Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: pcoN3proLkvH79DT5KkkCUihL3MgGKFirkrWNh4cSFw=
Subject key identifier: BA:FD:43:89:5F:1B:50:C3:0E:82:F2:E8:BB:F6:A0:72:48:C6:6C:B3
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 0194C4637961E9FE7B2CA3F59408347F67A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 041B
Signing time: Sun 02 Feb 2025 02:00:40 +0000
Manifest this update: Sun 02 Feb 2025 02:00:40 +0000
Manifest next update: Mon 03 Feb 2025 02:00:40 +0000
Files and hashes: 1: Wk_9wtGClVrtYODuHEtURJ-3oHQ.roa (hash: s/nXb34IkLeKLlmquub76FOlWdViv6YcrY3Wh7bVOcc=)
2: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: TCdkG7LFTYDaoKulST93aqMJzJ9CrG93zPgHJhuC6kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:79:61:e9:fe:7b:2c:a3:f5:94:08:34:7f:67:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Feb 2 02:00:40 2025 GMT
Not After : Feb 3 02:00:40 2025 GMT
Subject: CN=bafd43895f1b50c30e82f2e8bbf6a07248c66cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:63:9a:f5:71:c9:08:48:34:0a:4c:05:58:
63:d2:2f:2b:a1:ab:e9:d1:51:db:98:4f:ef:ba:20:
95:b8:22:61:36:79:e0:38:86:7e:f9:95:9d:1d:9e:
fa:7c:a1:c2:8b:b0:f1:70:60:4e:80:2e:a5:eb:59:
2a:7c:24:cf:e9:10:fa:c8:2b:b6:3c:7a:08:8c:f2:
62:23:04:f4:6f:06:64:c1:66:32:a1:15:15:c6:a7:
ba:6c:be:c7:94:19:2e:fa:bc:73:3f:b8:7b:fb:4d:
73:4f:69:cc:86:70:f0:6c:00:fd:43:56:48:61:11:
a1:25:b6:4e:fe:8d:f0:7c:7f:be:47:a3:71:66:06:
63:57:96:f3:fd:17:66:11:01:39:02:ac:18:26:30:
36:06:c1:76:0f:f5:6f:a2:57:b1:56:94:d3:7d:20:
9f:d1:70:f4:7f:eb:bc:89:2d:1e:ed:74:96:df:a0:
d4:2f:8b:15:38:a8:7d:c6:e1:07:74:2a:50:1b:4c:
c7:3a:d6:23:85:25:d9:78:55:7e:ef:14:2f:8d:94:
4c:05:68:c2:b3:f4:8e:83:45:c2:1d:fc:d1:37:f1:
e6:e9:bd:8d:65:e0:59:08:1d:f6:1d:c8:0f:1a:78:
a6:12:7f:d8:32:27:70:3e:ea:37:1d:d0:b9:76:b0:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:43:89:5F:1B:50:C3:0E:82:F2:E8:BB:F6:A0:72:48:C6:6C:B3
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:28:7d:06:14:9a:43:0b:d4:ca:77:37:45:53:d9:6a:c8:f9:
b9:01:7e:f0:18:8e:bf:06:88:70:44:89:8d:86:ae:5e:89:18:
31:49:7a:35:e7:6a:90:f2:97:61:c5:15:59:dd:9b:40:98:54:
bf:64:e1:33:84:a4:b2:78:61:4c:f2:18:8e:be:61:cb:ca:34:
fe:bb:f3:01:6d:3d:57:2b:43:8b:0e:2a:e1:fc:1c:87:8c:29:
49:68:89:7b:9e:c3:5b:93:68:63:9c:56:a7:ae:20:25:bc:5a:
7b:09:75:53:d4:7c:c2:91:ea:e9:18:0d:bd:d0:fb:2b:2e:c9:
77:fa:69:46:88:67:b7:bc:a7:9d:cb:e0:d3:a9:a0:41:ba:5a:
ce:94:1d:05:03:d0:42:92:48:e3:78:38:28:6f:77:d8:b7:ef:
24:2a:bf:c9:b4:e7:92:65:2a:1c:a8:9c:45:2a:14:de:ed:34:
e4:c4:58:76:c0:94:59:da:b4:e0:18:b5:cf:18:f7:c2:ac:d5:
fb:78:2c:ee:45:fc:23:02:93:5a:3d:2d:a2:88:e1:ad:9e:f0:
c6:74:c9:9a:1c:ed:a0:fe:08:77:15:f8:11:e4:1b:11:e2:b8:
ba:b2:49:e4:a3:f9:ec:54:ef:52:7f:48:35:dd:be:55:2f:72:
58:31:80:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:30 2025 by rpki-client