Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier: MeR7rVsDdm0XnU1bgJdaDZAC1bjEKBiwZ3x0ZZHjsYc=
Subject key identifier: 8F:E8:50:43:9C:63:E0:A4:7D:C3:C1:3D:CE:8B:63:89:B4:B1:B9:4D
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial: 019356F6E6B2825AE2D0ED86931F7B88F121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number: 033D
Signing time: Sat 23 Nov 2024 03:00:41 +0000
Manifest this update: Sat 23 Nov 2024 03:00:41 +0000
Manifest next update: Sun 24 Nov 2024 03:00:41 +0000
Files and hashes: 1: nCkX2y3Z1L_mEhP4KCw6jFbhDKM.roa (hash: vepIgGWrBFv1QQA7NE739SLiG0/5GvJ6fTZP5yg3YiI=)
2: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: CimDveOVWioEulzs4KEkWXkEppWeAs13GrpRGJYpf/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:e6:b2:82:5a:e2:d0:ed:86:93:1f:7b:88:f1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Validity
Not Before: Nov 23 03:00:41 2024 GMT
Not After : Nov 24 03:00:41 2024 GMT
Subject: CN=8fe850439c63e0a47dc3c13dce8b6389b4b1b94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:4b:94:9e:19:02:8f:5e:cd:5b:f6:b7:d2:
dd:fe:d1:25:73:84:b2:0c:a8:f3:e5:3b:e2:fe:3d:
09:2f:83:a5:b0:cd:07:ee:80:ff:7f:b0:ed:d1:19:
5a:e7:23:9f:cf:4d:c8:c8:a7:f2:48:42:47:bf:41:
81:91:6d:4b:e1:4a:51:70:eb:33:13:31:d1:71:0f:
62:80:7f:25:06:63:02:dd:91:3e:2f:f6:dc:4f:59:
5b:5b:12:0e:c2:c4:e2:30:4b:35:0c:ef:40:3a:f4:
31:9b:ed:cb:f2:be:6e:46:80:25:b6:d6:7b:c4:ae:
d7:13:9c:76:11:73:5e:58:f9:48:9c:af:39:7d:9f:
d7:fa:2d:17:ff:94:59:e6:21:9f:68:ff:2b:6b:26:
86:bc:7d:af:1e:d9:c4:ee:b8:30:e1:33:e4:02:cc:
af:36:c7:24:9b:af:d5:fe:84:2c:d8:7c:bf:a0:e6:
28:fa:99:c1:64:13:43:5f:fc:35:0e:46:76:3b:67:
f9:fc:96:1a:57:c7:6c:0e:69:05:fa:17:1f:00:20:
d0:86:5b:38:48:e9:38:22:6d:66:fa:4f:73:59:64:
8b:70:05:30:43:37:5f:3d:49:86:42:cf:18:59:75:
13:00:8d:fa:31:cc:c0:7c:2b:73:a8:ca:17:53:3d:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E8:50:43:9C:63:E0:A4:7D:C3:C1:3D:CE:8B:63:89:B4:B1:B9:4D
X509v3 Authority Key Identifier:
keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a0:1c:1f:d4:c3:4d:a4:f0:ca:19:06:66:b8:8f:55:73:c4:
15:fa:95:b1:7c:5d:91:3b:33:62:f4:e2:7f:98:9b:f4:65:03:
68:cb:31:69:55:60:9f:dc:74:36:d0:9d:3c:36:0e:6d:21:c3:
ed:a6:f2:c1:eb:f0:15:09:a0:85:04:82:a8:2d:85:46:35:76:
ea:ac:8e:c2:37:ce:19:67:31:35:e1:9e:72:b8:6e:b6:80:62:
e1:df:01:4f:9e:e5:e1:20:d8:1c:89:3a:2e:50:51:69:a1:17:
e7:91:c5:3f:d3:ed:e1:a7:22:69:89:cf:a3:a6:60:5c:10:24:
f4:de:00:dc:da:dc:ce:ae:15:45:b6:73:d8:0c:fc:20:d7:9f:
ca:01:ca:01:4f:cc:da:e1:fa:96:ab:a0:6b:13:a9:b8:b6:55:
08:7a:39:3c:93:5a:f3:f7:59:dd:ff:e9:11:b8:f0:29:87:5e:
7b:55:4f:0a:47:81:b1:ec:3d:73:0e:b0:19:a4:2e:b2:bb:04:
15:9e:63:77:46:d1:3c:d6:bb:c1:70:23:d8:8b:dd:81:61:b2:
e1:6d:3b:34:09:67:e3:ff:30:33:36:17:2f:90:0b:5f:96:8d:
a7:a3:e4:af:44:4f:7b:55:e0:ef:b9:d7:56:e7:ae:81:bc:7f:
7b:59:54:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:26 2024 by rpki-client on console-fra.rpki-client.org