Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: fUUo/Hk/ECl/hAWU5D/mSBWVRUU/IHoDYY3KKz8vVoQ=
Subject key identifier: 12:53:7B:84:46:46:8E:DF:3F:F1:FE:D4:21:20:1B:4F:F0:98:EF:EC
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 01935952AC4E13D9215FD6B07056081D122C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 0B3F
Signing time: Sat 23 Nov 2024 14:00:10 +0000
Manifest this update: Sat 23 Nov 2024 14:00:10 +0000
Manifest next update: Sun 24 Nov 2024 14:00:10 +0000
Files and hashes: 1: QU21eDYv3e8gZZ00oA406e9-6Pg.roa (hash: ydqdwz17HAKaVFnJaqWbyndxytSb3SqvaFJqizhsN7A=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: MZZrBTZlvwr+BSsBrPrvmNmgbs9gcVDaL7CVw2EHrJI=)
3: iPYUG_RHipPf01NmRiGJdO1wy4Y.roa (hash: kt4N7SIF3PaCZoVeYbmINZrPhnvtuYZZ9QIoFTUoX1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:52:ac:4e:13:d9:21:5f:d6:b0:70:56:08:1d:12:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Nov 23 14:00:10 2024 GMT
Not After : Nov 24 14:00:10 2024 GMT
Subject: CN=12537b8446468edf3ff1fed421201b4ff098efec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:46:a9:95:64:42:30:23:f1:ae:53:36:08:
4c:e9:35:37:34:97:66:89:cf:49:88:33:6f:cd:09:
0c:27:ea:b0:58:ae:26:e9:42:f7:e4:07:37:c2:58:
61:4e:73:12:a5:a2:0d:ab:30:d7:ef:26:94:16:e7:
da:b1:8e:c0:44:8a:ec:c6:57:26:87:c4:2e:aa:e9:
1f:d3:6b:f5:5d:78:99:0c:df:93:a7:02:9a:83:08:
90:4d:ac:b4:ce:02:54:19:cd:94:a8:ae:e8:28:c9:
13:b6:06:ed:48:ce:34:d9:a1:bc:3f:d3:3a:7d:9a:
37:62:e3:a3:c7:90:85:88:05:39:98:c6:f9:f9:5f:
d6:09:ab:1b:0d:de:ea:17:60:86:94:36:37:c3:58:
22:52:a7:66:b9:fc:8e:09:45:78:20:30:b7:45:58:
c9:ab:cc:cb:cd:79:a2:fd:73:53:85:4b:8f:67:9d:
65:7b:73:c1:c2:8b:c2:7b:95:da:70:be:b9:6b:59:
7b:7a:4b:b5:45:b8:d0:fc:bc:f4:8f:4f:92:f4:c5:
4d:c5:78:30:7c:05:7d:e8:a3:2a:8a:ff:47:84:de:
fa:72:e4:63:38:06:35:a5:5d:03:c7:0c:d6:52:df:
79:77:7c:9f:e3:94:87:9b:5c:4b:aa:58:a7:9d:1a:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:53:7B:84:46:46:8E:DF:3F:F1:FE:D4:21:20:1B:4F:F0:98:EF:EC
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:96:67:28:54:4a:26:8d:f3:af:a7:e7:61:fc:02:25:da:1a:
32:6f:cd:4f:66:1a:76:f0:5b:d6:b7:bd:db:a6:65:12:98:6c:
ba:4b:9b:80:05:b4:f6:dd:8e:c3:0c:a6:45:76:49:70:08:fe:
40:96:3c:18:3c:b5:b9:33:3b:5c:28:1c:1b:41:df:c8:df:61:
3f:0a:e5:f6:5b:2a:fc:b3:5a:3f:44:1b:bb:92:6f:42:79:76:
af:b7:bc:09:77:36:e5:31:a9:77:b7:b3:41:bc:83:da:fc:38:
f2:85:6b:7b:e3:b4:15:86:55:a0:c7:89:fb:49:88:48:df:10:
c8:fb:52:38:ab:e3:92:a0:3b:82:15:46:2b:71:e4:94:9d:fd:
82:d0:92:fe:c8:f0:d8:12:ba:bb:d6:7d:e4:83:06:b0:4d:25:
4f:b6:7d:be:42:fc:25:d5:68:b0:9a:82:f0:b5:56:1d:d1:cd:
c5:5d:78:94:54:cd:22:39:44:d4:f8:76:13:35:0d:90:f9:5f:
92:dd:16:f7:46:d2:66:5b:f5:70:8f:93:87:f3:ad:4c:d3:4a:
67:02:59:31:83:ec:f6:d7:8b:28:d7:aa:e7:dc:fe:5a:a4:b0:
de:67:26:2a:f7:d5:fa:d8:20:07:10:5c:7b:ac:4b:7a:94:ba:
c5:f4:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:13:45 2024 by rpki-client on console-ams.rpki-client.org