Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: BytbEchp1ZhZ4OZVQioZgKRcnuH7Fit86InIF1QtSQQ=
Subject key identifier: F5:86:F1:22:C4:B2:FA:A0:83:36:69:EB:2E:BE:3F:66:D4:93:22:8C
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 0193520778DAEEAFDDD11A70DE004202435A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 137C
Signing time: Fri 22 Nov 2024 04:00:41 +0000
Manifest this update: Fri 22 Nov 2024 04:00:41 +0000
Manifest next update: Sat 23 Nov 2024 04:00:41 +0000
Files and hashes: 1: 64XGMEw1Xf9IhHO70OMP_ul0zlo.roa (hash: uoV8mMzj02yHDFP4Tmg3RKhrAfwvwq1gWNvlGlGrzkA=)
2: r121nLtbhT6ScYlmucIyBj2DlxA.roa (hash: qUf5miw9mXU73eSXjehohUJK4702gaRVjwq5ud3Kxjw=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: aM1lg/rXbxQA589F8bGYXY5KGocuTcqeOJFxSD7owqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:78:da:ee:af:dd:d1:1a:70:de:00:42:02:43:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Nov 22 04:00:41 2024 GMT
Not After : Nov 23 04:00:41 2024 GMT
Subject: CN=f586f122c4b2faa0833669eb2ebe3f66d493228c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:4e:92:10:24:42:64:40:c5:22:02:3d:29:
ec:a2:0e:fb:6e:9d:9c:07:2e:dd:3f:83:ab:53:6f:
dc:40:65:17:95:23:aa:bb:ab:3c:74:6e:41:97:38:
c1:d7:7a:85:52:e0:87:de:18:47:b5:f9:79:c0:cb:
9a:23:02:ae:c0:ac:00:41:61:32:fd:bb:15:4b:2d:
86:26:2a:5f:ba:2d:33:e0:fc:bb:a6:5d:7b:09:9f:
33:bc:30:07:9e:72:9d:a6:50:e9:fb:d1:f9:1e:16:
98:c6:12:37:1e:eb:0f:d8:2b:18:79:1a:76:5a:da:
1b:25:a1:e6:21:9b:7d:62:1b:e0:4c:f3:10:d6:73:
af:c8:45:b1:85:27:a9:f8:82:c9:a6:cf:8c:9f:6c:
74:1c:a7:2e:38:ab:f8:f6:92:8e:dd:9b:a9:66:63:
a9:ad:d0:65:e0:7b:4d:85:64:b8:bb:71:f1:54:4e:
94:d9:53:a1:a0:d0:0e:7d:1d:8f:71:f0:64:91:69:
51:fd:20:91:49:71:e7:b6:6b:89:b8:96:bd:ff:c0:
4a:d2:03:66:c4:f2:a0:6b:d8:7c:bb:64:7f:05:26:
b4:2a:42:af:d5:f8:d9:28:42:04:48:9c:ad:0c:53:
33:69:de:df:2a:84:66:af:8f:59:9b:01:5e:e7:82:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:86:F1:22:C4:B2:FA:A0:83:36:69:EB:2E:BE:3F:66:D4:93:22:8C
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:58:82:81:0a:ff:70:5d:41:4f:53:72:e5:ac:27:9c:d6:e0:
c8:a4:f4:a8:34:09:11:87:3f:a7:9c:92:d0:74:a8:45:27:0b:
71:3f:5b:3f:fa:76:71:8d:04:f0:d7:04:11:73:05:4a:5d:ce:
c9:9c:4f:61:c0:55:d4:0c:05:4b:31:eb:47:de:75:d9:51:10:
f8:bb:e5:16:19:3e:0e:4c:ce:e0:93:ae:ee:4b:3a:91:ac:35:
c3:98:6d:83:37:53:e4:fc:5b:35:95:69:69:69:1e:a4:07:b6:
f4:67:c9:3f:93:df:a3:23:87:53:af:a1:c7:0f:0f:9c:06:99:
3b:b6:e2:8e:75:bd:ce:3e:ce:0a:ca:0a:de:aa:ac:82:8d:c5:
33:c3:a2:28:a6:39:a7:5c:4a:0b:a6:64:66:8b:53:c9:32:1b:
5b:00:de:2e:ac:81:8e:e6:d1:84:99:6d:2d:33:3f:66:f1:38:
fa:fd:59:5d:31:49:13:66:8c:90:59:30:d4:67:18:38:b4:0e:
38:03:b4:ec:cb:70:cc:1e:fd:b0:33:e3:a9:99:5f:ad:59:b4:
19:d8:3f:2a:44:15:ed:6c:33:e0:f1:e9:1c:05:05:05:a2:e4:
16:91:df:cd:23:3e:c2:9d:de:98:be:ef:ab:c8:e2:05:43:ad:
45:06:ee:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:23 2024 by rpki-client on console-ams.rpki-client.org