Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File: xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier: WhZAiad3gcdP6owe2UoHjASFu4pbGSveoQBgOb6janA=
Subject key identifier: 33:32:1D:F6:D4:23:3E:DC:FD:C6:4A:9C:39:2B:04:A7:6E:82:D6:D4
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial: 019357645381BEDC3F22411EC059E84DDD48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number: 0C9D
Signing time: Sat 23 Nov 2024 05:00:12 +0000
Manifest this update: Sat 23 Nov 2024 05:00:12 +0000
Manifest next update: Sun 24 Nov 2024 05:00:12 +0000
Files and hashes: 1: AkWcdnWbQxO-O4mWtRy35eIKrqA.roa (hash: 8gQeg1qZD+aMYR+/EcE6l6V8kepbSJEm4q1MsFJm1ss=)
2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: rmNS3KTz0klyBPQkaTpD/2eYDSG9tCSOjWm9wmX0NP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:53:81:be:dc:3f:22:41:1e:c0:59:e8:4d:dd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Validity
Not Before: Nov 23 05:00:12 2024 GMT
Not After : Nov 24 05:00:12 2024 GMT
Subject: CN=33321df6d4233edcfdc64a9c392b04a76e82d6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:c4:b9:dd:31:be:98:1c:04:08:e1:97:f3:
1e:57:ed:68:7c:86:b9:ee:4a:95:b6:c5:bf:89:d3:
a7:65:5c:c7:4b:3f:ef:d4:14:e4:47:de:03:b8:97:
40:eb:48:9f:ce:4a:9b:d5:a4:73:29:e0:2f:bb:d8:
13:c9:05:8b:69:fa:e7:df:6a:bc:79:8f:7a:db:cc:
0b:15:2e:d4:5f:8a:4a:70:df:19:16:8c:f8:37:40:
96:b5:91:5e:f5:45:65:38:1f:4e:85:57:9a:4a:ce:
46:3e:42:cf:fa:19:07:27:25:df:16:61:44:46:54:
3d:83:d3:27:0b:0c:f3:9a:09:bc:ff:16:91:1a:75:
c0:81:8c:61:c4:fa:2e:4d:7c:7d:6c:70:68:a9:19:
11:15:c8:55:74:19:f0:f7:02:64:38:be:2e:e2:3f:
43:86:ce:b6:64:dd:29:b7:2b:60:1f:b8:72:a5:45:
25:06:c2:27:2b:f1:63:80:ce:b0:14:36:a0:dc:8d:
15:d7:b9:8c:95:13:e5:d0:1f:34:7e:64:ce:58:81:
f2:7c:4e:63:e3:30:55:07:21:d3:ea:33:eb:73:ca:
f8:e5:c0:8b:3c:0a:76:39:9f:bd:56:c2:b5:6a:a6:
92:c7:d7:7e:66:28:04:70:3f:4c:01:2c:40:8d:82:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:32:1D:F6:D4:23:3E:DC:FD:C6:4A:9C:39:2B:04:A7:6E:82:D6:D4
X509v3 Authority Key Identifier:
keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:42:64:7f:a3:cf:73:ba:f3:48:f3:93:32:c4:72:14:68:81:
66:20:bb:98:44:58:0c:98:57:2e:33:08:2e:8c:39:54:b1:ad:
70:16:45:50:09:fd:56:ec:54:5a:f9:cb:43:e3:8d:f9:40:2a:
47:c6:7c:ba:26:7c:f8:d4:37:30:d8:4e:02:61:e8:ef:5a:e4:
43:20:53:f8:51:f5:97:0e:92:06:d1:5e:7f:d5:d2:5e:4c:de:
6b:fa:02:f4:b5:0a:3d:28:46:9d:0d:6f:45:39:59:25:6c:66:
7c:4f:63:d2:6a:e9:9f:0e:3b:d2:3a:15:9e:d1:2d:ba:af:dd:
0f:31:84:44:bf:fd:bf:94:f7:b3:22:c2:5b:b9:a2:53:b3:96:
a7:21:c6:a9:41:96:db:fa:3b:32:06:bb:6c:87:47:e7:30:10:
b0:32:45:f2:86:af:b3:73:4e:71:01:54:f8:5c:91:be:d7:e4:
0b:e1:8c:ae:61:78:a7:aa:bd:16:77:9c:46:9e:eb:01:db:86:
8d:5c:84:b5:7d:88:3a:75:aa:9f:7a:9a:ac:32:ea:eb:10:31:
43:7e:c8:a8:89:71:08:56:f5:85:c6:dd:8c:58:36:87:c1:70:
c2:d9:1d:b7:54:a2:90:20:03:3b:3f:86:d9:05:66:74:2d:26:
82:32:1c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:31 2024 by rpki-client on console-fra.rpki-client.org