Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: 7+yxShihznBaFCM6gPrDgzBF6u7yr4PW/i/G4sAdEww=
Subject key identifier: D2:5F:18:21:49:01:39:C5:90:FC:81:52:B4:47:6B:87:28:87:46:4B
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 0193549A7A5C5E17E0B9346998CCABE88542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 10B2
Signing time: Fri 22 Nov 2024 16:00:30 +0000
Manifest this update: Fri 22 Nov 2024 16:00:30 +0000
Manifest next update: Sat 23 Nov 2024 16:00:30 +0000
Files and hashes: 1: uKpFS-4fhVcrFNqgQcgXLZynBZM.roa (hash: Q29zEPfooOy53fmPuYQG1hYrq85p6S/Ie1eBrWNx+2Y=)
2: wItpFzp58lB6ATjYQhsdbTwF018.roa (hash: wo1qTpYI3PgXo32hPjYxjT/3jkU7vlVmSAXxCUh9ECg=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: OTDdxY2tWuMeIwPxT5ry5MrEiP8AUixpob4TrTRUp2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:7a:5c:5e:17:e0:b9:34:69:98:cc:ab:e8:85:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Nov 22 16:00:30 2024 GMT
Not After : Nov 23 16:00:30 2024 GMT
Subject: CN=d25f1821490139c590fc8152b4476b872887464b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:10:2f:68:51:4b:6f:7c:d8:72:5b:45:a2:
69:55:70:e6:d1:48:82:08:8f:f2:fa:6e:76:2e:a5:
fd:91:5b:07:65:f6:ef:10:6c:84:f5:18:a7:2d:7e:
eb:18:88:cb:d8:54:70:84:fa:e4:ea:4d:ef:4a:ab:
c7:ff:50:0d:9c:5f:34:6c:d7:0e:79:22:dc:73:f2:
19:ac:41:ee:a1:bb:c7:65:c9:01:67:4e:2e:d2:2a:
e8:1e:68:a4:4a:a7:6b:a5:e8:42:5b:65:68:63:9d:
01:94:41:07:c3:94:27:b3:cf:b9:d2:30:09:4b:05:
ce:ba:de:3e:9f:23:e3:56:70:e1:d9:69:8b:b2:ee:
49:8a:d3:51:af:55:0b:af:76:9e:53:6d:82:23:5c:
bf:b1:27:e7:26:88:b8:be:3e:03:b8:a9:59:b0:9d:
cd:8e:31:c9:8b:75:c1:71:b7:73:f6:38:ac:e7:45:
27:1e:bd:b3:2d:f7:60:4b:17:f6:60:6f:9d:01:9f:
9e:05:ea:1b:ba:ba:16:45:6e:a5:4a:aa:0f:c7:2e:
9e:ad:4e:de:b8:de:63:49:2b:b8:8e:d1:ea:b8:9e:
fe:07:9b:a3:d8:e8:ae:2e:0d:46:1c:bf:c0:4a:f9:
37:29:df:3e:b0:e9:e8:c5:4a:0c:c8:e6:d9:04:78:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5F:18:21:49:01:39:C5:90:FC:81:52:B4:47:6B:87:28:87:46:4B
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4b:2d:23:96:9b:3a:6b:5e:ef:33:2f:a5:66:f0:5c:d3:80:
bc:cb:1b:eb:5f:35:89:6a:9c:58:f6:b3:65:f7:ef:18:f0:8f:
00:6c:88:58:44:f9:e5:9d:e4:42:4e:29:91:a7:38:ce:ed:96:
65:f2:36:08:b6:f5:62:25:1a:6d:ea:b0:3c:ee:47:2a:8c:db:
92:24:43:bf:34:02:3b:72:85:44:8d:c4:42:20:f4:df:78:e5:
cc:df:d8:59:01:ef:c6:71:59:46:09:1e:52:1f:de:7c:81:96:
d7:5d:30:7d:18:eb:9c:a9:b6:fe:07:38:9f:55:7a:ad:68:3f:
5d:3b:f7:f4:b8:17:a3:11:b1:bd:df:bd:e4:3f:9f:42:c7:c2:
44:93:7e:4b:5c:cd:40:52:2d:bd:16:b0:5c:05:f7:33:a8:7d:
cc:6e:f3:de:10:da:65:71:6b:a7:67:b9:74:73:8e:34:68:b8:
3d:40:3e:dd:96:6f:2f:c8:32:c9:29:49:12:e1:93:74:ff:65:
64:6c:03:c3:22:15:50:45:2a:6d:bb:a5:1b:cd:5c:c7:b8:b5:
16:a1:77:ca:df:2b:da:22:82:73:a5:1e:03:77:a1:3e:f1:3b:
23:22:0e:f4:e6:e7:f9:e5:48:3b:73:43:97:43:ae:15:49:57:
ad:87:78:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:23:30 2024 by rpki-client on console-fra.rpki-client.org