Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: xt/Rc3DE/EcIy/4d6ZDvQVPCNEUWZYjr5/ZdpaA1srg=
Subject key identifier: 40:B3:87:EA:C5:7B:6A:22:F4:83:50:06:7F:D7:FD:E1:23:20:96:6A
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 01936933DD3F649F8BB47C1D120C10753348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 126A
Signing time: Tue 26 Nov 2024 16:00:26 +0000
Manifest this update: Tue 26 Nov 2024 16:00:26 +0000
Manifest next update: Wed 27 Nov 2024 16:00:26 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: QMaaI0ixxJIEa01ChD1LQsy0MEakkTzN05iEg9jPfso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:33:dd:3f:64:9f:8b:b4:7c:1d:12:0c:10:75:33:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Nov 26 16:00:26 2024 GMT
Not After : Nov 27 16:00:26 2024 GMT
Subject: CN=40b387eac57b6a22f48350067fd7fde12320966a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:c9:d8:94:c6:4b:e6:94:89:a1:08:1e:a5:
3d:b2:98:be:23:b6:8b:61:9f:e7:7f:12:c1:79:4b:
ac:bd:f1:ef:a9:65:46:b1:ef:71:50:c3:0f:52:aa:
04:76:8d:99:8d:18:c6:b0:e2:a0:93:f5:fd:da:72:
f8:fe:7a:a5:2c:f4:fd:93:4a:97:10:82:c8:9c:a5:
7c:17:9a:5a:90:19:a5:66:39:79:d8:d0:d4:b2:eb:
8b:0a:91:f2:81:4d:94:cd:7d:81:83:c4:24:5d:ee:
54:7b:c9:b3:2a:f2:89:a6:a8:d4:45:83:84:3f:a2:
97:3a:ee:28:ad:67:3e:f7:73:b2:9d:98:40:d4:c3:
e2:9c:71:7a:9c:ec:4b:b9:a8:ec:24:b5:69:69:b2:
a6:83:b5:45:bb:14:a5:ad:b1:18:3f:90:77:4a:7b:
3c:c0:b8:8e:52:a1:e6:0e:62:7a:53:85:c8:6a:40:
eb:a8:40:0b:17:47:74:8c:22:9e:25:02:fd:b6:c2:
bd:6b:9e:7f:d8:d2:42:b1:90:b1:e7:27:61:33:ca:
25:13:5a:84:8e:d5:11:ff:f6:38:da:09:af:ba:37:
57:e3:71:00:90:7d:e3:7c:cb:93:bd:e6:f5:d4:5c:
0b:f0:67:11:b1:9a:b3:35:5f:56:f9:4b:87:3a:47:
e7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B3:87:EA:C5:7B:6A:22:F4:83:50:06:7F:D7:FD:E1:23:20:96:6A
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7d:79:0b:fb:df:a4:47:f1:01:a3:83:78:db:6a:e3:79:67:
c1:aa:e1:00:bb:d2:8d:89:50:a7:d0:5e:0e:8f:76:6e:4a:10:
dd:9d:3b:d1:a3:b3:bc:d7:87:1c:20:f4:67:b9:9c:69:4f:1b:
19:56:3c:5d:3c:be:32:38:7a:8d:9c:9b:3e:a8:65:91:df:ee:
45:d5:c1:f7:5b:81:ee:f3:a2:6c:1c:51:12:4f:61:bc:89:94:
72:ca:cb:a8:f1:7b:35:c2:11:a5:99:5c:ed:7f:1f:84:8e:59:
cb:ff:ce:ee:8a:11:6f:40:ed:c1:80:cb:b0:b5:94:09:bc:73:
e3:74:8b:35:51:99:2e:8b:8b:30:e8:34:1f:a1:54:34:d8:b1:
1c:91:ab:f6:53:37:25:ff:77:0f:5d:c6:22:90:29:7d:2a:79:
e7:85:43:3d:24:86:bb:e8:7f:1e:5a:75:ca:8d:d7:db:dc:2f:
96:49:9e:86:4e:a3:f9:a6:73:a3:9f:79:5c:95:5c:93:07:37:
83:e5:66:7f:37:b2:d5:75:77:82:28:d7:26:45:79:30:3b:87:
d8:12:c4:57:dd:ac:9b:4c:07:fa:19:d5:4b:aa:0b:b0:12:ff:
fe:63:32:60:a8:10:93:bc:3f:36:98:ba:5e:26:ac:cd:be:67:
54:f7:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:28:32 2024 by rpki-client on console-fra.rpki-client.org