Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
File: XGpfUrAC9ihsHV6yV7tehTNCooQ.mft (raw, json)
Hash identifier: NLmIcDUFtZEg5xd1Dm7MKOKnOeEs1kLdvtGA6uLfo1Y=
Subject key identifier: 2C:C6:03:CC:4C:00:DC:16:91:38:81:FC:92:14:BA:0C:93:F2:B0:8C
Authority key identifier: 5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
Certificate issuer: /CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Certificate serial: 0193688F43619D1D7880EC972E0104632BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
Manifest number: 102D
Signing time: Tue 26 Nov 2024 13:00:39 +0000
Manifest this update: Tue 26 Nov 2024 13:00:39 +0000
Manifest next update: Wed 27 Nov 2024 13:00:39 +0000
Files and hashes: 1: LBLEzy4HcYlhO9Qg9uDoUWWAWgQ.roa (hash: 4P9kl60C0J5vn4EII5a42d+Mw21ncwktqGF7utLLSLc=)
2: XGpfUrAC9ihsHV6yV7tehTNCooQ.crl (hash: YJyE1lEGzKe0Gu5TfVUmHgDtXxOvye5nogfDsHE/oho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:8f:43:61:9d:1d:78:80:ec:97:2e:01:04:63:2b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Validity
Not Before: Nov 26 13:00:39 2024 GMT
Not After : Nov 27 13:00:39 2024 GMT
Subject: CN=2cc603cc4c00dc16913881fc9214ba0c93f2b08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:76:75:ad:be:44:f3:0f:98:07:1a:11:ea:
ef:2c:70:f6:45:3f:98:c6:f7:f4:00:72:2d:d7:63:
17:eb:30:c2:2f:7d:ee:f7:42:86:ca:a3:b8:c4:99:
6e:f5:ea:7a:2d:37:54:ec:8e:87:f5:27:00:3a:fb:
3c:99:9c:5b:58:d4:37:a1:a2:81:23:ec:a2:a0:bc:
77:b8:a8:52:88:fd:09:b7:92:06:83:76:2d:5f:3f:
20:db:79:5d:03:d1:9b:ce:22:fd:d6:4e:6e:bd:bc:
38:2e:14:62:4a:5a:63:10:be:c4:c6:f1:9b:0c:2d:
24:25:3b:d4:30:9a:70:22:8e:e7:28:c9:5b:27:d1:
1a:98:f2:d7:b8:a9:ad:b4:11:e2:5b:52:6c:3d:8f:
0a:ae:f2:00:e5:93:2f:6b:fd:0a:12:a4:41:03:2f:
8d:8f:36:66:d6:ee:99:0a:74:84:11:27:d7:84:4e:
2d:2a:fa:5e:a9:a1:a8:94:d1:ca:d2:e5:47:01:7a:
7a:d6:8a:d2:a5:91:39:a3:f6:1b:a4:8d:cf:a8:07:
b2:cb:be:6b:9f:2f:08:24:c0:56:c4:3a:f6:03:10:
a1:a3:e0:e0:40:a2:a6:dd:77:2f:47:31:89:38:92:
32:78:d0:ae:d7:af:3a:be:79:ce:c1:72:33:a1:3e:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:03:CC:4C:00:DC:16:91:38:81:FC:92:14:BA:0C:93:F2:B0:8C
X509v3 Authority Key Identifier:
keyid:5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:86:5b:e3:cc:4b:1e:72:e1:a4:75:63:0b:72:ff:4d:9c:7e:
de:ce:bc:55:dd:0f:c7:62:d4:ac:77:2c:69:ee:c2:7a:5b:f6:
38:fb:61:86:33:52:ac:f1:95:52:6b:1e:f2:7a:45:83:d9:e7:
f7:1f:73:9b:b3:bd:c1:2b:79:f8:d8:86:92:ae:a2:fe:ee:82:
aa:e2:11:af:26:af:8f:f5:a0:c6:13:f2:b6:8b:77:06:91:ad:
4d:73:1a:61:72:53:17:cf:9e:d0:31:76:83:94:96:88:61:a9:
d7:fd:c9:a5:17:f4:5f:99:3a:4b:be:b6:3e:bb:82:e0:b5:44:
1d:0f:91:2f:56:a9:06:66:e4:e3:dc:ab:79:c0:8c:f4:40:b7:
8c:75:89:2f:66:31:b5:7c:52:58:a9:14:41:2e:4f:0b:56:ef:
f9:15:0b:23:26:c7:46:f3:66:96:49:b7:4f:f1:bb:28:03:cd:
f5:ff:e4:da:b0:32:aa:2d:11:18:29:d3:46:31:d8:a5:56:4a:
0e:eb:87:c3:a6:2d:78:3f:5e:b9:d0:d0:2d:f4:17:7b:70:68:
18:62:04:48:76:2d:4c:bf:e2:ef:6e:fd:13:ef:32:87:57:e8:
f1:c8:b7:85:f4:f6:a0:a5:03:a8:3c:a9:13:55:ac:b1:26:1b:
78:81:a3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:12:41 2024 by rpki-client on console-ams.rpki-client.org