Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: nn2wq1+Tus2MQI4anvqRgSWnWxgTy95YnPsQGQklVjc=
Subject key identifier: 96:4F:31:03:8E:50:CD:A2:7E:0E:D5:67:71:70:21:0F:EA:FE:EB:00
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 0193595329CC821BD5CB42345D44D4CCC366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 14:00:42 +0000
Manifest this update: Sat 23 Nov 2024 14:00:42 +0000
Manifest next update: Sun 24 Nov 2024 14:00:42 +0000
Files and hashes: 1: Wice8Ujm8CbRh-etokDSW1v-yEc.roa (hash: 0jhGh07dfDWavLuC1Y//b1V3TPZXAS78Z1beknbUEzk=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: 9ZLePasFjWeXbtBx2u12aO9maZwUoc1BwaCGD1A/6Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:29:cc:82:1b:d5:cb:42:34:5d:44:d4:cc:c3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Nov 23 14:00:42 2024 GMT
Not After : Nov 24 14:00:42 2024 GMT
Subject: CN=964f31038e50cda27e0ed5677170210feafeeb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:3a:03:23:5f:87:13:6c:81:fa:12:13:7e:
8c:be:5e:97:a9:d9:d1:35:87:fe:49:7d:f5:d7:38:
4b:c6:80:0b:a9:fe:91:2d:6c:7b:10:1e:60:3c:bb:
f2:27:aa:9b:6d:0e:b6:db:90:96:72:72:7a:08:cc:
04:a8:2c:9c:7f:5d:5e:88:e6:e3:23:51:25:39:72:
f3:69:69:18:40:24:0f:05:38:49:9b:9b:ad:1b:2a:
2d:9f:37:d6:94:91:8e:91:2f:f5:a2:4f:a4:2a:d4:
f3:9b:f8:98:3e:c8:4b:d3:d4:bb:47:9b:8d:ea:6d:
89:66:a1:80:78:68:97:cd:9a:6e:be:51:93:16:a9:
10:74:e2:47:3d:f6:f9:15:bd:50:c6:76:92:f1:6d:
93:d2:7b:e8:f5:0d:25:70:81:6e:fd:bf:8b:0e:48:
c7:6e:c0:ad:b1:ec:5e:39:09:5c:75:db:9d:45:da:
12:77:0e:18:2c:9b:9f:83:14:a0:91:54:d6:91:21:
47:14:37:13:d3:e6:54:37:8a:b7:dd:87:6d:2b:de:
80:28:bf:fb:33:d1:53:d8:3b:b1:61:8f:f5:61:09:
fb:3b:8c:9b:64:f8:51:73:70:8f:16:a0:41:31:94:
34:0e:04:9e:0b:56:8a:b4:be:d8:a7:99:d7:68:0e:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4F:31:03:8E:50:CD:A2:7E:0E:D5:67:71:70:21:0F:EA:FE:EB:00
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:89:b0:3a:bb:df:f5:48:01:76:4d:bb:22:a1:99:9e:c3:43:
69:5a:4e:c3:7b:72:33:ba:13:67:4b:0d:e8:56:1f:19:8f:66:
7b:42:dd:5f:d3:5b:29:c9:c6:c7:71:21:fa:92:c7:c9:ac:63:
fe:b0:bd:73:07:5b:4f:d2:db:0c:d1:b2:16:3d:8f:50:3b:c4:
88:af:6b:b7:1d:6d:9e:f5:81:e4:f0:1b:a8:0b:0d:c6:0f:17:
5e:28:d3:e8:8e:48:ca:46:8b:d5:4f:dd:f5:a0:a8:a3:e6:1b:
ff:e7:22:d2:4d:53:35:36:0d:f1:09:d1:d4:8a:84:c0:08:ac:
f0:2a:66:95:3b:9e:95:2d:1d:44:dd:6e:0d:c5:58:14:0d:ed:
49:4f:17:62:f4:e8:bd:1b:30:6f:56:78:e7:6b:e7:15:fb:4e:
a7:c9:60:3c:8f:04:50:b9:63:8a:3a:03:e2:33:fa:0d:f5:7e:
0b:bc:23:2b:66:5e:46:19:ff:71:bb:79:90:bb:9f:4c:b5:c6:
52:9f:7a:04:92:79:70:6b:7c:60:73:c0:1b:f4:30:f3:89:3f:
29:cd:94:11:5c:00:1a:08:d7:fe:45:ea:52:bc:d3:44:fa:27:
c5:6b:85:aa:f9:0c:87:bb:8d:28:1a:7c:70:56:8d:6d:9b:0a:
87:a8:5d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:13:10 2024 by rpki-client on console-ams.rpki-client.org