Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json)
Hash identifier: KXm2QN9ns2Fi2t/flK3aBvz8BWK46bgYwPolmD9rRT0=
Subject key identifier: 6C:62:05:A1:97:40:0F:45:68:9D:EC:50:5C:E9:B1:C9:C3:04:C9:8C
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 01936A7DB69392DB6F584CFF05C489DD709C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
Manifest number: 137C
Signing time: Tue 26 Nov 2024 22:00:43 +0000
Manifest this update: Tue 26 Nov 2024 22:00:43 +0000
Manifest next update: Wed 27 Nov 2024 22:00:43 +0000
Files and hashes: 1: GWot3od0uNOJoc4Wlxhdb5oOVj4.roa (hash: /7R0Yx9S+b2aeUAvnl4vWcTsoI3M1TP22KHwlW4BilI=)
2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: ZA3FYoaiwLqgCMm1ixaqcJHXFaEsDGYRyQ3GsSu3TIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:b6:93:92:db:6f:58:4c:ff:05:c4:89:dd:70:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Nov 26 22:00:43 2024 GMT
Not After : Nov 27 22:00:43 2024 GMT
Subject: CN=6c6205a197400f45689dec505ce9b1c9c304c98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:7e:02:4c:7e:ca:b1:7e:30:57:e6:9b:37:
0b:3b:82:e1:01:53:fb:42:1f:2a:42:ad:77:8b:a6:
6b:e7:a7:b3:ee:e2:f5:d6:91:51:71:b3:e4:08:c0:
48:57:4e:31:81:f0:ad:97:fe:6f:92:b9:95:b9:67:
dc:8b:f0:59:64:bb:81:a8:cb:d7:2a:16:1c:a7:b5:
f8:53:c9:b5:70:1b:78:29:07:1e:33:ef:ae:dd:6e:
10:46:27:8e:12:4d:ed:78:01:4a:c9:c4:81:ce:85:
b0:db:4e:5f:be:01:9b:9a:ad:4c:a8:af:c4:07:0b:
2a:61:2e:ed:ad:80:2e:aa:36:e7:12:53:6d:fa:a2:
20:29:18:f7:22:d3:56:ed:8f:33:29:03:c1:9f:a9:
c4:a9:08:5f:26:1d:1a:8c:8e:75:65:2d:d4:a4:21:
bb:7b:af:fe:d8:0e:64:8f:f5:cc:77:39:0a:4a:a8:
83:72:4a:ad:19:97:4e:41:66:d1:92:81:75:08:2c:
ca:ee:0d:42:4f:43:e2:ca:e0:9b:eb:3b:3b:23:1b:
87:fd:b8:68:19:ed:55:38:ba:a0:2a:48:ae:64:bb:
7d:91:6c:1c:e7:d2:8b:f2:02:6e:8c:50:6c:82:34:
cf:46:b7:ee:73:85:a1:62:bf:e6:80:1a:f2:c7:72:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:05:A1:97:40:0F:45:68:9D:EC:50:5C:E9:B1:C9:C3:04:C9:8C
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ac:12:20:f6:ff:d8:7c:9c:38:1e:8b:ab:f1:35:ad:d1:72:
57:9f:24:2c:c1:4e:c7:63:e9:00:f9:0d:20:13:96:70:92:f5:
62:ff:fa:eb:21:1a:e2:df:15:73:d0:c9:13:c9:9d:17:95:27:
e5:06:ac:1b:c7:d8:28:8f:61:83:5b:e7:24:c2:94:1a:d1:35:
bb:61:50:80:40:81:b3:64:3b:70:67:ec:e0:6f:97:8a:df:36:
76:58:f2:96:99:6c:19:da:3e:dd:8f:5d:d8:60:7a:69:51:4e:
75:8a:c2:71:91:41:55:42:86:fd:98:7c:95:c9:1e:c5:79:4d:
ff:a2:bb:48:c2:f4:a7:01:4d:85:a5:fa:31:c9:9b:08:75:23:
3b:5e:0d:c3:5f:bc:35:be:79:34:9d:d9:96:56:f1:5a:14:71:
49:99:41:6c:2c:5f:26:20:83:23:6f:01:4f:13:eb:87:b9:18:
1a:84:d7:70:aa:e3:df:6f:20:c1:c7:bc:13:ed:f2:20:72:e5:
59:42:51:2d:7a:b7:b8:16:cc:7b:c2:92:e9:f9:4d:38:fa:f1:
a0:fc:80:3a:79:4d:75:b3:9f:0c:81:07:1c:d4:4f:bd:96:13:
c3:15:00:47:c3:20:e5:07:e6:36:06:6d:23:9f:49:ed:5b:28:
d6:76:28:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:33:39 2024 by rpki-client on console-ams.rpki-client.org