Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: 3AGBN4ZYxxq8NJgug15/naEAw8e8gfQ1QaBUbdfRDts=
Subject key identifier: 06:DE:2F:23:4F:F7:36:13:85:AD:79:2B:A9:2F:D0:11:34:8F:E9:FF
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 019359F7B5FA1F2C42EB82627DBC29732192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 12A4
Signing time: Sat 23 Nov 2024 17:00:26 +0000
Manifest this update: Sat 23 Nov 2024 17:00:26 +0000
Manifest next update: Sun 24 Nov 2024 17:00:26 +0000
Files and hashes: 1: ocQhQAOzwquLn2u6aNKByDtPAvo.roa (hash: Q59f/FnxYQT8dTD8yyT4m44d23F4QXEU/akMQwdZl2M=)
2: pcmtGjojejGcUFhd101DwNsmFmk.roa (hash: fWeU0eFmkRKeMwshSwPHIONlScsI1xyzJs64bnAuo0A=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: +rE5J6PXpnUyka9EasHaB5dHEZGhGt35PjdEO9j7Ctc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:f7:b5:fa:1f:2c:42:eb:82:62:7d:bc:29:73:21:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Nov 23 17:00:26 2024 GMT
Not After : Nov 24 17:00:26 2024 GMT
Subject: CN=06de2f234ff7361385ad792ba92fd011348fe9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:bb:3b:ad:66:98:8d:ad:ec:7d:d5:ff:51:
a1:15:5c:b4:52:ad:c7:54:e6:09:10:ec:cc:28:dd:
b5:86:24:0d:39:ce:90:61:e4:41:c4:59:25:e6:92:
5c:1e:ca:71:cc:06:50:81:c5:41:a5:0d:c5:7e:f3:
be:83:12:b3:ed:4f:4c:24:f3:5e:e6:37:bb:01:25:
a0:f5:5c:60:1a:7f:29:f3:f2:38:75:45:c0:c3:40:
ea:52:90:55:3d:91:d3:c5:cb:73:90:61:41:93:ae:
82:9d:94:8d:29:c8:34:cb:f2:ee:50:e5:7b:2c:67:
cf:1e:b0:a6:df:53:c0:0b:48:60:da:e5:f5:a5:7d:
96:86:0e:dd:93:2d:94:47:87:f1:16:c9:d3:11:d0:
08:21:4a:17:f1:0c:56:aa:1c:bc:13:24:56:65:4c:
2b:00:0e:e6:3d:48:68:7c:cb:88:df:3b:8b:8f:cf:
74:29:22:a9:6d:31:f7:d8:ad:0d:7c:fe:e4:2a:44:
ed:11:ff:a5:d5:f1:56:35:ff:24:d5:05:10:62:5f:
08:38:15:10:aa:64:5d:90:ba:ac:37:47:1d:8c:99:
2e:b6:77:35:ab:43:10:40:6a:a6:3c:3a:12:0b:d3:
97:bf:78:d6:7f:b2:d1:3e:b6:c9:d7:2e:8e:6e:21:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DE:2F:23:4F:F7:36:13:85:AD:79:2B:A9:2F:D0:11:34:8F:E9:FF
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:52:cb:9c:45:5b:a3:a0:c9:d7:78:0a:60:ec:8b:68:05:8e:
ba:5b:e9:2c:75:27:b1:60:73:45:ec:88:67:1a:49:c9:d7:f1:
1a:8e:76:95:5c:9b:9f:5f:52:b6:fa:a5:cb:f2:a0:53:60:9d:
17:d1:df:55:f5:05:2c:cd:94:1b:f4:49:9e:25:7d:e2:88:62:
05:ef:36:63:7e:41:ea:3f:c9:5b:d1:cd:44:ca:59:27:6f:eb:
51:c4:bf:f2:84:71:17:b1:13:39:ae:73:fe:66:33:19:1d:11:
38:86:cd:db:eb:00:dc:dc:bf:1d:26:a8:71:65:a0:aa:76:20:
22:a0:46:db:27:d2:fa:23:11:b5:29:13:eb:58:da:54:5f:b9:
01:d9:6a:93:f9:31:d6:b1:ea:af:cb:76:5c:95:3a:0b:41:01:
c4:d1:d9:e8:a2:bf:ca:7c:80:d6:c5:9e:ce:25:75:81:45:62:
a0:e6:73:71:d8:ea:6c:6c:b8:6f:3a:1b:9c:92:76:85:8f:42:
9a:80:2d:da:4e:31:7d:8d:9b:bc:fc:14:b9:71:39:bf:e0:fd:
3c:b5:9d:5b:91:5b:a8:f5:4c:f1:a9:12:f2:d1:7e:44:fe:80:
c8:f7:e3:68:13:fa:a3:40:2a:50:93:d5:a4:15:66:06:06:a8:
a0:f0:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:18:12 2024 by rpki-client on console-fra.rpki-client.org