Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: YNPKJu7whFON6jwq9RIczWy3PqE/y6Eh9r1BXhLlE60=
Subject key identifier: 4A:6E:13:04:76:67:3F:14:A6:F0:FC:F6:4D:BE:8E:07:49:0A:10:E1
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 01941FCF21849D51EE3C37AF131E64BF5175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 13DD
Signing time: Wed 01 Jan 2025 03:00:55 +0000
Manifest this update: Wed 01 Jan 2025 03:00:55 +0000
Manifest next update: Thu 02 Jan 2025 03:00:55 +0000
Files and hashes: 1: EJ__ALzn0_7y2Y37C91W3ScP7XA.roa (hash: sHl71GGxnv6rIU4jOfTbZgoB6keYGNK5c1M0UbUHMAA=)
2: mHVrRmnmpgzQHjpuCArGDIWBdcs.roa (hash: JQ9KMlTRuZRd36ML4JtAuzDABHW1IytKLfnmS7P3W0U=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: of8cDlsWLYPOPrl/J9PGp8oia1iMoOAdBC7bDjNBDnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jan 2025 01:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:cf:21:84:9d:51:ee:3c:37:af:13:1e:64:bf:51:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Jan 1 03:00:55 2025 GMT
Not After : Jan 2 03:00:55 2025 GMT
Subject: CN=4a6e130476673f14a6f0fcf64dbe8e07490a10e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:94:8b:81:01:36:57:9d:2a:7f:55:84:8e:
9a:0c:10:91:46:f2:25:98:07:06:81:a0:e1:c5:d2:
b6:35:8e:23:fc:fc:8b:90:32:88:8a:cc:28:1b:97:
a4:0e:2f:13:94:4f:a8:36:2b:31:26:7a:7e:4a:c1:
74:4e:da:3b:04:1f:51:f8:3c:74:2a:5e:0c:e3:06:
a7:7c:94:c3:b6:29:2c:b7:58:66:50:fb:01:1d:45:
1f:fe:91:81:3e:f1:3e:4a:16:a2:7a:7f:45:63:e5:
60:2f:93:6b:e7:ae:61:32:60:6a:28:57:1d:39:b2:
44:cf:84:62:d2:06:f9:70:b5:9a:2e:f4:77:8e:55:
8e:15:0e:46:02:ac:1d:82:41:e8:f4:cd:26:05:b4:
44:a5:d2:1a:22:bf:2b:59:d3:fc:9f:8a:65:e9:cb:
02:50:f3:5d:21:64:01:ba:24:80:9c:50:f6:a9:3c:
74:0e:7f:00:0c:20:cd:7e:b5:b6:3d:f5:f0:32:6b:
5b:1f:f0:11:4a:3a:7a:65:ad:6c:bd:68:dc:7e:d8:
22:52:63:37:ee:d6:31:91:95:b1:67:a9:39:53:99:
44:1f:27:a6:be:39:3d:ff:4a:5c:c3:53:78:cd:d3:
5d:c8:60:c0:02:ff:31:53:30:7b:89:46:7b:8e:c2:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6E:13:04:76:67:3F:14:A6:F0:FC:F6:4D:BE:8E:07:49:0A:10:E1
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:aa:e5:b0:67:b2:cf:65:ee:53:5c:43:8b:15:9d:49:02:0e:
a8:23:2a:bf:60:85:6a:80:18:de:07:5d:3f:99:c7:4e:0f:9b:
08:75:4f:89:23:1e:9c:59:10:a1:84:e4:6f:98:5a:24:df:8f:
69:ca:5d:30:e0:37:fa:cc:04:72:fa:4c:54:32:3a:a3:fc:c3:
78:28:1e:85:0a:87:4b:93:70:fb:73:19:b2:74:4a:cf:49:1f:
fc:2c:4f:13:8c:6b:e8:57:40:ed:a2:06:96:9b:2e:e0:12:36:
3d:53:26:3a:93:c6:34:06:97:14:ed:36:0b:e9:0f:ac:8b:bf:
94:96:54:03:71:f8:b5:96:f2:92:71:9d:eb:c0:ac:89:3a:ea:
9a:a3:c7:82:d6:1e:f0:7a:ec:b0:d8:12:80:84:1c:bc:f5:36:
6a:74:3a:0f:4c:07:43:ed:3f:04:b0:e7:5d:f3:e9:ac:30:ee:
39:07:57:ff:99:10:b6:fb:31:20:4e:10:d0:1b:62:4c:07:2b:
2b:97:54:84:b8:2d:ba:4d:ac:a5:30:e9:8f:c7:18:63:a5:fc:
4a:54:9a:59:aa:51:d2:90:e9:4b:21:b6:ad:81:92:f1:c6:0d:
9d:ee:77:95:02:d2:ba:49:ee:ca:81:21:ff:1c:c1:f0:e4:1d:
5c:d1:e9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 1 08:55:09 2025 by rpki-client on console-ams.rpki-client.org