Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
File: LtxXg3JdWVAZYqostbWQxCtX314.mft (raw, json)
Hash identifier: nywW9IYIKht3LaHHmRMrssh4YqVTNwaGdHTVKeU7ooU=
Subject key identifier: 50:EB:9B:2C:A9:81:48:15:C9:81:E1:FD:36:C4:D8:6F:FB:21:83:FA
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial: 019365FCFC2057123C8D54F4C6F9F4B682B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
Manifest number: 10C3
Signing time: Tue 26 Nov 2024 01:01:38 +0000
Manifest this update: Tue 26 Nov 2024 01:01:38 +0000
Manifest next update: Wed 27 Nov 2024 01:01:38 +0000
Files and hashes: 1: LtxXg3JdWVAZYqostbWQxCtX314.crl (hash: wMC2JSAdwiakjuS3GuUrtSdSzSDGvqaJTtADeKcZp5g=)
2: rsFjytA7yVeOS9B89BVTfFvanpQ.roa (hash: UUWWT7gNIDgvM2B2wyehpLnvStMiVnI6c9UsNM9Yfrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fc:fc:20:57:12:3c:8d:54:f4:c6:f9:f4:b6:82:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Validity
Not Before: Nov 26 01:01:38 2024 GMT
Not After : Nov 27 01:01:38 2024 GMT
Subject: CN=50eb9b2ca9814815c981e1fd36c4d86ffb2183fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:65:46:3d:87:8f:8f:c5:b1:59:14:55:e0:
ca:54:ca:ed:56:01:78:73:65:2d:9d:db:df:6e:87:
18:62:1f:03:4b:93:64:dd:d1:6d:17:97:06:d4:5d:
7f:75:15:61:f8:fd:7c:cf:76:2a:53:d0:4f:6f:fe:
5c:a1:54:d8:92:b5:2d:69:c2:ef:b7:9b:f1:97:06:
51:e3:16:61:ba:49:81:09:40:81:3d:6b:39:c8:df:
7b:64:ac:d3:6b:8e:11:85:f4:f7:66:42:a5:08:6e:
96:8f:90:85:67:2f:81:56:5a:1c:9e:3b:fa:5a:86:
a2:66:67:af:70:b0:0e:89:7a:be:c6:30:31:df:92:
24:7e:f2:f2:d9:f1:4c:11:7f:d8:74:46:ff:ce:a8:
19:eb:9c:d9:3e:2b:dd:09:fb:de:a2:85:da:24:59:
89:f4:dd:fb:a8:bc:10:73:93:8a:a5:c7:2d:d0:9c:
81:b9:b1:c2:6e:8c:f9:73:20:49:c3:f4:20:5c:f9:
0b:23:55:4a:ca:89:f3:dc:47:62:1c:28:5a:22:4d:
38:83:e5:7d:4f:98:b0:81:56:74:f8:61:c1:e5:60:
98:e1:4b:9a:ce:fb:5c:44:37:a5:18:a0:47:89:e8:
b9:38:a5:96:4f:24:a1:e2:de:68:28:61:69:95:c7:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EB:9B:2C:A9:81:48:15:C9:81:E1:FD:36:C4:D8:6F:FB:21:83:FA
X509v3 Authority Key Identifier:
keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7a:37:4c:b1:c0:73:84:7f:2c:d6:3a:93:31:1c:95:32:51:
48:72:ff:45:b0:c0:7f:e3:47:2c:74:a9:8f:a1:77:34:46:c5:
b1:6a:98:92:34:b7:7a:d1:58:65:0b:90:1e:ff:8a:06:74:0b:
54:10:81:7d:7d:ad:24:7d:6a:8d:37:ba:7e:ef:2a:9a:52:42:
e3:b8:06:59:d9:ed:71:60:51:79:14:35:b1:af:a6:51:da:c6:
49:9d:be:92:33:51:78:f1:ac:0e:1e:69:b1:7b:99:d8:a5:17:
41:36:16:40:30:a8:b3:0d:71:e7:c1:02:90:27:84:86:ca:59:
33:5f:53:87:8f:46:25:cb:ac:46:4b:01:d4:ec:17:84:1b:ca:
9e:ad:70:9b:61:11:eb:ac:3b:14:17:29:be:8b:6e:97:7c:82:
2a:ad:fe:d3:e6:c9:57:ec:e2:f2:67:46:be:12:f0:30:b9:28:
83:0c:f6:c0:5c:92:4a:cf:51:d7:ed:4e:5e:67:0a:ca:f5:91:
1c:c3:89:32:0f:1d:dd:2f:39:4f:b1:dc:b7:1b:7a:fc:e4:1b:
11:a6:fe:a1:99:9b:2d:da:29:6f:cd:77:ab:8c:36:f1:5c:c4:
08:58:af:27:2b:9b:68:39:87:3c:d7:0d:c7:81:c5:44:c6:cb:
96:57:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:06 2024 by rpki-client on console-fra.rpki-client.org