Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: L3l3sjdA38DDdRwIOyZeaIkV/xHNO0q1nBPVp2URTPQ=
Subject key identifier: EA:7B:BA:F4:CB:6E:89:67:A1:A3:2C:E3:D1:33:01:CD:B8:32:52:DF
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 019369344ED4583674021B57683EE1D2937C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 1154
Signing time: Tue 26 Nov 2024 16:00:55 +0000
Manifest this update: Tue 26 Nov 2024 16:00:55 +0000
Manifest next update: Wed 27 Nov 2024 16:00:55 +0000
Files and hashes: 1: WUiXj3GjUmJGJY1w1lU8vl74uiA.roa (hash: i5IT94Om3IUa+kfLYPnU/J7mNiFFo15dzoQLlAFeK1w=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: HrGEg5LoY7Cg/AdX5LEC48IF5KrQrxcUy2BomO13a5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:34:4e:d4:58:36:74:02:1b:57:68:3e:e1:d2:93:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Nov 26 16:00:55 2024 GMT
Not After : Nov 27 16:00:55 2024 GMT
Subject: CN=ea7bbaf4cb6e8967a1a32ce3d13301cdb83252df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:41:a2:f1:58:15:de:da:67:68:04:9d:31:
9e:53:d8:c0:b5:76:2e:99:a0:f1:7e:c3:29:9b:3a:
aa:88:37:ef:0e:22:f6:89:64:fb:21:c3:29:62:ee:
68:58:43:fe:3b:c3:a6:09:13:db:10:44:f1:50:0f:
49:77:f9:24:f9:48:e1:c9:f8:3c:e2:6f:29:7b:ba:
63:c2:54:7b:91:d3:bf:60:58:b7:16:d1:4b:00:9c:
2f:27:a2:f1:d8:7e:eb:05:ec:a0:45:50:8d:06:3d:
c3:18:13:2c:b4:3e:65:79:ed:2a:b0:76:65:6c:45:
40:21:17:4c:be:1e:6f:78:3d:cb:75:6d:82:8f:00:
3d:5c:53:83:5e:4d:18:3d:98:8e:f7:00:66:15:01:
26:64:0f:b1:4d:eb:f6:1c:03:53:37:9c:b9:f8:9d:
94:0f:08:d0:5f:4c:c7:65:62:b7:73:66:9f:fc:ad:
cc:af:49:a9:3c:24:18:3c:4e:4c:4c:b1:db:ba:bb:
e4:4d:18:3a:8e:0c:60:52:fc:82:0c:d7:36:6c:04:
33:92:ec:e7:53:34:a4:5c:98:6f:48:60:e5:1e:ee:
f1:22:7d:3c:bc:df:9d:94:3f:e8:6b:bc:18:ae:35:
77:4d:68:db:ee:42:53:af:d6:a1:2d:b5:fa:db:a8:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7B:BA:F4:CB:6E:89:67:A1:A3:2C:E3:D1:33:01:CD:B8:32:52:DF
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:15:89:89:69:e3:b6:03:10:3c:08:1f:f4:df:29:d3:34:09:
af:2e:83:28:92:b4:c7:13:82:87:1f:25:b1:19:44:78:3b:73:
86:00:91:76:f9:67:a9:e2:c8:5a:3d:da:54:3d:ad:4d:ee:bd:
71:2c:d2:9b:83:f9:3c:60:f4:e3:1a:4c:ea:38:fa:29:1b:8f:
8a:34:65:1b:0b:ac:ab:59:2e:92:f5:43:56:b7:cf:79:d3:fe:
21:ef:b3:aa:3a:c5:4a:92:51:ef:2b:a4:fe:25:e8:0d:cb:6e:
28:ed:6b:ce:14:a3:87:15:ad:a0:ed:81:0d:07:a1:1f:0b:9b:
8a:85:0e:f5:03:f3:dd:1d:77:0b:f2:0e:0e:c8:3b:ea:11:0e:
2d:24:71:8d:fc:b9:31:02:10:0b:9e:60:b9:a1:78:65:a7:01:
7f:b0:d0:65:23:16:2d:96:28:74:4c:84:9b:78:ed:f7:c0:1a:
80:a1:41:ee:d4:ab:c3:98:89:ab:3b:dc:91:be:7e:6d:0d:13:
82:b3:25:5d:ac:c8:3c:d3:cb:30:42:f4:9f:82:02:bc:88:29:
af:d4:d2:70:39:c9:db:37:53:5d:83:f2:42:2f:bf:f7:b6:f7:
3e:66:ee:1a:1b:a1:8e:47:2a:0b:89:b5:1e:89:1b:aa:a2:c7:
12:e7:0a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:33 2024 by rpki-client on console-fra.rpki-client.org