Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: sQ/mDxAcYdUTbaDUNh6IQSqgh90twszc41UsxTcchD0=
Subject key identifier: A1:BD:BE:26:67:5D:57:AD:26:E3:93:41:1F:7C:A6:DD:B7:6F:CE:91
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 0193580938A8B02BDA633FE488701A97BB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 08:00:19 +0000
Manifest this update: Sat 23 Nov 2024 08:00:19 +0000
Manifest next update: Sun 24 Nov 2024 08:00:19 +0000
Files and hashes: 1: T_pTZ8jXPQ_4cXxH6tcxJZIeeAM.roa (hash: zQU/wglo9x021WsD5q0CGQFkzQguLjEJHf1EuLVer8Q=)
2: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: CLCBUkais5/gi249sPORGXP+lzLbMr+G8pcFtAtRgFw=)
3: pn2Zi7_sUcr9YxNT3CKu6yNocf0.roa (hash: 3BLB1jcWSjB4ndWoPh9zL8xj88whhTZiF8wT6Yu+MMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:38:a8:b0:2b:da:63:3f:e4:88:70:1a:97:bb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Nov 23 08:00:19 2024 GMT
Not After : Nov 24 08:00:19 2024 GMT
Subject: CN=a1bdbe26675d57ad26e393411f7ca6ddb76fce91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:cf:91:6d:5c:01:79:e3:63:80:6d:c0:f3:
b8:10:0b:01:d5:bb:31:18:02:b5:0d:c9:4c:fd:e0:
b8:33:a4:82:a7:6e:09:c0:5e:ee:e4:fc:77:18:ab:
ad:be:23:3b:75:4e:5e:cf:4f:f6:72:4b:75:c0:85:
92:71:46:b9:e3:71:a4:cd:17:e5:59:ba:aa:1f:f8:
51:d8:13:f7:83:8d:63:94:26:be:b4:50:1b:00:89:
2b:bf:c9:05:eb:33:8b:d7:9d:c5:c7:b6:e6:c5:e7:
7f:49:64:d6:dd:47:3d:f9:61:86:dd:4c:d8:d8:cf:
4c:0d:e5:52:5a:8e:39:43:0f:08:e2:3f:e1:31:cf:
24:d4:a1:f0:74:9e:29:b9:1f:03:d2:f5:a2:26:66:
97:31:d3:ee:50:88:2c:a3:f0:96:f4:52:0d:d9:62:
89:78:94:68:d7:b0:86:3a:b6:b9:71:f8:e1:5c:b0:
88:6e:af:39:70:55:fe:08:42:5a:97:f6:c9:1c:41:
6b:be:9f:8c:57:05:88:4f:cb:3d:09:94:e6:e3:bd:
6e:60:99:69:8c:95:db:24:83:f9:44:f5:68:d7:ae:
55:55:8b:53:ef:35:c5:59:2c:25:da:a4:8f:87:64:
ec:e9:6e:06:18:2d:c5:b6:4b:31:ab:e1:96:32:68:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:BE:26:67:5D:57:AD:26:E3:93:41:1F:7C:A6:DD:B7:6F:CE:91
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:25:9c:4b:01:5e:0f:35:f7:19:14:6a:bb:11:28:d8:43:ea:
8e:7a:a1:2b:46:50:27:d9:f8:46:53:97:a7:4a:4a:df:4a:aa:
3d:66:54:c8:ef:2c:22:ce:a6:7d:dc:dd:f9:2e:57:15:e9:fc:
05:36:d3:ea:f6:7d:e8:1c:8c:1a:dc:62:4c:f3:28:ba:9c:ec:
6d:31:3e:f4:ed:d5:e8:16:82:2d:85:7c:2f:6d:78:0f:84:cf:
e1:ef:8c:28:6a:ea:ac:fd:3d:b4:9e:71:12:5d:06:54:07:0d:
31:b2:2e:3f:a6:9f:cc:bb:45:cb:58:c1:ab:06:fd:13:21:32:
26:5d:25:0e:e3:03:bf:89:32:7f:f3:8e:88:65:eb:49:e3:ba:
de:65:0e:e5:70:9f:96:91:dd:c8:c9:47:30:bf:52:d7:71:f8:
b7:31:05:5c:88:80:1d:ab:58:11:f9:9d:b1:a5:34:d1:9d:1a:
d6:8a:f3:d9:ec:4e:c9:34:a6:6e:f9:04:50:94:bf:65:77:2a:
de:3a:91:61:ad:d8:63:73:d8:4b:eb:f0:da:c6:5c:11:84:af:
66:7b:ce:21:8a:9d:7c:6a:20:c4:15:98:62:43:f1:af:14:f5:
3a:21:87:db:f0:87:1f:6c:08:5a:9c:12:89:ba:a5:d7:97:85:
59:2f:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:59 2024 by rpki-client on console-ams.rpki-client.org