Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
File: XpNr6hsMOiCKuifYsQsnXkdN3iw.mft (raw, json)
Hash identifier: oX5EZMGGmHQ7xtdCaD2ZbizIp8hRs1KSe1Fbfq9xdaA=
Subject key identifier: AB:AC:F2:14:6C:91:95:16:B1:AA:AB:48:7A:36:30:FE:A7:AD:CB:85
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial: 01936A7DAE1F0D55BE2D23BAF7D5DE5C82FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 22:00:41 +0000
Manifest this update: Tue 26 Nov 2024 22:00:41 +0000
Manifest next update: Wed 27 Nov 2024 22:00:41 +0000
Files and hashes: 1: XpNr6hsMOiCKuifYsQsnXkdN3iw.crl (hash: G3qsmN3PEvo/+/RQG22UDLvgeW0xKFJ+0QXpWJFbtyI=)
2: yWNpS7yGLMVwqxfBZQ01X2D8B-w.roa (hash: bPXomo9ZO8moEYD+b/zWWM8ZNqL2uP1auBivBckw0HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:ae:1f:0d:55:be:2d:23:ba:f7:d5:de:5c:82:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Validity
Not Before: Nov 26 22:00:41 2024 GMT
Not After : Nov 27 22:00:41 2024 GMT
Subject: CN=abacf2146c919516b1aaab487a3630fea7adcb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:ba:c4:e2:54:97:81:06:96:f4:16:56:da:
d7:6b:1f:56:a4:b5:ae:50:0a:02:2c:f2:d1:22:9c:
02:f2:6a:35:84:76:f0:ca:8a:30:69:8f:42:64:b4:
28:82:40:e0:a6:6e:61:db:c8:69:5f:1a:55:5a:ce:
fd:5a:4a:40:3e:96:af:f5:f0:cc:f4:ce:b6:a0:c4:
b8:95:ed:f5:2f:ec:1a:47:b0:30:66:6b:04:0f:e6:
22:8b:bf:26:d4:67:3d:75:be:5e:a4:86:ad:15:10:
34:19:77:f5:5e:ae:e1:68:5d:a7:7b:70:3b:6b:51:
2a:77:6a:6e:98:b6:2a:64:2c:c5:3f:f5:f3:c7:8c:
40:76:92:c4:90:24:dd:1c:cf:8b:59:39:d6:ff:2c:
bb:e6:9a:7a:38:46:74:d1:86:fd:53:49:39:b5:cd:
8c:90:a2:a5:eb:32:07:b7:f8:40:cb:9f:db:a7:45:
fd:7c:40:05:8b:e5:00:2b:89:d2:6b:60:2e:3b:0e:
6f:49:50:0c:80:7b:cf:6b:4c:6a:76:b8:24:56:d1:
30:7f:1c:4f:07:6a:ba:6d:4c:a3:67:dc:5b:d3:c6:
82:21:3e:42:68:93:a8:65:2f:cb:dc:0f:f6:9a:26:
ad:81:54:f6:bf:af:13:e3:2e:2b:61:2c:16:aa:33:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AC:F2:14:6C:91:95:16:B1:AA:AB:48:7A:36:30:FE:A7:AD:CB:85
X509v3 Authority Key Identifier:
keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dd:be:11:8c:41:d0:15:9a:dd:45:b2:18:5f:8a:b0:d3:72:
7e:13:d0:54:7b:7a:c7:94:f1:e8:2f:44:51:63:19:02:db:3c:
fb:d9:cd:6d:80:04:25:17:b2:a7:c3:65:8e:c8:9f:fe:8c:6f:
83:f5:e1:1e:1b:84:f3:62:fe:6e:e9:bf:aa:3f:0b:f5:f1:2d:
71:93:1a:08:79:e3:77:3f:82:35:95:20:84:fc:95:9a:5a:ae:
dc:19:39:15:fd:04:5b:38:8b:2f:ab:41:cb:76:51:0e:2a:d6:
68:67:5b:45:f4:c3:97:e7:b6:a8:6e:68:72:a9:b9:f5:84:c5:
c3:8d:00:75:36:d9:df:d8:7a:d1:ce:f8:ec:8e:f0:6d:e6:63:
fd:1f:8e:d2:ac:c5:35:99:7a:87:b6:b5:6f:8f:00:c2:e6:31:
48:4b:c7:25:82:ef:d6:93:66:7c:28:63:de:b2:cd:6e:7f:8d:
3f:b8:fa:83:e9:49:fe:23:dd:e7:ff:1c:34:19:df:97:18:a3:
22:7c:cd:c3:bd:f1:3e:35:54:ef:a9:a8:2c:83:cb:7b:42:a0:
d1:9d:86:a2:4f:f0:69:0e:de:2f:de:f6:b7:1f:4d:0f:de:66:
51:c2:65:bf:84:a1:8d:d8:fc:ff:4b:85:93:4b:aa:5f:d5:23:
a1:e1:23:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:03 2024 by rpki-client on console-ams.rpki-client.org