Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: Og9epzIcVeY2jN6R0gEAbKGEf6HGJ6mm1fhcQRWOxj0=
Subject key identifier: 75:AF:0D:32:08:09:EB:27:0A:78:BA:E6:1C:45:22:D3:74:BD:B2:58
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 0193568AFABB77D150E6E80BA21FCCA29E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:02:48 +0000
Manifest this update: Sat 23 Nov 2024 01:02:48 +0000
Manifest next update: Sun 24 Nov 2024 01:02:48 +0000
Files and hashes: 1: U-r6NiUcxOsfE-4goSYM1HYz9tI.roa (hash: ev/z2RUdIk0c1IQG469Zd3Eb0VJTfOmBH8av8WKsEBA=)
2: XrVoIgy1S_BdtsysqVLW8ZiH2kg.roa (hash: e0RQb2qbB2ocnesXsyEtAcqHAjUcNrmK014SX6gal40=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: aAY+PK8tNdW7ornyuU8O1EkHUyh2HLU/4Z5KCUvLP1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:fa:bb:77:d1:50:e6:e8:0b:a2:1f:cc:a2:9e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Nov 23 01:02:48 2024 GMT
Not After : Nov 24 01:02:48 2024 GMT
Subject: CN=75af0d320809eb270a78bae61c4522d374bdb258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:51:ae:d8:ec:e1:63:72:fa:b8:be:ed:69:
d6:f3:f8:10:aa:53:7f:08:39:f7:45:ae:9a:b9:03:
fc:5a:a1:2a:23:e8:2a:e4:8c:f6:0d:95:5a:4c:79:
9e:21:57:ca:28:44:8a:b2:55:87:d1:fa:e0:75:80:
48:56:ac:3b:b4:fa:a2:f2:db:67:34:09:c4:fa:27:
d9:7e:a9:75:e5:93:37:ba:6f:a2:4f:73:44:ed:8b:
10:3c:97:6f:d2:fd:98:b3:0f:67:ab:77:eb:00:29:
4c:47:25:ab:04:78:42:39:53:d8:0e:68:88:49:44:
1c:96:4c:02:19:f5:b8:cb:14:37:6a:f8:4e:f3:9e:
11:90:d0:31:0b:d2:89:51:dd:f4:f2:fe:b0:32:c3:
48:94:c5:15:17:97:10:5a:68:5c:8c:57:45:75:27:
80:3e:84:d3:a1:63:ae:e9:11:fd:4b:75:41:0b:e9:
a8:5e:12:77:8e:8e:d2:32:ee:d2:fe:ef:6f:33:15:
e7:11:82:80:20:e3:3c:5b:d2:e9:9b:5f:7c:54:e6:
55:e1:13:c0:e9:45:2a:6a:ab:ab:d5:8d:3b:44:ec:
5e:c0:87:1b:bc:7d:c5:93:f4:40:cc:47:3f:0a:11:
d3:ab:1b:fb:75:b9:95:65:bd:37:33:52:0f:e2:21:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AF:0D:32:08:09:EB:27:0A:78:BA:E6:1C:45:22:D3:74:BD:B2:58
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5d:f9:3f:d2:2c:c5:37:c7:a8:d6:b7:f9:96:9d:f2:02:16:
3b:bf:f5:52:8d:f9:43:fb:68:55:a4:33:ac:40:76:be:4e:43:
1f:ae:94:92:0b:25:b5:64:2a:be:9f:b9:8e:09:4c:48:5d:5b:
cb:84:1a:80:5a:80:3d:22:90:59:e5:ac:b3:5b:1c:c0:da:1e:
bd:82:6d:ec:42:b1:45:53:4f:21:1c:9e:c9:9f:f8:a6:e5:74:
56:4e:93:a3:ab:da:52:5f:9f:df:90:17:3f:3b:79:8d:d6:16:
37:b6:89:c8:3e:78:04:67:7b:8d:c4:00:10:8c:f7:ee:54:02:
60:8d:94:02:49:f0:a6:67:c7:4e:f6:5f:cd:42:9c:b9:4c:ae:
5c:99:6b:e1:89:d6:b7:22:26:c3:f2:7d:56:cd:de:d3:0f:df:
a4:f2:41:5c:45:6a:43:48:7e:e5:30:8e:25:80:23:04:dc:de:
ec:83:b8:6f:d0:8f:e4:cd:af:d2:6f:b6:51:22:03:c8:d1:52:
83:38:b3:f1:7b:0f:56:7a:d2:e8:d8:4b:ab:d7:24:ce:4a:1e:
fa:6f:9e:dd:3a:3a:9d:f1:38:60:74:a2:ee:5a:35:59:f0:36:
b3:21:48:6d:9d:b4:29:16:f3:c3:d9:cb:b9:60:87:ab:55:5b:
7b:75:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:06 2024 by rpki-client on console-ams.rpki-client.org