Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: IOtKUlWHHL/80zZLGngBfZdVEZG3njzAZDniGgy8ZGA=
Subject key identifier: 10:26:E0:48:0A:22:5E:29:49:8B:C3:BE:4F:95:B2:99:94:D2:CA:9E
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 01935319C2BBB003EE1979956FDAB16E258B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 1088
Signing time: Fri 22 Nov 2024 09:00:17 +0000
Manifest this update: Fri 22 Nov 2024 09:00:17 +0000
Manifest next update: Sat 23 Nov 2024 09:00:17 +0000
Files and hashes: 1: ButQDztwSvwCSV6P7Nii1aMj7mk.roa (hash: nIgAGegg6xKZYcqQ3pmRwbPKElUP1DZ3fYbLe6UkB4U=)
2: cJXcuuH08yXzuqoTBJKo2P0HQms.roa (hash: Zji1pnqz46tz1W2QZ5EjctxAwNHc3tEVun9b8yK2New=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: YX1hekgpDyJeJxsMaTkp3VXnaXfUhBWtxNt9IqW+n/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:19:c2:bb:b0:03:ee:19:79:95:6f:da:b1:6e:25:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Nov 22 09:00:17 2024 GMT
Not After : Nov 23 09:00:17 2024 GMT
Subject: CN=1026e0480a225e29498bc3be4f95b29994d2ca9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:7f:b6:97:55:63:89:94:c9:32:b4:05:cf:
1a:1d:53:9e:ae:67:2f:76:c9:61:db:dc:42:6d:6c:
96:4c:c1:3d:52:84:58:9b:86:58:ca:50:53:b6:95:
b1:0d:b4:aa:84:81:af:6a:89:c1:b2:bf:7f:e4:71:
79:9f:d0:e9:64:71:ca:e4:67:0b:98:25:65:47:4c:
cb:8f:34:0d:0d:dc:47:a4:83:c2:1f:89:9a:2e:6b:
f0:ab:80:af:85:5b:d0:72:66:86:8b:87:9a:3a:f7:
18:04:b0:00:10:73:fe:8d:c3:04:0f:48:83:0d:6f:
e6:43:97:3c:75:09:27:c2:3a:b8:a6:9f:9a:e0:b9:
06:df:0d:08:87:21:ec:4a:23:8d:e9:06:f8:25:ea:
16:ea:62:6b:b8:c6:dd:72:25:e6:b9:53:87:cf:40:
bc:32:6b:b2:61:a9:c8:03:ff:c2:3a:0c:8d:c7:f9:
1c:0a:a1:e7:34:d8:bc:ab:c9:46:62:83:60:cf:50:
a8:64:e3:21:e4:bd:36:f3:d3:bf:52:2d:c0:66:c8:
a0:72:c2:a5:17:29:e0:a5:31:be:cf:dd:69:34:11:
47:68:0d:3c:3c:24:ab:4d:61:1c:e7:c4:1d:0f:1f:
8c:87:a3:d6:d6:a6:98:f9:90:cf:12:8b:51:5b:c9:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:26:E0:48:0A:22:5E:29:49:8B:C3:BE:4F:95:B2:99:94:D2:CA:9E
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:14:84:31:f2:89:0c:83:67:5e:e8:8e:7a:91:d7:1d:9a:40:
0a:2b:47:67:f8:ea:9b:46:0d:09:f8:85:1f:77:5b:73:83:40:
eb:1b:2e:e7:aa:1b:6d:08:05:86:a5:2d:22:be:db:e3:d7:a5:
5a:40:9b:d3:5e:c0:8c:77:a9:c8:ba:8e:db:49:62:08:48:36:
7d:96:a7:e3:d2:a2:76:03:77:46:eb:95:2f:30:6a:06:57:67:
b0:6d:2f:94:f6:0c:b0:a7:e4:2a:bf:06:8f:77:96:93:87:6a:
19:bb:67:4b:dd:55:37:22:59:6e:6c:34:c4:eb:9d:f7:5f:3b:
78:37:50:0a:41:5c:f4:ef:1d:4e:b2:24:4a:65:f9:47:85:9e:
2d:af:13:33:ed:32:76:8b:39:f3:b0:d9:27:8c:48:27:8d:a6:
84:80:07:a7:d2:13:bd:37:0a:a2:03:61:88:1f:07:4b:6a:66:
a1:39:9d:67:a4:02:d8:0b:9a:7f:d5:ce:89:63:35:d6:72:a9:
f2:27:cc:65:8c:f2:0a:32:58:f4:49:52:b1:ee:78:66:f0:d4:
1f:e5:9a:c8:a1:93:9b:d6:8f:b4:7a:80:99:3a:be:c2:dd:e1:
e4:f8:2a:86:40:e8:33:9c:bf:e9:14:9a:ca:77:59:85:cf:f8:
7f:8c:7f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:01:30 2024 by rpki-client on console-ams.rpki-client.org