Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: Vx1i6+MhY2psjHsDnjJheOWntDF2YjIO4Y5PIC3uNYo=
Subject key identifier: D4:AB:70:73:6F:54:93:25:23:E7:F8:46:4E:3F:11:E2:D4:EF:E1:C6
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019353BEF185F74AF3FB3871B390027CD00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 10D9
Signing time: Fri 22 Nov 2024 12:00:42 +0000
Manifest this update: Fri 22 Nov 2024 12:00:42 +0000
Manifest next update: Sat 23 Nov 2024 12:00:42 +0000
Files and hashes: 1: sfRb7PnQnp6KzcxBJFWxYiAoHlU.roa (hash: 4vkc/0sluobAYxIwzdbQlTD3R28W1r1PHJ8PcOAoKfs=)
2: uaP9cGla4ZCSjpoSGpN2eujkRs0.roa (hash: oPHD0mcqKp3lS9WfPB60PUh2VPpAryquaNV9v895fXI=)
3: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: qGUPxqKTY/RN787EXgMCR1bFZN+VBgBGTboGHPN+88M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:be:f1:85:f7:4a:f3:fb:38:71:b3:90:02:7c:d0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Nov 22 12:00:42 2024 GMT
Not After : Nov 23 12:00:42 2024 GMT
Subject: CN=d4ab70736f54932523e7f8464e3f11e2d4efe1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:9e:04:63:94:0f:88:3f:d4:4f:f3:e6:1f:
99:b6:77:0c:66:90:66:6b:3f:82:48:f6:5e:19:9a:
24:ab:ac:ed:5f:14:1d:5e:f2:7d:86:82:d8:74:2b:
ee:01:b7:13:9e:46:1a:6b:64:c2:c1:75:85:f3:24:
82:28:b4:ba:a9:86:ad:fc:95:ef:06:c3:ca:7f:a4:
b9:0f:7d:73:d0:15:9e:ec:3e:09:36:dc:1a:76:36:
ab:a5:ad:7a:34:ed:6f:e3:76:ac:27:7b:3b:56:de:
00:39:cc:7b:cb:6d:a2:e6:0c:6b:d0:76:e5:02:71:
da:87:e1:86:96:b3:7c:7c:79:43:7c:f3:ba:e6:4c:
55:06:d4:eb:63:dc:db:92:a2:68:3f:66:69:3a:e0:
7f:44:a3:f0:a0:80:95:fa:43:3c:2f:ee:77:3d:50:
ca:91:9a:59:57:2f:8c:54:b0:f6:7c:e8:4d:46:a9:
8d:31:cb:61:7f:8f:cf:eb:53:44:30:8b:4e:53:b7:
10:99:f9:b0:15:90:a7:86:e0:a7:b1:1e:aa:5c:fc:
ca:b2:cb:71:d4:44:27:34:3e:77:c5:81:42:d3:9a:
f1:35:bb:08:98:5c:b6:61:3a:48:13:41:f9:95:7f:
dd:7b:88:5e:40:74:62:90:05:19:b4:d8:9a:76:b3:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AB:70:73:6F:54:93:25:23:E7:F8:46:4E:3F:11:E2:D4:EF:E1:C6
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:47:20:09:94:8b:1f:58:66:ca:26:e3:3e:44:9c:1a:f5:4a:
ac:c1:1b:74:89:92:98:49:ab:09:65:65:eb:0e:9c:c9:1d:24:
b5:b2:aa:da:9a:ce:b5:b8:32:f0:2d:29:a1:d8:9a:0f:86:ce:
ea:23:95:b4:49:00:41:e5:bc:05:ba:5a:a6:31:de:63:f1:df:
7e:cc:b6:31:bf:0d:89:4d:af:87:c4:71:ac:e4:f8:2c:3b:8f:
5a:bc:6e:e6:7c:83:21:4b:5b:87:80:b4:5e:b8:53:0e:b8:ac:
55:69:d7:c1:08:ea:03:6b:81:a0:dc:b5:40:8d:aa:a9:9b:d4:
a6:31:48:b9:39:35:bf:31:74:92:7e:cb:60:9a:9b:b5:f0:90:
c6:b0:1a:e7:66:d3:64:85:b7:4e:f6:02:f7:73:f8:a8:38:bd:
cf:8f:dd:ce:99:8b:0e:42:ae:eb:07:26:9e:fd:9d:a6:9d:da:
62:ea:8c:ca:30:4b:02:24:bb:4b:ff:c5:09:f2:44:cd:28:6f:
de:64:78:b5:65:96:2e:9c:f8:64:3e:8e:49:2b:60:07:d2:62:
1e:33:cf:c1:f9:9f:bf:8b:4e:eb:10:68:7a:1e:88:a7:d0:7d:
b0:25:96:77:71:ba:3a:75:46:76:55:71:60:02:73:80:12:0d:
3f:40:29:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:02:17 2024 by rpki-client on console-ams.rpki-client.org