Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: 7u2RJEiWHgVXopBbRxfBdP9g/RsfsbfhYehdiFvBvCY=
Subject key identifier: 67:5A:8E:E9:5B:FD:08:52:DC:BE:A3:EA:8E:CF:C0:6E:15:73:84:39
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 0194C3F5C83F4F6EC5B58E540525143A22B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 133A
Signing time: Sun 02 Feb 2025 00:00:52 +0000
Manifest this update: Sun 02 Feb 2025 00:00:52 +0000
Manifest next update: Mon 03 Feb 2025 00:00:52 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: xaZETvFxG+jldV+/XObKjbENWBcHyzc+sxXOoCRe/cw=)
2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:c8:3f:4f:6e:c5:b5:8e:54:05:25:14:3a:22:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Feb 2 00:00:52 2025 GMT
Not After : Feb 3 00:00:52 2025 GMT
Subject: CN=675a8ee95bfd0852dcbea3ea8ecfc06e15738439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:3b:c6:2f:95:7f:22:7b:ef:5f:59:05:94:
ae:77:2f:1b:33:50:eb:57:7f:55:37:69:70:bb:5f:
ac:04:74:76:ec:b3:a7:49:75:b8:bc:ca:5d:41:0d:
9d:2a:c1:e7:49:da:88:1f:25:20:07:9e:d8:67:5a:
95:21:58:d7:42:db:d1:0c:69:bf:43:c1:ba:1e:15:
7e:18:5e:8d:55:24:d7:3f:f7:4c:62:f0:47:f0:76:
22:80:71:18:f8:83:48:bc:00:ca:cd:6c:3d:b4:e9:
11:1b:50:b3:30:e5:a4:4d:5b:db:7a:f9:42:06:8b:
7e:26:58:58:57:bf:a3:90:b7:24:20:56:bd:9f:10:
26:38:42:d4:39:3f:7a:e7:71:a8:d9:4e:51:8f:00:
06:2b:c6:f0:91:aa:01:05:03:ae:df:5d:4b:4d:fe:
72:ab:14:49:aa:bf:98:7d:d7:2a:7d:79:38:ec:6c:
82:12:99:cb:bd:ee:a7:c9:8f:7b:0a:66:66:42:a7:
44:82:59:fe:d4:9b:1e:8a:ab:60:ca:dd:81:0b:7a:
71:14:b7:65:0a:2b:60:5a:a2:f7:51:91:e2:87:41:
33:f2:12:29:c8:6e:e9:fb:d3:ec:e3:9b:d1:56:4a:
13:23:9a:b9:cd:53:bc:53:36:70:16:b0:8e:06:3b:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5A:8E:E9:5B:FD:08:52:DC:BE:A3:EA:8E:CF:C0:6E:15:73:84:39
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:21:4a:71:95:8a:7f:8e:13:a3:a2:5e:20:4e:64:5d:fd:c7:
86:d2:8a:9f:bc:db:a9:47:5b:d1:55:05:6a:ca:a6:38:70:d0:
7d:57:f8:41:cd:22:dd:72:7c:51:5d:c5:f5:0d:5f:2e:ce:2b:
82:a6:8f:a3:81:5d:bc:73:58:dd:d0:29:c0:70:5f:4c:90:30:
d5:77:f2:c4:fc:0b:a1:3c:bb:e8:c0:0b:33:a3:23:d5:3a:fa:
79:dd:ba:a0:08:31:11:6d:c4:39:83:4d:82:ea:3e:f6:b3:09:
b0:d1:2a:61:b3:73:c7:b4:2c:55:d5:47:0f:c6:be:98:bb:da:
71:bb:bc:51:ea:2d:6c:11:e0:f6:84:6b:04:b2:bd:43:78:de:
81:82:ec:b6:2e:95:ea:50:33:cd:d5:64:cf:44:36:2f:63:75:
51:68:96:5f:e2:c1:42:c6:29:43:02:5d:4f:ab:43:49:87:4a:
5d:ec:71:6b:2c:53:05:ee:a9:78:c6:12:85:0f:b5:a3:6a:91:
18:6a:88:65:a6:5c:7e:ec:5b:46:b9:28:c4:17:68:86:d7:81:
dc:45:e1:e6:b2:dc:bb:74:24:0e:71:b3:3e:10:ed:ff:bb:c0:
1a:a4:30:78:ec:e1:3d:be:a9:3b:9f:75:85:9e:77:5d:5a:3f:
d3:ab:41:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:22 2025 by rpki-client