Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: tKbOOtrPL3RZMR5+fLagqkV1NC5Rt16kQI2nv9hjVpY=
Subject key identifier: 2B:A6:FA:37:9D:3B:8F:BB:A1:BA:45:00:31:67:2C:2D:2F:D8:38:8A
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 018F874AA5F13A781DBB7E81F33238947980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 0E80
Signing time: Fri 17 May 2024 16:02:47 +0000
Manifest this update: Fri 17 May 2024 16:02:47 +0000
Manifest next update: Sat 18 May 2024 16:02:47 +0000
Files and hashes: 1: LpKCzSUTISdjMEMcN_78uSHLNYA.roa (hash: rCz3kNaw5t8EdsRPD+lOpqx/ZQ3IkXfBPJxgUSPmsnM=)
2: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: 3bCfqU/2o6r9oKcPZLLJ6qB3EyNTpNzjlRSpJA7O0BE=)
3: wGFkrHDcrAGgGYj_3_M1rspDbEk.roa (hash: hVn7CQxG3WI0sTMTo9g6HAzbB/pBLkCtH6MUYxgzy+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:a5:f1:3a:78:1d:bb:7e:81:f3:32:38:94:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: May 17 16:02:47 2024 GMT
Not After : May 18 16:02:47 2024 GMT
Subject: CN=2ba6fa379d3b8fbba1ba450031672c2d2fd8388a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:bd:1a:ac:c5:c3:82:e2:9f:13:3e:fe:2e:
68:2c:37:9a:88:44:09:89:a0:b0:20:98:21:3d:f6:
9f:ae:52:20:28:9e:3c:97:0b:da:c8:d8:b3:6e:50:
fb:e7:bb:3f:2a:33:e2:6a:20:16:ba:f6:57:53:cd:
1a:a7:20:3d:9d:16:53:82:d5:1b:21:fb:56:a0:e5:
5a:7e:41:e0:6a:b7:90:41:24:5a:12:51:71:c7:fb:
8f:b5:53:e8:91:c0:62:88:bd:2e:25:5d:db:63:e4:
98:15:25:2f:18:fd:0e:b9:72:cc:23:58:b1:8e:94:
63:ba:41:6f:07:0b:2d:a2:c1:eb:ce:ae:10:35:73:
ab:2f:07:53:88:af:52:eb:e8:19:1c:b3:76:3c:38:
76:bf:88:4f:3c:d2:a9:85:00:16:ff:c9:e6:82:9c:
99:24:aa:72:ec:11:53:ea:d4:68:15:a1:8c:c4:33:
ec:43:ae:19:48:b9:f4:8b:ff:03:7e:18:74:6a:45:
28:ae:6e:fc:96:04:fd:be:3a:66:32:1b:d5:f9:55:
63:3b:19:06:03:7b:cf:7a:a9:a3:4c:71:5b:a9:92:
70:43:5f:a3:9a:5a:c5:bd:e5:01:e4:c6:1f:15:69:
21:c4:b0:53:bd:cb:50:3f:a9:65:e3:1a:67:f6:a6:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:FA:37:9D:3B:8F:BB:A1:BA:45:00:31:67:2C:2D:2F:D8:38:8A
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:01:43:fe:bc:86:c8:4b:fe:9b:c0:27:91:64:2b:f0:c2:e0:
ee:77:ce:cd:e7:2c:b7:a3:ca:e0:0d:f1:07:f8:49:36:51:97:
7d:f2:38:31:30:02:1d:70:b8:5e:65:66:4d:da:05:9a:fa:13:
b9:c3:3b:29:d1:6c:98:d1:ed:f1:db:a1:86:c5:f5:13:f0:4e:
05:b6:9d:54:88:8f:f9:9d:f7:1f:51:b5:39:cd:52:d8:2c:b8:
d9:00:4d:23:b3:c5:90:fe:20:f2:de:34:31:52:81:41:ad:cd:
fd:cd:c3:17:0a:1f:e5:d1:8b:a3:5a:5e:53:6b:33:6f:9b:66:
e9:c1:50:29:ff:2a:1d:0f:3c:8c:33:73:df:20:cb:bd:50:35:
d7:4c:e1:17:ac:c5:f1:b4:a4:25:dd:9b:ba:d8:af:b8:47:57:
51:4f:20:6b:2d:28:83:19:49:00:d2:67:d0:62:00:6b:51:a5:
ff:80:92:1b:ef:b4:a1:6a:61:56:ac:48:90:36:56:1e:19:45:
44:0c:26:80:13:90:27:98:76:15:16:e5:78:a0:46:50:a8:97:
cc:ab:88:71:d2:4a:b2:cc:4f:5b:19:c8:58:0b:97:40:35:5f:
8c:26:24:24:e9:aa:93:bf:35:1d:a0:24:0d:59:1c:9b:1b:bc:
8d:92:28:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:13:09 2024 by rpki-client on console-fra.rpki-client.org