Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: jIjR0tPNBO+WuR2kRXVLb5jy986bh+ARifxzMKDEmlc=
Subject key identifier: 93:A9:59:B6:47:3D:CD:4B:0A:2A:33:4D:1C:5E:3C:BB:41:33:36:1F
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 018F991805543A83A6A58E92FADC12105A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 1189
Signing time: Tue 21 May 2024 03:00:39 +0000
Manifest this update: Tue 21 May 2024 03:00:39 +0000
Manifest next update: Wed 22 May 2024 03:00:39 +0000
Files and hashes: 1: TplTMpDAC2emue4seUSdBY6SUzY.roa (hash: fZYG8cRXE6g/j0aY4zwMMm38xRWvZYXkOHRG4GEAVDM=)
2: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: Utx0C/icvxtXoy0ViazMKpXjyEQBD9NWjvXcJPCisFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 22:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:18:05:54:3a:83:a6:a5:8e:92:fa:dc:12:10:5a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: May 21 03:00:39 2024 GMT
Not After : May 22 03:00:39 2024 GMT
Subject: CN=93a959b6473dcd4b0a2a334d1c5e3cbb4133361f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:8d:00:f6:a3:4c:39:23:6f:6f:c4:d5:5a:
7a:c1:60:ce:ac:97:54:76:af:e0:8a:4e:f0:70:a0:
b7:b0:c4:a5:26:d1:30:96:76:7c:39:c8:d5:85:a0:
83:d8:19:28:7e:f9:b0:b4:58:2d:a6:f2:90:39:b0:
b7:06:db:1b:0e:7d:33:dd:6e:e7:06:2a:25:dd:64:
b2:77:2b:e1:9b:24:94:1e:5c:ce:13:4b:2f:80:39:
62:46:8e:aa:1c:9c:e5:3b:8c:44:e7:8c:f3:af:cd:
2b:97:b0:00:32:4c:93:ec:f4:c4:1d:df:82:39:57:
48:1f:d7:b5:82:94:0b:12:db:f9:7a:a9:4c:94:1f:
1b:47:9b:94:6c:9a:34:6f:77:1d:3a:b4:be:61:12:
2f:ea:4f:a3:55:34:2b:c0:8f:28:a3:68:d6:b0:c3:
bc:c0:38:1b:f8:0e:70:22:83:9a:e3:d7:06:b9:cf:
fe:bc:1a:89:67:82:7b:d7:77:c1:58:2c:d8:42:df:
f2:0a:3a:ff:e8:3d:b6:95:52:98:e3:6f:6e:1a:28:
58:98:5b:fb:6e:67:80:4b:e2:e2:da:19:e0:f1:1d:
a5:ee:bc:bd:a9:5e:00:71:92:c3:66:ec:dc:71:3e:
c7:6b:58:38:c5:7b:e2:38:2f:6c:ad:0b:87:fe:3b:
b1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A9:59:B6:47:3D:CD:4B:0A:2A:33:4D:1C:5E:3C:BB:41:33:36:1F
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6b:b0:44:70:a0:ba:e6:7b:71:b6:21:98:df:a8:fb:b1:45:
16:0a:8c:8c:51:31:3f:38:92:f5:3a:a1:cf:82:b6:dd:ce:9a:
f4:45:21:fa:52:ed:91:bd:91:42:f4:87:47:98:8e:e4:1a:09:
72:e8:34:82:d5:00:08:5b:25:e6:2f:5f:10:5b:a0:31:b8:84:
ef:e7:75:d8:f6:ec:b7:21:57:0b:2a:21:11:9f:73:4b:cc:40:
36:8b:bf:95:7f:c7:05:ce:69:d2:8d:fc:be:44:ea:6d:31:8d:
0c:90:6e:7b:cd:97:36:52:c5:93:d8:6b:91:c5:fc:1d:e4:91:
cf:d4:68:bc:d6:cf:26:cb:1c:da:e1:2a:d2:95:38:3b:c8:4a:
43:d0:f8:c6:c9:ee:51:78:3e:42:25:ac:41:7c:44:b8:fa:fb:
9f:8e:30:f5:03:6a:ec:18:59:0a:d8:d9:b6:6a:42:06:92:24:
72:88:d9:99:b7:72:5f:d4:a9:9d:da:61:41:5a:18:cc:57:05:
0a:5a:59:0d:3f:dd:ae:e1:8c:84:f4:c5:5a:32:81:bf:62:f1:
e8:29:e4:24:f7:71:96:8e:4f:01:5f:9f:ca:ab:27:eb:39:2d:
5e:60:18:8f:27:b1:13:e2:d3:4c:0d:50:70:ca:e8:e3:1a:89:
25:35:5f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:35:49 2024 by rpki-client on console-fra.rpki-client.org