Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: yD2e7Q/H5pUpj7YnSwzPjSkPkiekXNvjGftRrrliY+U=
Subject key identifier: 86:B0:E0:06:76:5E:A7:43:CB:9D:A6:81:99:00:D0:16:93:F3:F7:DD
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 0194C5083CCEAC77AEC4A37FB2E8B4ECDDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 05:00:38 +0000
Manifest this update: Sun 02 Feb 2025 05:00:38 +0000
Manifest next update: Mon 03 Feb 2025 05:00:38 +0000
Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: D2104/vLsKsOI5gaHL3cg62HOMl5ZLrjE2w+l/FYlzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:3c:ce:ac:77:ae:c4:a3:7f:b2:e8:b4:ec:dd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Feb 2 05:00:38 2025 GMT
Not After : Feb 3 05:00:38 2025 GMT
Subject: CN=86b0e006765ea743cb9da6819900d01693f3f7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:3d:71:c0:56:ec:98:2d:cc:38:d8:65:7e:
c2:ce:28:19:39:56:a6:99:65:6f:b2:d5:d6:8f:06:
3f:c9:0e:4f:54:7e:a9:94:a8:5f:b8:62:8f:6a:09:
09:ff:2b:5e:ab:db:29:7b:48:66:f1:61:b3:ef:02:
ea:47:f2:3c:3d:a7:b6:06:8e:a1:9e:05:12:5a:0b:
b8:fb:99:09:d4:7e:1a:58:a1:dd:b9:b7:f4:21:cd:
39:db:14:da:74:0f:32:f3:6c:e5:48:ce:05:97:26:
a6:0b:94:da:c8:50:eb:6a:a3:0a:8b:69:4a:fd:54:
d8:ce:0a:50:01:96:98:7c:de:f3:d0:19:45:6d:7e:
3c:9e:b1:fa:b9:fb:ae:cc:10:dd:98:00:2a:77:00:
11:1e:3c:f3:4b:81:94:6b:2c:01:42:f7:bd:ba:b8:
20:e6:d8:55:91:e1:8b:5e:e7:2a:d3:cb:27:e9:30:
00:d8:56:f4:ee:22:8f:ac:e4:c5:4a:cd:57:10:81:
b7:b0:ec:04:04:4a:6c:7a:97:e0:9e:24:3c:76:37:
3b:83:0d:1a:8e:fa:d1:74:70:e5:71:21:1e:35:1d:
3b:d3:bd:82:d2:31:1a:e6:5c:ed:e7:f6:ae:fe:b6:
b2:37:3c:fe:39:27:5f:68:d6:9d:0c:95:50:bd:15:
21:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B0:E0:06:76:5E:A7:43:CB:9D:A6:81:99:00:D0:16:93:F3:F7:DD
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7a:f9:25:2a:9f:49:dd:fc:e8:8e:df:11:7c:0a:52:1b:7a:
da:63:9b:ed:20:bd:f9:07:74:99:3a:03:82:87:22:34:b0:65:
95:22:22:0c:ae:b8:dc:f7:cc:ed:31:75:66:24:7e:b9:18:33:
9c:16:53:73:6d:75:8a:3d:aa:71:69:10:33:d0:1b:b3:7c:1b:
f2:e0:4f:9c:1d:4e:43:55:b4:96:05:e1:a3:0a:8a:9e:82:07:
2d:40:11:a7:cb:f5:24:67:57:66:93:65:44:2b:c1:d2:8f:bc:
11:84:e3:b5:da:9e:01:7e:62:f7:9c:cd:3e:20:d1:d5:9c:a3:
01:41:ba:97:0b:2e:6c:a9:86:87:6e:2f:1b:a5:6c:71:05:2f:
e9:52:99:10:6d:2a:5b:52:bd:68:e4:a5:b4:56:c5:d3:96:03:
fc:e0:78:ee:01:4c:4f:e2:7d:07:be:ba:29:0b:4b:51:72:de:
41:05:1a:33:a7:b4:cc:b1:28:9b:19:d1:e9:59:c2:83:24:b7:
d2:a4:4f:b5:b9:9d:11:ca:57:93:3c:65:53:0e:db:9d:1a:a9:
ec:70:6a:dd:22:91:ca:84:a1:3f:39:de:13:3c:08:8c:cb:b4:
28:0a:b5:f2:9d:4f:ad:62:27:3e:7d:73:97:b1:a5:92:7b:eb:
69:e4:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:03 2025 by rpki-client