dd:80:0a:2b:4b:aa:
5e:b2:46:7d:b2:c1:68:6c:78:80:3b:c6:21:6e:00:
1b:71:e2:34:04:a0:09:54:98:d9:cc:df:5e:9f:4e:
d1:ae:07:64:20:95:6b:dc:1d:96:c8:23:85:4a:ab:
1f:9f:08:e1:8c:85:c2:30:30:4a:c4:ca:2f:da:6c:
d9:41:e9:d8:b4:df:0d:06:58:f2:d9:15:7f:3d:37:
23:98:f5:47:2f:c7:2b:2e:4d:72:11:26:c1:fd:aa:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:20:5C:ED:56:04:A6:49:CA:F8:09:F1:40:35:62:AB:A7:99:42:5F
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6d:53:77:e0:f5:3d:53:95:41:3c:29:1c:41:5f:f8:95:41:
4f:8e:f9:97:10:4a:8a:90:56:ef:7e:2f:4b:21:43:b3:c5:b2:
7d:ad:3d:57:d9:ef:8b:f7:cb:6b:eb:4b:15:be:06:16:52:3e:
1c:1f:f8:e2:d5:be:c3:30:d7:eb:54:c4:73:43:31:43:9f:b1:
ef:9c:03:a9:62:5c:d1:a3:95:06:48:b6:84:d7:f0:af:84:20:
95:53:43:8f:ce:1d:35:ea:21:60:5d:fa:e9:d2:aa:1f:aa:0b:
3f:10:c1:e1:aa:59:53:c4:b2:8e:13:29:4f:3f:d5:14:a3:ce:
67:b0:d3:82:79:37:4d:c3:ca:89:67:a7:39:10:0d:b3:14:bb:
32:eb:7e:e1:3a:17:2e:58:9c:ed:47:0d:57:36:14:12:42:cf:
1a:6d:d3:7d:92:3f:17:7f:60:49:f5:7e:bd:9d:1f:ac:e1:dc:
ce:a8:02:18:03:63:a1:4b:ec:4c:5b:1d:1a:0a:1e:14:ce:3d:
45:6e:94:72:34:84:aa:4a:55:94:af:55:6c:3d:37:cc:83:8a:
17:bd:44:3c:db:a5:6f:9c:f0:60:f8:51:88:4b:7e:01:55:05:
0d:68:6a:dd:61:18:cc:b4:32:42:36:c8:b9:f6:42:54:27:b0:
40:9a:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:35 2024 by rpki-client on console-ams.rpki-client.org