Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: LU2hvj7MpEMn4eVwllpX0Trxk8gwbLLO+wkPtkazb0Y=
Subject key identifier: D4:E9:6D:0D:F2:FE:26:E5:D0:11:86:9B:04:36:4E:B6:F8:0F:D4:11
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 0193591BE73C6728CE84FD5F56F89FC89940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 13:00:21 +0000
Manifest this update: Sat 23 Nov 2024 13:00:21 +0000
Manifest next update: Sun 24 Nov 2024 13:00:21 +0000
Files and hashes: 1: 8-67Jy_N5bck5RcmGP7an60OP2U.roa (hash: KqvwvkiZWJtAVFrWmEYdIhRGfIqMUjESahSRDg3bBRU=)
2: mR8tt892naZEz9Yu7Nl01ALwEts.roa (hash: sxi9hOsNSSBAYrdl3YLP+l0UEn84kQoPHxhrD3KG6B4=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: pnEUh8rf3aGxDlYFt2gQHMdl//joGQGnbpUw+lk0P10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1b:e7:3c:67:28:ce:84:fd:5f:56:f8:9f:c8:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Nov 23 13:00:21 2024 GMT
Not After : Nov 24 13:00:21 2024 GMT
Subject: CN=d4e96d0df2fe26e5d011869b04364eb6f80fd411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:43:94:fd:ac:3d:84:f4:53:e1:34:0c:cc:70:
3f:36:57:54:7f:a7:56:16:50:fb:39:eb:36:fb:f8:
19:70:f4:e7:1a:ea:36:10:52:8f:f4:3d:dc:e7:b0:
a9:b2:63:12:b7:47:f0:d5:e6:73:51:24:36:d0:e7:
08:05:4f:88:26:33:e3:54:42:6d:e6:f0:25:b1:0e:
fe:20:7c:54:62:dc:87:10:0d:59:62:29:10:6b:8e:
ed:7f:5e:2e:13:45:f6:a9:69:3e:86:99:a7:ea:fe:
59:6a:f9:48:92:11:ad:e3:a9:21:4a:16:52:91:9c:
fe:dc:63:30:bf:8a:56:3e:d0:d1:f2:55:ef:ac:18:
ad:8b:6f:3f:ac:d9:f6:18:38:06:b1:8c:13:a7:ea:
8d:69:66:48:38:34:45:37:85:9f:41:7d:d9:8a:bd:
17:79:b0:04:9e:ab:ef:f1:5b:55:4e:c4:a2:00:c9:
ce:ef:d9:4a:27:f7:e8:bc:a4:bd:99:a7:a5:2c:a7:
37:6a:3e:e5:90:b5:5b:0e:e6:69:d6:40:1c:d1:6b:
da:54:1a:3b:24:62:19:b8:a1:1f:34:39:cd:ea:04:
3f:a6:a7:b8:b7:5f:a0:9b:18:86:60:67:e9:70:65:
04:15:1b:bd:35:90:7f:1f:57:a2:18:20:2e:36:12:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E9:6D:0D:F2:FE:26:E5:D0:11:86:9B:04:36:4E:B6:F8:0F:D4:11
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:be:17:fc:06:98:db:10:da:a6:b9:00:b3:46:bb:e8:77:e6:
2a:dc:13:ea:ce:fe:4d:6a:c2:c7:28:d0:28:ef:17:d4:51:10:
d2:df:b7:68:5f:11:18:eb:08:6c:16:b0:39:e3:f3:54:2f:bc:
49:a2:a3:35:db:11:08:57:79:75:3a:3b:e4:b8:ac:28:b2:29:
0a:26:77:99:9a:cb:59:69:42:31:5b:8e:f4:3b:b0:c1:51:26:
d3:47:a4:99:ab:a3:67:b8:bc:82:6a:a4:7c:d1:69:db:a3:cd:
52:bf:fa:84:25:94:19:92:1e:23:90:64:09:b7:86:a2:7e:15:
08:84:dd:c2:2b:f6:ea:19:c9:7e:8f:9f:93:d9:52:8e:37:60:
f5:9e:ba:29:73:fd:7a:72:ae:5f:a6:e7:1e:d7:f1:d0:00:83:
6f:71:7a:8d:bf:cc:31:1e:3c:19:f2:74:65:27:f7:1a:4f:b7:
a7:c5:8e:b8:b2:b4:4a:14:7c:6d:c0:8d:4d:7e:04:2b:11:e3:
03:0e:94:a7:38:78:29:43:4a:ae:38:e3:b5:7e:ae:d8:5a:6f:
9a:a4:77:b5:5f:c2:93:11:b5:b7:ed:8c:a3:aa:46:97:be:75:
4e:27:58:ef:de:dc:c0:c6:43:40:b6:ab:43:73:c5:29:f4:89:
59:f9:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:54:05 2024 by rpki-client on console-ams.rpki-client.org