Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: guyvzWwX1t3xvBidV0tFa1LuA+LcyojahF3qCqh28l4=
Subject key identifier: 90:43:24:77:0E:1A:53:5E:5E:00:2F:C6:13:BB:86:4C:B0:D3:EF:EA
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019350BE2E38C855E28238D100E272A89B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0A8C
Signing time: Thu 21 Nov 2024 22:01:01 +0000
Manifest this update: Thu 21 Nov 2024 22:01:01 +0000
Manifest next update: Fri 22 Nov 2024 22:01:01 +0000
Files and hashes: 1: 1-4jJ6wkoQI4Se9W69Bhq8NcfDJo.roa (hash: 7ySu7ep3xlGPRUd/VlIZoikCyy8RrMSNlLvo4Sx5yi4=)
2: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: 7yuxRrSpad7vJoB9yJJISZhEgTV4hRM1TIWLjqZhlZ4=)
3: me4nDAOvJGS9Qlz0OjO3K3zEmrU.roa (hash: tYVEJGut5EYuY1ModgQaLg7X4qmwmMq/WQ0U5q4HKWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:be:2e:38:c8:55:e2:82:38:d1:00:e2:72:a8:9b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Nov 21 22:01:01 2024 GMT
Not After : Nov 22 22:01:01 2024 GMT
Subject: CN=904324770e1a535e5e002fc613bb864cb0d3efea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cf:50:de:b7:e4:0c:d2:05:a8:6f:3d:48:b3:
1d:af:a4:75:b4:2e:24:92:9f:4d:36:cb:98:09:93:
aa:eb:a4:7d:c8:4c:45:1c:e5:e4:68:06:e8:b8:ba:
55:3a:94:5f:df:b9:57:fb:22:d7:c7:8c:b0:6a:a6:
8d:19:0a:f4:0b:5c:95:d5:cc:57:81:e4:bd:0b:bb:
d0:ed:ad:df:bd:51:79:52:e8:a3:46:7e:e6:42:b4:
cc:2b:49:ef:44:55:f7:a7:73:73:ab:c9:7c:76:85:
4d:76:1d:a1:fc:01:a6:dc:86:22:c6:1d:b5:04:6a:
35:fc:45:93:32:33:2c:ab:13:a4:c5:99:c8:78:c9:
7a:df:58:34:e8:87:62:47:89:13:f4:87:13:9f:cb:
de:f9:a2:da:bc:2d:57:ed:13:1d:6a:e5:d0:17:b4:
81:61:06:f3:48:b8:4e:45:37:ee:65:f9:6c:3e:15:
09:03:be:e0:6c:ba:2e:5f:72:ea:0f:3a:51:2d:f3:
a7:4e:bd:0f:19:54:0b:74:93:e0:70:e6:a4:c6:84:
2f:72:a7:00:12:9b:aa:74:66:17:09:5a:26:0d:d4:
46:78:c7:be:1f:82:11:2f:be:c3:a9:f8:89:51:b4:
ce:7e:dd:38:dc:a8:f3:33:e4:ec:7e:da:9a:ac:c2:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:43:24:77:0E:1A:53:5E:5E:00:2F:C6:13:BB:86:4C:B0:D3:EF:EA
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c8:88:b2:2a:9b:d5:31:39:56:ad:29:a6:35:de:81:ec:3b:
04:5c:71:7e:db:33:00:8e:a7:aa:f7:a7:d2:48:c4:63:ff:1f:
6b:df:d8:a7:60:49:f6:a6:0c:e3:ff:e3:d0:ee:b0:6b:f6:a5:
07:62:23:07:01:81:08:93:8d:52:ef:c9:08:57:4f:4e:19:f1:
22:a8:ce:85:45:e9:b2:b6:cf:99:19:09:3a:3f:18:c9:f4:db:
a3:ec:24:f8:c2:6b:99:bf:55:7e:b8:6c:6c:08:2f:97:2a:4d:
5f:b9:91:16:49:a8:c7:5a:86:58:d6:d3:55:72:00:ce:53:e6:
73:a2:0d:96:ed:6f:57:87:65:91:b7:29:74:28:31:12:37:43:
c2:f9:dd:16:ac:3d:77:40:18:06:78:be:91:05:f8:25:1b:1d:
f7:36:c4:9d:64:01:1a:2c:8b:a5:a7:26:ec:d0:ab:fc:e2:5c:
28:ca:89:f0:2e:44:41:06:55:72:76:e4:d6:de:a1:6e:0b:e4:
e9:f9:02:4f:ee:b5:a4:51:6d:88:88:97:f4:60:1d:48:70:1d:
4f:ad:b1:b3:7e:ba:b0:6d:30:96:42:c6:d6:11:79:89:dd:19:
d7:6f:88:fc:39:16:c0:bb:2b:f1:62:7b:32:fd:bc:03:ab:ab:
1d:89:ca:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:51:51 2024 by rpki-client on console-fra.rpki-client.org