Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: Isyw+skwjhCEKNNE/Hl2Y0bO5/OH4iF2lemdrQaH90g=
Subject key identifier: 90:A9:0E:02:D6:BE:60:3C:BB:E0:3E:B1:AB:29:46:AF:96:4F:52:9C
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 019357D2D315B55FF57E6F1F2BBE74B980EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 1159
Signing time: Sat 23 Nov 2024 07:00:54 +0000
Manifest this update: Sat 23 Nov 2024 07:00:54 +0000
Manifest next update: Sun 24 Nov 2024 07:00:54 +0000
Files and hashes: 1: jhZ7_mCRX57QUbnIcrSnYHZPQgg.roa (hash: q7wMIF+1g+NPKcxOz+H1iwr1RLtWBRLOtlY2QNZ3Occ=)
2: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: /B8uAmIxDYfD1aA9Ic86+VzrtE1ZW6zEDuWwEyOacWc=)
3: yjnUJtyU_clRWAbrY3pAkPk7lhs.roa (hash: fWGcWyx2b/65zC+DhNbIww7B3eHkso2c/1hz9DHXzGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:d3:15:b5:5f:f5:7e:6f:1f:2b:be:74:b9:80:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Nov 23 07:00:54 2024 GMT
Not After : Nov 24 07:00:54 2024 GMT
Subject: CN=90a90e02d6be603cbbe03eb1ab2946af964f529c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2d:2a:78:ec:7c:95:1d:7a:86:a9:44:bc:aa:
6e:45:ff:5d:fb:44:b8:28:4f:b1:49:92:14:6e:f0:
69:3a:95:04:a3:14:15:72:1f:b4:68:72:92:28:a0:
b9:fe:2a:45:70:db:a5:ab:0f:33:41:11:2b:5d:0a:
6c:35:67:87:cb:86:50:21:4c:93:12:64:f5:1c:9b:
52:ca:a4:ca:18:1d:f9:94:3c:36:3f:35:82:bf:67:
9d:83:21:db:37:12:1d:a0:85:28:e5:45:3e:e7:38:
ed:59:07:d9:16:36:0b:77:90:22:08:5a:fc:0b:d2:
4f:a0:4a:d3:b2:4c:28:46:c6:6b:50:b7:cc:d1:cf:
7f:78:37:31:24:da:b1:67:78:a2:c2:2d:58:f5:c0:
69:ec:45:3a:ec:9b:05:b7:03:77:6d:37:df:61:61:
be:08:8a:49:8d:1e:52:8d:b6:60:cf:94:59:c3:6d:
bd:79:eb:f7:7a:a5:a4:61:c5:43:4b:e1:37:25:ef:
03:5e:71:fd:cf:66:69:8d:93:04:4e:98:9b:96:6c:
82:38:bf:79:9f:57:e4:e9:f8:11:68:ee:42:b7:e3:
ab:e2:58:c2:18:11:9d:7b:fa:cb:f9:a1:ff:48:53:
0e:27:ea:58:dc:a1:d4:ff:3f:61:f6:a3:b1:59:a0:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A9:0E:02:D6:BE:60:3C:BB:E0:3E:B1:AB:29:46:AF:96:4F:52:9C
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a1:2d:78:8d:79:f3:c6:9f:93:de:9a:63:1c:c3:33:cb:36:
3c:9e:7f:66:8d:dc:a4:c4:30:2c:48:47:5e:64:78:ec:73:64:
b7:1b:7b:6f:1d:da:60:5e:16:e8:0c:64:1b:7d:06:44:a2:b5:
5c:78:70:f9:4f:32:44:ef:b6:c5:79:bd:f1:31:93:93:4c:d3:
df:1a:f6:dc:dc:82:1e:6b:c0:e3:9f:3b:e2:e6:5f:fa:5b:94:
0a:16:23:28:b6:fa:68:11:e2:4e:e0:dc:0d:cc:1e:a2:a4:11:
0a:d6:b1:64:36:de:e2:93:31:05:d5:c8:28:bd:ac:b7:c7:da:
12:4a:a1:c6:9e:93:dc:fd:f7:e7:9e:8d:33:6e:94:68:89:c9:
ca:1d:fc:00:ab:f7:9e:5d:1a:60:78:78:46:87:7e:95:84:98:
a3:77:af:7a:02:8b:b6:f0:c3:97:bb:ae:c9:96:3e:ab:2e:d9:
2b:50:90:79:c3:eb:97:e1:c4:c5:fb:53:1f:b3:54:17:1e:a5:
41:e2:46:ea:a0:fd:3f:69:9a:af:5c:9b:a2:82:2b:c7:be:0a:
87:29:d8:ba:5a:04:63:b8:19:af:94:de:84:c7:e4:51:69:96:
a1:a1:6a:13:7f:17:e3:c5:a6:74:ab:77:19:99:a6:48:b5:38:
0f:5a:7c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:26 2024 by rpki-client on console-fra.rpki-client.org