Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.mft
File: XTAFa8TiA5Om_r9ldrORLH6laaY.mft (raw, json)
Hash identifier: A19NCMr6SY4WobKHQpozsdWCTFhXb6LI6h0MyPCeFbA=
Subject key identifier: 5F:26:65:3D:52:86:94:04:C3:16:88:E9:EA:0A:70:CF:22:39:4B:2A
Authority key identifier: 5D:30:05:6B:C4:E2:03:93:A6:FE:BF:65:76:B3:91:2C:7E:A5:69:A6
Certificate issuer: /CN=5d30056bc4e20393a6febf6576b3912c7ea569a6
Certificate serial: 0193549B0046617E642628CA5E2AD97B4231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTAFa8TiA5Om_r9ldrORLH6laaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.mft
Manifest number: 01DC
Signing time: Fri 22 Nov 2024 16:01:04 +0000
Manifest this update: Fri 22 Nov 2024 16:01:04 +0000
Manifest next update: Sat 23 Nov 2024 16:01:04 +0000
Files and hashes: 1: 70guu4N61aRlqdO-JImj-xi1jQU.roa (hash: Mxf967umtTHRpmsgyY3qJn5pkt5ABPLMoxXO9njLAUc=)
2: EMJN6l5pZWfBKSGk0qFv69ByNyw.roa (hash: yL23YyY4sQs5HOofsUJRfWghmXDD5Z2OmvAuR/tjZbs=)
3: XTAFa8TiA5Om_r9ldrORLH6laaY.crl (hash: h2VkbCfTxUjsFanHP9yTmEvCL9SyDARIH8CB3Gsrl6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTAFa8TiA5Om_r9ldrORLH6laaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:00:46:61:7e:64:26:28:ca:5e:2a:d9:7b:42:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d30056bc4e20393a6febf6576b3912c7ea569a6
Validity
Not Before: Nov 22 16:01:04 2024 GMT
Not After : Nov 23 16:01:04 2024 GMT
Subject: CN=5f26653d52869404c31688e9ea0a70cf22394b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:f1:e8:67:03:a8:45:2f:6f:1f:7e:e0:8e:
f4:4c:23:13:e1:e9:9b:6f:51:f4:02:9d:39:49:ca:
a7:f7:ff:a8:6e:91:1c:2f:5c:b8:41:70:87:39:75:
0b:b4:5f:c9:cd:f6:8a:09:c2:8b:ec:6a:9c:77:d2:
91:5d:41:a9:06:27:e2:f7:10:07:02:b2:33:13:95:
23:06:2d:ca:80:61:cc:f8:fe:8e:46:20:ed:d8:f6:
d8:df:17:ef:34:2f:88:16:a3:bd:d8:0b:8c:07:f0:
73:10:ed:3a:43:28:1f:dc:83:bb:92:7b:f2:66:b2:
d8:1c:bc:45:84:ee:00:c1:54:d0:1b:a7:85:18:50:
e6:5d:e3:2c:00:9d:59:a9:f5:a2:c2:22:d9:2f:73:
ff:49:96:1f:a3:8a:29:d5:32:8e:e1:6b:b4:11:06:
09:f1:e9:5d:88:b3:dd:ff:a4:5d:f3:f6:92:fe:41:
17:69:73:51:a9:84:c7:0e:21:e2:c2:2e:b0:a6:c4:
5f:82:e3:6f:82:07:d1:44:82:d0:80:a7:85:c3:f4:
a8:7a:7e:6f:1d:6c:ae:3d:61:b1:c8:d2:27:97:48:
01:1a:a9:fc:1f:44:75:55:3a:57:7d:23:24:87:a1:
d4:56:a2:16:73:17:64:a2:e3:09:c6:f8:e0:49:3d:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:26:65:3D:52:86:94:04:C3:16:88:E9:EA:0A:70:CF:22:39:4B:2A
X509v3 Authority Key Identifier:
keyid:5D:30:05:6B:C4:E2:03:93:A6:FE:BF:65:76:B3:91:2C:7E:A5:69:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTAFa8TiA5Om_r9ldrORLH6laaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c3c5b7-fe57-474c-8ae3-de18510ea50a/1/XTAFa8TiA5Om_r9ldrORLH6laaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ef:df:e5:ac:5a:ed:35:c1:56:c4:58:bf:c1:4b:44:da:20:
1b:c8:fd:71:e8:d5:b5:9d:35:5d:36:26:1a:02:b2:d1:df:92:
f1:f6:b7:67:51:5e:5b:38:9b:84:e7:90:be:36:dd:aa:ba:aa:
36:51:8a:75:ac:63:52:44:af:5e:6e:41:c0:96:75:48:65:be:
eb:06:32:89:52:ea:ea:fb:d3:b9:ea:ac:e6:85:19:65:db:4a:
d7:2e:8d:ef:97:71:77:0d:0c:4a:97:02:63:3e:bc:50:79:d4:
73:71:ab:f7:b8:73:76:65:13:d4:23:95:ff:5b:0f:90:42:2e:
80:2b:96:d3:bc:b5:58:2a:ab:3f:a2:d7:6b:08:57:4c:57:a1:
d5:40:c0:12:4c:56:2a:81:7a:1d:69:d3:67:45:16:ae:59:27:
d4:e4:bf:45:73:c4:bf:90:0e:f8:87:23:ff:72:23:7a:ff:38:
ce:58:88:de:e7:74:d0:19:c3:b3:3c:48:fd:af:ce:ef:f1:38:
83:c5:88:34:c1:56:18:94:f7:46:09:da:b1:96:46:ee:41:92:
be:ad:ba:99:c2:4c:a9:e2:bb:9d:c3:74:ee:05:25:c3:5f:8e:
f9:77:38:78:d9:25:83:70:eb:81:14:8d:bc:a7:d5:9c:79:cc:
cf:54:90:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:24:51 2024 by rpki-client on console-fra.rpki-client.org