Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
File: xk0ihrXMe-Qviuuutqrlfnzn2is.mft (raw, json)
Hash identifier: 1ZPmgVTUb+M69yW+viv60dkuNy5soIv443X1DRrHE5Q=
Subject key identifier: CC:79:74:9C:EB:01:F7:1F:97:99:8C:C0:2A:6D:03:44:B5:46:AB:F8
Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
Certificate issuer: /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Certificate serial: 01935764D7243CB52A415C7D4F83943230FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
Manifest number: 1071
Signing time: Sat 23 Nov 2024 05:00:46 +0000
Manifest this update: Sat 23 Nov 2024 05:00:46 +0000
Manifest next update: Sun 24 Nov 2024 05:00:46 +0000
Files and hashes: 1: srdVhYYK0zkHbXKpX3apk3myp54.roa (hash: CCo8sI0Dti/Pvf1pxOTQrmVpoyCXzUGHbGzWzg4KIAE=)
2: xk0ihrXMe-Qviuuutqrlfnzn2is.crl (hash: Ne71XowOcRy+/VQACIoCTUnel0DKU1q3r0ck0BAHyVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:d7:24:3c:b5:2a:41:5c:7d:4f:83:94:32:30:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Validity
Not Before: Nov 23 05:00:46 2024 GMT
Not After : Nov 24 05:00:46 2024 GMT
Subject: CN=cc79749ceb01f71f97998cc02a6d0344b546abf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:f1:14:66:28:12:de:8f:50:0e:4a:e3:ae:
38:a7:e4:cc:ab:ae:c2:eb:2d:59:f2:1c:b2:9d:a4:
63:b6:ae:65:4e:8c:05:08:83:19:f9:31:4d:77:c1:
e5:57:9b:17:c9:69:e9:ec:b9:b0:6a:92:5b:3a:75:
8e:14:9e:75:91:04:d1:5f:78:31:5f:04:54:ed:b4:
64:5e:a9:6d:1b:95:cc:aa:17:dc:4f:25:bc:a1:b5:
9b:4e:10:25:8a:9a:c4:12:b1:c4:33:0f:c7:f6:96:
c6:81:a9:d9:c6:3a:3d:8f:63:dc:c0:fa:c1:34:77:
2d:f1:37:10:9a:c0:12:05:92:3e:13:f4:79:e5:e5:
5b:c0:14:93:79:98:cc:b8:4a:bc:16:74:19:68:6d:
21:03:bd:28:06:82:24:c5:23:08:96:c3:ae:a4:ff:
ff:9c:61:22:36:97:82:48:09:d7:4c:8f:cb:f4:38:
43:e8:75:e2:bf:84:4d:a9:ce:8e:8f:a2:35:39:88:
c3:9b:d5:54:3c:ad:e1:49:06:42:18:ce:fd:20:de:
11:4e:2e:77:c0:6a:28:30:84:01:56:7b:56:fe:77:
9a:4c:0a:ca:58:f0:8c:7b:cf:3a:cd:18:9e:6c:a1:
9b:a9:27:ed:74:54:50:af:4c:fb:9a:49:bc:44:94:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:79:74:9C:EB:01:F7:1F:97:99:8C:C0:2A:6D:03:44:B5:46:AB:F8
X509v3 Authority Key Identifier:
keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e7:93:67:4b:33:dc:79:fa:9e:8a:75:9f:10:91:2d:96:91:
be:66:e6:43:e4:e2:4b:ad:b3:ab:64:8f:01:6f:67:c2:93:ad:
9b:e6:bb:59:ee:b0:97:46:1c:3d:04:69:19:e4:60:75:58:0f:
b0:96:27:8b:03:d0:32:d4:5f:53:d3:e2:6b:68:f1:32:bd:1a:
57:8e:00:89:1a:d0:56:27:23:a4:d3:10:24:27:e8:f5:df:c3:
97:c9:5e:ba:ab:cb:36:d0:cb:31:12:22:43:f0:87:f6:33:1a:
be:21:91:e7:87:d0:cc:9a:f1:26:70:cc:e4:16:ce:00:4e:15:
ff:0d:f1:05:fa:c3:0b:20:17:01:86:ab:b5:8d:f1:60:e3:a9:
86:ec:f0:23:8d:93:be:12:64:00:f6:05:d0:fe:6c:b2:13:c5:
92:6c:88:fc:d9:c4:c7:09:c8:70:0e:cd:80:bc:d8:dc:f2:0b:
1e:ac:c9:d3:5d:4e:a8:e3:f6:92:14:6d:42:4a:d7:1c:3a:17:
07:09:43:86:77:d1:ea:c1:b2:ce:a1:12:17:2f:98:f1:78:d7:
5f:29:d7:dc:a1:43:75:e6:68:15:8b:a0:8f:fe:b6:ac:b6:93:
f7:7c:95:a1:3c:c8:3c:72:a4:00:c5:b8:d8:04:38:7c:fc:e8:
c3:1c:35:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:32 2024 by rpki-client on console-fra.rpki-client.org