Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: bWn/SW8N1TYcENil64lIEwYZaqOXIpZUAp6aOXDuii0=
Subject key identifier: 04:C2:5E:16:E3:07:2D:82:A0:9D:73:F9:5D:BC:9F:7F:E6:B5:1A:42
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 019356F6B73584B582DCDBE444E39B984574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0952
Signing time: Sat 23 Nov 2024 03:00:29 +0000
Manifest this update: Sat 23 Nov 2024 03:00:29 +0000
Manifest next update: Sun 24 Nov 2024 03:00:29 +0000
Files and hashes: 1: 5eI67oyoj0ore7vh84P0lHQVAIg.roa (hash: hZVweQfpwbRBDdanYCsPPEDKA26U6V3SWhapuQs4Hsw=)
2: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: 4S8F/SSnhvGh3NC1L3EDCXeXFJqFkoXfg7gO/ZXnFa8=)
3: ntL3jKvnMHOKBGXB6ZbO79SOY64.roa (hash: 1Px2UKsk3UykVJ1UEj3yWVBSukrYlTEoBVyRIIZ3Djk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:b7:35:84:b5:82:dc:db:e4:44:e3:9b:98:45:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Nov 23 03:00:29 2024 GMT
Not After : Nov 24 03:00:29 2024 GMT
Subject: CN=04c25e16e3072d82a09d73f95dbc9f7fe6b51a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:b8:e2:04:b9:e5:ad:9d:2a:59:05:56:1e:
56:f7:52:cb:17:f8:19:fe:0f:e6:ed:f3:5c:75:ea:
2d:b5:19:fa:a6:24:2d:8f:11:36:04:7c:77:4f:e1:
8f:9c:ca:4d:72:db:7b:7c:56:89:6e:ab:77:06:23:
6f:fe:ea:85:b7:07:96:df:06:32:c6:b2:97:4c:df:
1b:b3:12:74:03:5e:2b:6c:61:d4:22:f4:9f:c2:f0:
d7:59:f4:f5:51:38:53:f8:20:6d:6a:8b:80:85:bf:
71:4e:39:a9:ce:03:6a:8b:65:c3:7b:55:c3:ee:25:
0a:8e:26:2b:2d:c1:25:8a:cb:09:53:bd:52:c3:58:
2e:44:c5:7a:bc:9f:a8:04:22:23:f3:5d:b7:c3:e6:
2e:08:ff:7b:60:19:8d:6b:c7:92:21:f1:20:9b:24:
9a:c3:43:99:8e:bb:ff:2f:68:bd:c1:e1:11:11:41:
6d:a7:ae:ef:4d:e1:db:1e:e1:d7:e2:e5:d8:99:1d:
a3:3f:ae:45:f0:35:19:06:35:bd:cf:e0:9f:9e:9e:
45:4c:d0:a5:3c:4e:33:be:8e:ec:f7:25:c9:47:13:
9a:b0:aa:53:b3:d0:c3:f5:c0:5d:7e:4f:4e:6b:72:
5f:ea:d1:d5:80:88:a4:d0:77:a2:f2:61:86:27:13:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C2:5E:16:E3:07:2D:82:A0:9D:73:F9:5D:BC:9F:7F:E6:B5:1A:42
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d4:cb:41:95:8f:ca:33:d3:3e:82:38:7c:fe:3b:d1:55:71:
5d:25:21:b4:82:d7:b4:66:bd:07:6b:ca:43:e4:9f:5f:b6:47:
cf:46:02:44:20:3c:94:9b:4d:20:06:a0:36:1a:78:2e:d0:31:
6e:2a:af:80:63:4b:9c:36:bc:f7:cd:92:d6:f3:e8:5b:f4:a0:
85:d8:57:ee:7e:02:fe:a3:ae:b8:4c:b8:88:ca:fc:7b:7a:ab:
ee:6a:46:ee:f5:64:73:53:3a:30:37:83:5f:de:0b:27:01:5c:
69:3c:39:42:0e:5c:f2:20:16:8c:fe:1f:8b:93:b9:10:93:a0:
34:58:8b:15:e7:58:4e:d3:d4:ea:d8:ea:32:8d:b3:db:88:5f:
9f:32:a8:d4:77:30:a0:82:96:89:c2:c1:67:14:73:be:66:01:
bf:41:eb:f9:cf:fb:94:fd:6c:f3:0d:65:96:70:21:f9:c6:55:
c2:28:3c:9d:e5:a3:98:09:ae:3b:24:69:ea:ec:8c:26:bb:a3:
56:e1:3d:5a:f4:ea:7e:ba:7d:d4:ce:05:a2:91:dd:6d:9a:45:
02:53:b9:a5:fb:b8:bf:58:1a:9a:15:c9:0c:0d:41:7b:73:76:
e7:8d:68:67:82:ff:a9:b0:b6:c2:ae:ed:db:7b:1b:21:dd:c9:
1f:ee:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:24 2024 by rpki-client on console-fra.rpki-client.org