Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
File: XtXKWxx3mVWyVz2isQzXxZH57hs.mft (raw, json)
Hash identifier: wDXeve9QQWGTSpynIaScD7ZElekSdWLn766XJHabwI8=
Subject key identifier: 02:C8:A4:8D:D2:2E:B9:EF:BE:60:81:DD:3B:9A:75:67:1D:4E:D3:57
Authority key identifier: 5E:D5:CA:5B:1C:77:99:55:B2:57:3D:A2:B1:0C:D7:C5:91:F9:EE:1B
Certificate issuer: /CN=5ed5ca5b1c779955b2573da2b10cd7c591f9ee1b
Certificate serial: 0193568A35E07E3FB813117A2790B5F1A753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
Manifest number: 08B2
Signing time: Sat 23 Nov 2024 01:01:58 +0000
Manifest this update: Sat 23 Nov 2024 01:01:58 +0000
Manifest next update: Sun 24 Nov 2024 01:01:58 +0000
Files and hashes: 1: XtXKWxx3mVWyVz2isQzXxZH57hs.crl (hash: HxTkLPyH1pbgwcNXKzJY/yxh6LQR5192KCcpEXUYito=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:35:e0:7e:3f:b8:13:11:7a:27:90:b5:f1:a7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed5ca5b1c779955b2573da2b10cd7c591f9ee1b
Validity
Not Before: Nov 23 01:01:58 2024 GMT
Not After : Nov 24 01:01:58 2024 GMT
Subject: CN=02c8a48dd22eb9efbe6081dd3b9a75671d4ed357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:dc:aa:ce:85:d0:f9:54:8a:b9:49:01:bf:
27:ce:78:3c:62:10:ff:95:00:dd:90:9c:18:3c:ce:
a8:48:9a:07:9c:93:02:cb:1c:33:1f:47:90:99:1c:
7b:92:aa:b4:9d:15:67:39:a2:c1:10:45:45:05:c9:
5e:a0:11:1c:3d:43:83:d2:cc:7d:e4:fb:f2:5d:36:
3b:c9:bf:eb:04:b3:ba:49:62:c3:50:ec:ff:d4:b4:
d3:0f:f3:73:10:81:a9:dd:9b:63:cf:a7:88:fe:7b:
50:d0:8e:05:5b:75:9b:67:0a:c9:4e:a1:d0:9b:f8:
7d:02:a8:d3:0e:df:50:c9:a8:40:0d:8c:4c:bd:1d:
8f:df:7a:e5:e7:90:37:19:eb:13:ef:c0:d5:c6:04:
74:53:4e:5e:1e:42:f4:14:25:da:f4:d6:69:85:04:
dd:1f:1e:13:38:4d:d6:30:d8:e8:92:ed:73:9c:36:
84:61:04:d7:39:3e:33:a3:fe:4e:a4:dc:13:f7:fc:
6e:8d:12:72:19:45:ca:c9:db:94:dc:a5:85:4d:a5:
31:a5:b5:71:f9:bc:7e:4f:72:bf:55:07:04:89:9a:
e1:86:47:21:bb:39:6b:17:46:64:87:a6:d1:d1:6b:
4f:92:5d:ca:1a:c8:0d:9d:d5:7c:cc:32:e6:1a:09:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C8:A4:8D:D2:2E:B9:EF:BE:60:81:DD:3B:9A:75:67:1D:4E:D3:57
X509v3 Authority Key Identifier:
keyid:5E:D5:CA:5B:1C:77:99:55:B2:57:3D:A2:B1:0C:D7:C5:91:F9:EE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1e:5a:ad:c0:ff:1d:9a:60:61:07:9a:1c:a1:cd:a2:8a:6c:
a4:d8:3b:3c:0a:1a:f4:02:b4:83:25:f1:14:7a:70:78:85:93:
47:0e:da:52:87:5e:98:a0:c6:d1:67:83:40:db:af:e1:0f:5b:
5d:35:fd:c0:7e:09:2c:aa:61:7d:c8:cd:d9:42:e4:b1:19:cb:
3b:3d:b5:4d:5d:6b:6f:ff:26:8e:91:7c:f8:94:2c:72:0b:4f:
0b:23:07:c9:d7:bf:97:2e:6d:4f:b8:d5:e7:0e:91:bf:b8:c3:
39:16:c3:58:05:55:a1:b1:c7:4f:8c:cf:59:09:18:5b:88:36:
d3:2d:e5:09:ce:dc:0f:03:ec:fe:a4:b4:27:69:c6:67:f0:ac:
34:8e:73:60:5a:e4:55:8b:16:8a:1c:cf:fd:b6:0e:ae:f9:82:
d6:d6:7f:12:62:31:5c:c5:8b:54:23:cb:f0:7e:9c:4c:d1:e0:
b7:16:ec:27:a4:a5:55:86:21:52:49:95:68:e2:ba:db:98:01:
fd:2f:f2:75:94:28:4e:ce:14:50:c0:19:48:19:df:91:30:6f:
98:09:cc:ec:50:d4:fe:ca:e6:a4:53:08:45:71:ad:b4:07:d4:
40:36:a9:04:96:5c:65:32:df:b7:a8:a4:ab:f5:3c:c4:6f:5f:
d7:1e:ee:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:55 2024 by rpki-client on console-fra.rpki-client.org