Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier: juCJdSQiSXiSSshvpQnuqRSD4uqBbhhrpRMmF6L5UOQ=
Subject key identifier: 1F:51:95:9A:26:E5:86:20:14:C7:BF:AD:C8:BA:25:21:66:53:24:0D
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 01935764B8CFB0AB3410D8BB27246CD9140F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number: 024F
Signing time: Sat 23 Nov 2024 05:00:38 +0000
Manifest this update: Sat 23 Nov 2024 05:00:38 +0000
Manifest next update: Sun 24 Nov 2024 05:00:38 +0000
Files and hashes: 1: 2TmEhMqR5_fns249Qf5u2YhPK4g.roa (hash: NZVAIzg0a70fdzzkhtMUww+j95nJ4Zo6mAlTyItiJnk=)
2: 6GJxs0Bq2Ean7gOs7u9GtQAnjS8.roa (hash: Ua6jsrjb+j2sIyljV8KCtZyXi/cYopJygmj7AHy/dz8=)
3: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: Im6es0IF59lLh9Hrgw6R0G29z9msETu0qoXe2SGQ/ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:b8:cf:b0:ab:34:10:d8:bb:27:24:6c:d9:14:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Nov 23 05:00:38 2024 GMT
Not After : Nov 24 05:00:38 2024 GMT
Subject: CN=1f51959a26e5862014c7bfadc8ba25216653240d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:01:2e:e7:f7:f8:06:d2:79:4d:7e:17:86:70:
68:39:a1:d3:7d:ba:59:ab:97:05:1d:98:1f:d1:4f:
40:0e:a5:66:25:46:be:bb:29:3a:e1:1d:6a:f3:32:
96:2d:88:c5:9a:33:ec:c1:55:1f:ba:e3:56:9c:bc:
e2:64:d8:58:d6:a2:40:ff:6a:f3:15:87:06:5d:0c:
c5:72:0d:8b:0a:f6:40:8e:6a:a4:8f:11:9a:80:aa:
0e:18:7b:f1:b4:04:b4:b7:3b:66:15:30:e4:eb:42:
aa:1c:81:d6:18:ef:e0:47:6e:3c:6e:54:f7:19:d3:
16:e4:c7:b6:e8:de:5a:c4:38:71:b7:1f:34:67:32:
64:4a:50:95:b4:17:53:14:98:76:6d:d7:0c:90:3f:
b3:5c:7b:26:aa:66:fd:3e:b4:09:a5:87:26:55:75:
f8:7c:f0:a2:5f:4b:56:07:8a:28:cf:1e:36:a5:33:
70:4f:c4:75:9a:93:74:2e:72:e6:42:1b:cb:e6:e3:
1a:ac:7d:5d:e8:38:df:6e:6d:95:e6:d5:be:e8:67:
5c:d9:56:1b:bc:15:8b:7c:6a:e4:a5:49:ca:e1:b4:
e4:39:c6:78:0e:25:15:b6:81:77:18:d4:ac:c1:1d:
be:d4:fe:9b:18:87:ce:a7:5d:63:f9:69:45:08:b3:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:95:9A:26:E5:86:20:14:C7:BF:AD:C8:BA:25:21:66:53:24:0D
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:02:dd:03:91:d1:e7:ef:12:da:04:04:85:9c:5c:de:9b:5a:
86:45:5f:05:99:38:35:a7:de:c0:68:ec:81:e8:f6:1c:e0:34:
c4:5b:fb:23:c7:ab:94:5d:93:3d:d0:15:20:35:3e:0b:ca:cb:
00:94:80:d1:31:65:37:fa:a5:75:e9:e5:20:4c:db:f1:a5:ce:
2a:0b:db:b3:f8:e9:1b:17:ed:b6:91:7c:c6:c3:f9:62:f2:f4:
d0:7c:13:df:42:4a:60:4d:3a:23:ab:7a:f1:19:53:a7:c1:4b:
2c:80:32:47:81:de:18:4e:8d:30:30:ca:2a:09:5f:9b:c6:8a:
66:19:d2:59:8e:97:a6:ed:99:ca:2f:3c:9b:63:6a:b4:7f:89:
74:e7:15:c0:08:f2:5d:5f:22:aa:7f:19:fc:d8:19:10:0c:d1:
97:5a:c3:ca:45:cd:b1:e2:25:8c:41:98:bd:da:7f:4c:28:d4:
0a:9f:41:b5:95:21:6b:fd:3e:86:30:4d:84:10:28:20:18:ad:
ff:9b:6c:b5:52:29:35:77:74:4e:08:42:28:37:af:be:89:1a:
a3:fa:d8:5a:ae:81:25:00:7a:65:d1:e7:78:af:99:93:48:c0:
25:57:7d:ee:61:75:12:6f:63:5c:f3:ca:1e:4a:e3:35:28:5d:
ac:73:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:15 2024 by rpki-client on console-fra.rpki-client.org