Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier: 1Cyu09f7/1t6UdaNsicVZT9X9jk672OAuScs0O56jao=
Subject key identifier: DE:4C:60:0D:60:87:8B:CC:DB:13:18:A8:01:3F:19:8F:F4:F9:94:BC
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial: 018F85FF5D5C1B9EAF5E9815A8951DE111CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number: 05E1
Signing time: Fri 17 May 2024 10:00:56 +0000
Manifest this update: Fri 17 May 2024 10:00:56 +0000
Manifest next update: Sat 18 May 2024 10:00:56 +0000
Files and hashes: 1: fCM3wMDxsW8BPtarf2dCGZMEAH4.roa (hash: aPTwwvKa54f0p2Jt0Z3hDCSzrFkctsTnfds2IpESS/Y=)
2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: OS6svl3+CgoXbGzOKwdGJuO5vHjhSzdDfWZ87tqO1EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:ff:5d:5c:1b:9e:af:5e:98:15:a8:95:1d:e1:11:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
Validity
Not Before: May 17 10:00:56 2024 GMT
Not After : May 18 10:00:56 2024 GMT
Subject: CN=de4c600d60878bccdb1318a8013f198ff4f994bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ef:09:17:58:eb:ef:01:53:c8:75:ed:19:b3:
9d:88:fe:3a:12:51:92:34:4a:b7:a7:72:47:da:c7:
ff:d2:6c:72:46:70:7e:91:15:86:b5:c7:bd:a9:95:
99:50:7d:2a:e8:d0:02:59:d8:24:2b:ef:9b:af:16:
5a:8c:03:9e:d2:d3:45:36:32:e8:dd:eb:10:34:ae:
4b:93:45:e5:d0:58:6e:2f:41:1c:70:06:6c:18:b5:
83:17:fb:f9:fc:c1:0d:8f:56:60:ad:b5:ce:ab:ab:
00:c4:b3:5c:70:39:34:f1:f7:9a:f2:b0:a9:9e:92:
49:d7:61:fe:04:e1:43:f9:7a:e3:21:d1:db:7b:85:
c5:f1:2a:a1:ba:f7:d1:4a:8d:df:10:56:83:1b:95:
68:3b:3f:76:cc:9f:d5:96:0b:0d:1c:25:c2:e6:31:
8e:7e:7a:5c:e4:f6:b3:c2:e3:dd:b6:59:4c:0f:df:
ad:c0:94:7c:46:6b:42:89:0b:cc:8d:c4:69:f9:85:
85:1d:c7:e2:ab:0f:3e:01:f2:51:a0:25:db:97:2d:
f5:9a:e5:7e:42:bf:36:f6:d2:d3:3a:c2:2c:67:93:
a3:bc:60:4a:a6:41:27:72:48:79:63:ca:6c:94:cf:
3a:5d:90:7f:cf:ac:8c:f8:40:5e:80:ca:22:79:c8:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4C:60:0D:60:87:8B:CC:DB:13:18:A8:01:3F:19:8F:F4:F9:94:BC
X509v3 Authority Key Identifier:
keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9f:3b:6f:45:1d:42:3f:e4:71:06:79:06:f6:49:d1:39:08:
3b:4e:2a:bf:2b:75:d8:a2:5d:d0:f8:da:07:79:23:bc:4f:03:
96:a4:a0:07:7e:59:a4:1a:db:24:be:70:69:ce:9d:63:b9:83:
f7:05:21:9d:fc:c2:5a:fb:ad:f8:e3:c8:a8:d8:9f:b6:85:74:
e6:e1:08:83:5a:5d:02:3e:c2:8f:24:2a:11:b9:a5:5c:ef:11:
e8:2c:9d:d2:5f:9b:1a:43:c1:ff:c3:9e:f4:7e:73:10:0d:08:
fb:80:7d:42:58:1e:a6:32:65:2a:a5:39:f4:27:e5:9a:f1:1c:
1a:ee:8d:38:86:ce:19:f2:c4:27:13:87:44:62:41:31:1f:94:
3a:10:ae:f3:99:6a:2f:0c:38:58:f3:1b:50:43:a9:eb:c0:f3:
e2:8e:da:7e:96:59:a3:33:b5:de:83:26:e3:d9:e8:da:78:58:
bf:4f:8d:99:4b:a8:b7:9f:33:35:79:21:2d:8f:a0:a9:dd:e2:
3b:8f:f7:6b:21:c5:47:b2:34:e5:4e:b0:8c:8e:da:d9:4a:b2:
6f:bf:24:b6:25:18:5c:b1:42:5a:70:5e:ca:4c:4a:ee:d4:c6:
d7:d8:93:cb:bd:03:94:de:7b:0b:cd:ae:2f:bd:09:67:88:cc:
5b:39:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:51:17 2024 by rpki-client on console-ams.rpki-client.org