Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json)
Hash identifier: Yp+rDRqsO2i0zniHlyV9ENyYpGuOKVFDzWYsZc6kGIM=
Subject key identifier: 3A:EB:85:EE:8C:05:F4:C1:52:9E:60:65:96:A2:2F:20:7F:1B:9B:3F
Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Certificate serial: 0193572E3331439769C7B9CABDF238E337E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
Manifest number: 0D6B
Signing time: Sat 23 Nov 2024 04:01:05 +0000
Manifest this update: Sat 23 Nov 2024 04:01:05 +0000
Manifest next update: Sun 24 Nov 2024 04:01:05 +0000
Files and hashes: 1: VstCv-dBL_2wqqM3hYESjVDJ4EA.roa (hash: rC25GS3hnfanQ8DI1X9ZJK2W2XrNu5xwfp7YmonLNxQ=)
2: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: nmezbKj03Ju0SNuVHdB2laBW3swSFXUQBT35l9Icf+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2e:33:31:43:97:69:c7:b9:ca:bd:f2:38:e3:37:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Validity
Not Before: Nov 23 04:01:05 2024 GMT
Not After : Nov 24 04:01:05 2024 GMT
Subject: CN=3aeb85ee8c05f4c1529e606596a22f207f1b9b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:7d:e6:b9:d5:96:ec:58:be:7c:52:7d:6b:
01:9b:bd:bd:db:61:fd:d8:f1:45:00:6f:da:56:13:
27:e3:b1:11:28:00:9b:97:b7:28:cd:2f:b6:c3:c2:
6a:4e:78:f3:43:0c:28:cf:74:78:e6:a3:78:1f:55:
ca:9b:d2:6e:13:58:13:f0:59:db:40:e0:d8:fc:c1:
83:49:51:0f:53:cb:9b:e6:df:0e:71:1f:23:04:08:
af:d5:62:40:45:14:e2:78:22:4b:e6:40:59:8a:89:
1e:c4:93:12:cc:6b:ae:96:f9:54:a1:9d:b4:fd:7a:
6d:fd:15:fe:00:c5:a3:05:42:82:cd:cb:94:6d:84:
bd:0f:5d:f6:56:96:bf:33:3d:b5:00:bc:03:f5:5b:
90:13:66:ac:00:4c:9a:a5:dc:5c:8f:0c:2c:49:fc:
a1:dc:2e:ff:73:f5:6b:af:c0:40:0f:a8:5b:4d:6a:
fc:5f:f5:2a:5a:9b:c0:74:4e:a8:2c:96:9d:8f:25:
61:2d:6c:86:f5:60:97:37:4a:a9:54:d2:8e:46:32:
0b:23:71:b6:00:4a:a0:78:f3:f8:ad:02:ef:cf:7b:
aa:67:85:34:77:8e:ba:a9:06:88:4b:cc:5f:c1:38:
68:22:60:df:b1:d6:a5:ca:03:cd:a3:4e:3c:bf:b7:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EB:85:EE:8C:05:F4:C1:52:9E:60:65:96:A2:2F:20:7F:1B:9B:3F
X509v3 Authority Key Identifier:
keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:65:7c:5a:d6:3e:de:0d:57:b8:94:86:97:b3:be:07:29:e5:
25:48:21:28:8f:e8:7e:98:cb:b1:cd:72:2e:fe:ff:27:21:a4:
60:cd:a6:3e:b7:bd:53:25:36:7a:a0:5e:69:a6:52:96:a7:fd:
a5:d8:04:7d:c8:92:1b:71:48:fd:e8:29:98:cc:a8:b1:54:d3:
9f:dc:95:47:df:ad:8f:9c:af:ad:da:28:20:40:60:d2:2e:0c:
72:d2:c1:ad:8d:4b:56:f1:ff:d8:c8:fd:66:70:27:52:d5:d9:
fe:c5:15:b6:96:33:10:5a:ea:9e:49:c2:d6:17:aa:d8:52:5b:
02:48:20:56:69:61:1e:a0:bd:a1:27:3f:12:65:e3:5a:af:c4:
5d:43:ec:2a:e2:40:f8:e3:3f:57:b6:b8:ad:6e:d5:97:14:97:
3f:42:bc:f4:30:e3:96:8b:e8:e6:e8:cb:47:62:1c:eb:43:0a:
6c:f2:d6:d2:e7:dd:fb:ee:1e:b9:52:a5:c9:4f:95:6a:e3:f3:
40:2b:c3:74:74:6d:09:a3:13:6b:08:3d:a2:aa:d8:79:f7:85:
ee:b2:44:53:09:04:f0:02:54:52:45:80:4b:7a:b1:ad:cb:55:
db:45:4b:ef:78:82:92:20:5f:b5:55:4c:04:43:e7:39:92:14:
44:20:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:33 2024 by rpki-client on console-ams.rpki-client.org