Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: YhaAntX999qaRJiBvpBqqnLcb2Rm1b377GeOR2bPR3I=
Subject key identifier: C0:19:7D:FA:0E:19:38:90:23:3D:22:8C:79:86:AE:C1:F3:4E:2C:58
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 0194BABB3AE045001825ED1F7F4640915830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 05:00:19 +0000
Manifest this update: Fri 31 Jan 2025 05:00:19 +0000
Manifest next update: Sat 01 Feb 2025 05:00:19 +0000
Files and hashes: 1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=)
2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: cZc9ph6Zkj+ZhkWLWm8a+C4megJmgDlgaYEXz7rAYko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:3a:e0:45:00:18:25:ed:1f:7f:46:40:91:58:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Jan 31 05:00:19 2025 GMT
Not After : Feb 1 05:00:19 2025 GMT
Subject: CN=c0197dfa0e193890233d228c7986aec1f34e2c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ef:01:cb:07:a5:e1:98:2c:cf:2f:7a:5a:d8:
53:a8:fb:d5:1c:77:3f:43:2f:da:6a:0f:b6:66:b2:
43:37:75:ec:be:74:36:d2:cd:84:8b:f9:47:77:b9:
e0:e2:26:84:3c:f7:2a:0e:e2:5c:e5:c4:9e:6f:68:
db:89:ee:aa:a9:4e:9e:30:54:da:01:3c:62:8c:49:
6f:d9:bc:41:96:fa:5e:29:fb:9e:f2:80:d3:d7:8f:
f1:80:e6:d5:9d:2c:d1:9b:d1:c5:35:d4:f3:bf:a3:
ce:0e:b2:33:f2:75:af:ad:c4:48:45:9a:a0:55:b9:
3c:37:8b:65:20:96:d4:e4:d7:25:d5:53:d1:43:72:
3d:f2:cb:34:b7:32:47:c2:53:2c:9c:ad:41:9a:9e:
f1:60:51:ea:eb:60:79:6d:44:8b:82:5e:e9:41:f4:
10:6b:f6:fa:c6:5c:1d:f2:a0:60:61:42:9a:15:45:
d3:00:dd:f0:d3:76:c9:8b:0a:e9:a5:8c:67:8d:2d:
f6:f3:ce:b2:03:b0:d1:d7:65:ba:ef:ab:5f:cc:25:
75:a3:08:45:c5:50:a3:a5:ed:f6:86:51:81:dd:4f:
56:aa:6d:08:3b:7c:aa:61:45:d4:f3:2b:91:73:f9:
75:e9:0e:a6:9e:c1:2a:a9:03:64:53:04:aa:48:a5:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:19:7D:FA:0E:19:38:90:23:3D:22:8C:79:86:AE:C1:F3:4E:2C:58
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:78:c9:b3:59:c0:a0:02:ba:de:55:69:3f:60:0a:c9:3d:f0:
ea:00:5d:86:67:10:03:a0:86:52:5c:e1:7a:0f:66:08:6f:41:
7d:6b:16:24:18:bc:2a:74:fd:3f:2e:a8:a8:87:e1:1e:d9:b3:
b7:cc:a5:3e:d5:c0:ae:d8:b2:e6:04:ae:bc:4f:bd:0e:65:67:
9f:7b:bc:1e:99:8e:b1:3f:4b:0c:09:d0:33:00:95:04:a0:7d:
68:43:bc:b8:90:28:ab:14:39:fb:3d:5c:a0:60:86:f7:ac:1c:
8d:50:f2:e0:7f:6e:7e:7b:d7:d8:0f:c7:af:58:45:f4:98:5d:
81:e0:1a:d7:03:cd:0a:32:e5:04:f8:69:cf:9c:75:02:0a:7d:
67:15:84:81:c7:90:75:f5:27:2d:c6:39:69:94:9b:8b:d8:6d:
1b:7a:74:b3:a2:19:ce:c1:66:74:1d:d7:ca:e3:db:66:a0:a1:
41:39:12:65:01:bd:40:69:5f:28:bd:e9:d4:f7:3b:34:b6:79:
8b:f0:24:9c:ee:9e:d3:cf:e4:c5:84:9b:ac:5b:56:1e:2e:32:
b9:3b:55:34:f0:b2:b4:3d:cd:37:04:bc:94:ea:18:38:a1:79:
c5:db:3d:6a:f4:52:3b:1a:9f:46:98:79:45:5d:e6:91:d2:aa:
37:03:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:17 2025 by rpki-client on console-fra.rpki-client.org