Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
File: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft (raw, json)
Hash identifier: IUou+lj/oquuazGKyi2C8+1Tq93k5YMJWbAQBhwIGC4=
Subject key identifier: 59:22:78:C7:2A:05:8A:34:00:5F:3E:C6:54:21:88:15:39:71:1F:A9
Authority key identifier: 5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
Certificate issuer: /CN=5e803b66b306008fb172c2dfd522b5655057360d
Certificate serial: 0195116C1019D713BB409289626AD3EAAAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
Manifest number: 1076
Signing time: Mon 17 Feb 2025 01:00:49 +0000
Manifest this update: Mon 17 Feb 2025 01:00:49 +0000
Manifest next update: Tue 18 Feb 2025 01:00:49 +0000
Files and hashes: 1: Bu2qohV5DT207In6bmDkzPkl22w.roa (hash: yQgjgxJo0jD6Zb5Cbl39m04H6+9TPpDsNpPjtFWzK98=)
2: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl (hash: ZgpWeCzA0f+wGYg/oe2gwXv739pqr1qDo6YIpmfj60Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:10:19:d7:13:bb:40:92:89:62:6a:d3:ea:aa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e803b66b306008fb172c2dfd522b5655057360d
Validity
Not Before: Feb 17 01:00:49 2025 GMT
Not After : Feb 18 01:00:49 2025 GMT
Subject: CN=592278c72a058a34005f3ec65421881539711fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:f7:a8:10:46:ef:51:2b:6d:d4:f9:ba:2a:
fa:5a:8e:f3:91:0d:8d:eb:1b:ce:da:50:92:aa:df:
b7:71:eb:cb:58:28:c3:14:bc:4c:6f:9f:c8:6a:56:
d1:8b:0e:7b:89:b5:7d:0a:f5:ea:8d:02:2c:a1:c0:
f2:28:d1:1c:fe:41:73:b4:b6:4e:bc:ec:83:9d:84:
8c:d3:56:89:04:05:f8:c8:a9:c4:5b:21:70:ec:60:
29:25:7d:e2:58:08:48:6a:cf:f7:78:1e:6a:7b:5d:
8f:6c:eb:91:65:9c:18:cc:35:74:7b:bf:44:52:d8:
74:c7:31:c1:04:81:e8:93:8a:36:cc:f4:c4:d2:b9:
c5:e4:ef:3d:6c:a7:e9:85:4a:e7:a8:e7:bf:86:cc:
5b:41:7f:fa:3c:97:b8:f0:3b:61:ff:c5:2d:56:b2:
6d:11:14:cf:26:c9:e8:28:13:93:68:76:0f:97:16:
1b:91:e2:0a:eb:85:26:60:cd:48:f8:9b:0b:5b:d2:
d5:a1:71:ab:60:8f:3f:4b:22:ac:f4:c1:68:43:a5:
35:ec:1a:b2:6b:8e:8c:8d:d7:6f:34:14:51:20:d7:
4c:6c:9e:30:2a:69:da:a9:d3:20:54:e7:3f:c9:31:
28:76:3b:5c:63:cc:09:d3:99:f8:dd:bd:c4:d1:7a:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:22:78:C7:2A:05:8A:34:00:5F:3E:C6:54:21:88:15:39:71:1F:A9
X509v3 Authority Key Identifier:
keyid:5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:16:5e:cd:4a:e2:2f:39:a4:4d:db:a0:13:a1:82:0a:a7:14:
5a:73:8a:dc:cb:8d:f5:9d:1c:eb:04:d6:5e:16:97:75:86:69:
96:ea:17:33:2f:3b:94:4b:56:6c:c6:38:db:55:9b:0d:ec:6e:
6b:50:6e:03:8d:fe:c7:8a:18:08:9e:2d:9b:5c:31:c7:62:e4:
7b:c5:34:64:5b:6c:8c:ec:e8:b3:44:c5:49:ec:70:5f:46:35:
fc:ea:ea:fd:6a:f3:5f:72:03:d7:38:a7:c8:03:86:87:7e:95:
1f:84:a6:41:8e:5c:b5:96:a1:ff:98:d8:90:64:13:26:5c:b8:
05:b2:17:fa:6f:3c:cc:3b:c6:35:56:3b:49:f9:65:56:28:b4:
1c:3c:bc:57:16:13:05:09:53:dc:1f:e0:bf:2b:dc:ff:a8:93:
6f:7d:40:70:41:e7:40:f3:8d:fe:61:eb:85:e1:ba:cf:33:1f:
a0:21:8f:4b:ae:98:85:fb:71:c9:69:36:ea:78:e0:2d:af:93:
6f:d7:50:8b:95:36:9b:75:d5:3c:b6:2d:b8:5c:a8:ff:69:a2:
a5:83:04:eb:ae:dc:66:21:66:a1:0e:5e:0e:87:16:01:c9:07:
61:6b:62:95:9b:f4:f5:a5:e8:fa:34:d9:aa:91:93:f5:55:27:
1d:8f:4f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:44 2025 by rpki-client