Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: 4hryE1pxQG9ZF/8rnS/A7i2hmKQZmPFzFh/DcPltVuw=
Subject key identifier: 99:30:72:F1:CD:FB:87:4F:7A:A7:0F:4A:F8:4F:64:07:B1:C5:E4:A1
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019356F723412408957A271FB1EDAF1FC4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 12D3
Signing time: Sat 23 Nov 2024 03:00:57 +0000
Manifest this update: Sat 23 Nov 2024 03:00:57 +0000
Manifest next update: Sun 24 Nov 2024 03:00:57 +0000
Files and hashes: 1: 2ClkNxUAUhSyAF-0grUmtiK9Tk0.roa (hash: f1uJ98vzrs0ZDvpPzKaQpUAt30l0r74t8feq86mf5Sg=)
2: 3ztrDg4Yv8zhRFiF3w10J7QieH0.roa (hash: kpV3AilIaEhiCQdpFOKAlzDBbtlcPCksH9aD1sbZGhg=)
3: MTHCrmEEzXlB20dHmHlArbrDXLg.roa (hash: AHUdhVWc3NjvsyTUn/ObFij3ueUrch9LCn6c2FAGgUg=)
4: dSfRQc_TfWd42qcHTH9nP01EqCY.roa (hash: Rrjr6wjE9Wv5B9gbEmVubSMnVbrIPXD8iJ6XW7I18nE=)
5: gDHfXxpJiL6qAIM-DmGDDPPXhsE.roa (hash: EwM+qmk0XKl3xT+H8yDmY8L+ymzTN4F0sGQsq5heySI=)
6: ofxeNGnx6R5zzi9eDK1tVntGSG4.roa (hash: Wr5lmOqgtqR0AVUnbfhhLt1qH4qVCfxf+47UVQWD5ik=)
7: qOQNiW2e6VHxtIQ-7AybVqdHiUA.roa (hash: X9FjQBnG/omhDdqRcJuENB5gaV9SFO+GlH1W+uagdW4=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: 8lPqsXde70xYqP14XccbZP1T45hU+e0abDKePpksREk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:23:41:24:08:95:7a:27:1f:b1:ed:af:1f:c4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Nov 23 03:00:57 2024 GMT
Not After : Nov 24 03:00:57 2024 GMT
Subject: CN=993072f1cdfb874f7aa70f4af84f6407b1c5e4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:94:47:e1:f3:f4:9d:59:9f:de:a0:2a:84:
95:85:23:fd:86:4b:ee:b0:17:86:05:9d:77:8a:e2:
87:31:9b:01:19:17:e2:00:e3:55:8f:b3:0c:1b:63:
bc:fd:76:6c:ec:1a:2a:50:49:66:d1:61:be:3e:b4:
17:3c:60:72:8f:9a:6b:34:c9:95:d3:92:17:79:11:
15:2c:cd:d6:f1:8d:a8:1a:a1:a6:a7:58:f5:cf:01:
1e:97:1e:8f:94:e5:c6:08:ac:e4:8c:98:f8:71:b8:
02:e7:b1:f1:dd:17:20:82:71:12:31:6e:29:1e:f7:
10:55:57:75:9e:48:31:c1:92:66:e2:8a:a7:9f:79:
d1:aa:2f:49:29:ae:f4:7d:7d:cc:02:6c:0e:ff:de:
89:20:7b:ce:18:06:48:07:75:a8:6d:6a:c5:b5:2e:
b2:67:5e:45:57:29:90:be:8a:d8:d2:ed:12:52:1f:
83:f1:5d:c0:71:ea:b9:f6:d7:7f:61:d8:26:ab:02:
b8:9c:5b:b2:f0:d5:a3:b4:65:55:8d:cc:be:94:74:
b0:16:ab:0c:ab:05:f8:8c:7a:1a:e1:30:ab:33:6b:
33:b2:44:b6:08:c8:38:66:ca:53:88:3a:7d:a8:bc:
41:e6:da:6c:74:4b:9d:2a:65:97:e8:64:33:36:a9:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:30:72:F1:CD:FB:87:4F:7A:A7:0F:4A:F8:4F:64:07:B1:C5:E4:A1
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:66:b4:19:a4:c9:3d:d7:b9:be:88:47:83:17:48:3a:e0:1d:
da:84:aa:4a:9b:e6:fc:7f:ec:85:a2:08:2b:80:2e:89:52:45:
03:d0:bd:ea:a3:f6:ce:1e:ef:6e:c0:3f:59:92:e8:4b:80:87:
fa:b8:de:0d:74:d4:df:a1:e9:02:19:5a:bb:12:9e:82:fa:b3:
b7:b9:3c:9c:d1:4a:24:6f:39:5e:f4:64:80:62:82:4d:e6:50:
c5:82:9b:13:2f:e4:30:bd:a9:e3:7e:0e:3a:9b:8d:47:e5:9f:
0f:dd:da:5a:ad:32:ef:8e:34:f5:f5:6a:2b:94:04:e3:69:15:
cd:bc:f9:19:8c:83:39:21:09:25:87:14:51:17:d8:48:e1:52:
84:fe:03:2d:34:7a:bf:0f:0f:36:57:4f:ef:dc:53:ea:cd:82:
98:c1:b6:16:07:a5:53:e4:1f:f2:5a:61:fe:1d:25:49:16:43:
a1:5e:91:20:c7:2b:98:72:ca:b6:4f:41:c9:88:5e:18:ed:16:
3e:63:5e:14:be:f0:4e:f1:e4:02:21:b8:3a:9d:98:36:82:ca:
ec:ec:08:3d:db:4e:dc:b1:a8:24:1b:8c:c7:2c:4e:9d:8f:e3:
e0:2e:54:35:a7:bb:71:9b:7c:c0:81:79:eb:54:dd:1d:cd:d2:
49:b6:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:38 2024 by rpki-client on console-ams.rpki-client.org