Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: 7YmecP/xihaCMWyk5z3e/GI+ymakg7X2yAo/bJFrzDk=
Subject key identifier: 17:09:78:60:B4:C1:F7:59:E6:02:FE:FF:AC:3C:26:92:7E:39:20:F7
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 018FB458CE158BB3A75C945DF9070871146E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0799
Signing time: Sun 26 May 2024 10:01:09 +0000
Manifest this update: Sun 26 May 2024 10:01:09 +0000
Manifest next update: Mon 27 May 2024 10:01:09 +0000
Files and hashes: 1: OYt0vLkX6OSggiu7xA6buW43y4Y.roa (hash: /BssRMoBliULqAx+A273NPslV6XomZwucx0A88FFZfE=)
2: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: /a6CbddRQZjMLG9LKkGL+kjSplkBjMQWypcHT4+tQCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b4:58:ce:15:8b:b3:a7:5c:94:5d:f9:07:08:71:14:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: May 26 10:01:09 2024 GMT
Not After : May 27 10:01:09 2024 GMT
Subject: CN=17097860b4c1f759e602feffac3c26927e3920f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:76:50:88:50:47:cc:2a:5a:2b:e0:80:f4:f8:
51:7f:86:80:69:66:fa:b6:b0:f7:e5:7f:bc:60:f4:
1b:33:b8:37:8a:1e:df:94:f8:20:a7:21:8d:f5:5f:
b8:5d:9b:e3:e0:6c:de:6c:53:7c:89:97:8f:12:81:
c0:f7:b0:fc:14:24:5d:a2:1a:73:63:ff:c5:5c:e8:
67:1a:52:a3:ff:19:4a:9c:42:19:38:a9:3a:ca:1e:
98:bf:87:c2:23:5b:5c:76:07:2d:b8:84:29:71:c8:
b1:83:89:17:e4:f8:3f:fb:aa:91:9f:fb:bd:ca:4d:
0d:1e:d6:01:de:4c:4a:64:88:35:94:b4:9b:77:c2:
5e:31:bf:55:06:4d:64:23:ea:73:93:b6:94:89:75:
82:7d:df:84:51:7e:e8:81:ea:65:ab:f5:bd:0a:80:
10:32:a0:fe:1b:f0:96:d5:7e:fb:80:82:b3:06:5f:
ac:33:71:eb:66:97:cb:fe:65:1e:70:e9:e2:6e:fc:
90:f9:55:85:b9:5e:c8:7a:0d:fc:59:7a:a5:78:99:
2a:84:e9:c3:86:19:bc:f0:2f:64:6c:fd:8d:5e:2a:
ef:8f:bc:7e:dd:41:52:a2:da:be:c8:46:a2:19:aa:
9d:52:09:22:a5:d4:0d:26:13:77:04:c4:a2:fe:39:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:09:78:60:B4:C1:F7:59:E6:02:FE:FF:AC:3C:26:92:7E:39:20:F7
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e4:94:0a:8e:97:02:fc:88:1a:7e:09:66:cd:0c:56:73:fe:
85:0d:93:70:41:58:3a:92:ef:2d:96:ae:40:d0:60:ce:d9:bf:
d8:03:b0:ae:0d:61:e2:8b:f8:80:a5:b2:43:6d:eb:41:88:15:
dd:86:b4:5d:06:33:72:a9:e6:7c:88:12:45:93:63:ec:46:c8:
4f:e6:74:28:c2:b5:67:44:09:80:ff:3c:be:4a:27:ce:9f:0e:
55:d6:67:a4:34:bb:4c:82:e6:4f:e2:81:ff:8d:77:fa:bc:14:
19:8b:de:2f:64:a8:2c:eb:6f:a5:37:00:ea:c9:33:b2:47:e1:
ea:6a:e6:e5:1e:4b:37:3d:0c:eb:ce:49:d0:90:11:6e:bd:d7:
2b:0e:10:7b:70:b7:c0:d7:73:d6:10:f9:ef:13:a2:a4:00:2e:
34:1e:41:9a:b6:97:9a:c8:54:3c:d0:8b:f4:90:f4:57:13:66:
88:53:5d:18:6a:3e:26:b5:b4:53:bd:a4:13:63:f4:c7:14:8b:
96:ff:cc:b0:75:b0:70:03:ab:ae:9b:8e:de:fe:0f:f7:d5:50:
ec:d4:9c:6d:7d:fe:17:13:5a:7b:49:9a:90:b5:10:a1:83:ec:
2c:eb:94:a9:e0:d6:14:a3:40:de:69:a7:a2:20:c7:ee:97:47:
2b:18:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 16:53:25 2024 by rpki-client on console-ams.rpki-client.org