Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: 5gglJgPYYOX/ULRapZUcwE3eEY5hkLojQHQ+Btog2hs=
Subject key identifier: E5:01:2A:31:A0:58:01:98:4A:3D:1D:C5:12:43:80:3B:17:5C:2F:78
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 01951134D12ECFA81B746C07B3E11E584BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 1144
Signing time: Mon 17 Feb 2025 00:00:28 +0000
Manifest this update: Mon 17 Feb 2025 00:00:28 +0000
Manifest next update: Tue 18 Feb 2025 00:00:28 +0000
Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: GJTkCnLoN9Yj/9rstmRwyvossHkKlBEXIAGJ9idJ4kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:d1:2e:cf:a8:1b:74:6c:07:b3:e1:1e:58:4b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Feb 17 00:00:28 2025 GMT
Not After : Feb 18 00:00:28 2025 GMT
Subject: CN=e5012a31a05801984a3d1dc51243803b175c2f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:f7:60:03:09:91:6e:e6:92:65:71:79:03:
8d:9b:50:e2:e0:ef:06:9f:0b:85:95:a0:33:61:3c:
d3:30:ba:17:f5:c9:41:66:18:dc:2d:a3:9d:01:1b:
fc:b6:d0:b1:62:14:1c:46:2c:f6:b2:76:9c:d4:8d:
33:6c:fc:44:05:29:9e:8a:c5:2c:04:68:b2:ce:e2:
ea:8c:bf:32:5c:f0:7e:94:60:bb:25:e3:fe:38:e4:
8a:4c:63:bb:b5:47:91:ee:c3:43:5c:84:66:cd:dd:
69:8d:e1:11:7d:32:6d:91:21:cf:47:60:7f:3c:09:
fb:88:9d:39:d3:7d:d9:fd:32:47:81:20:8e:1a:05:
8b:71:1e:42:77:93:2c:35:db:fc:44:b7:6a:c4:b3:
37:b4:e8:39:19:01:f2:14:e9:8c:da:8a:56:3b:fd:
5b:ab:31:43:6a:6e:73:91:49:73:90:9b:73:09:d1:
1f:92:ed:fa:10:95:21:de:87:f2:45:a9:00:9a:77:
39:05:49:80:00:92:ff:53:f8:d6:e4:a9:9a:13:5b:
f1:9a:c6:9e:f5:52:5d:b3:20:82:7e:86:c4:61:fd:
4c:9d:d8:02:cf:fa:26:4b:92:93:e7:12:03:09:1d:
5b:bd:44:fb:06:34:d2:8b:c1:87:fa:5a:6b:88:99:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:01:2A:31:A0:58:01:98:4A:3D:1D:C5:12:43:80:3B:17:5C:2F:78
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:22:01:f0:cd:3f:ad:81:26:cd:23:83:0c:18:e4:02:28:b4:
6e:f2:77:67:88:89:50:d1:35:49:48:85:3b:1c:20:26:46:6b:
69:bd:03:02:da:a7:c6:ae:9b:2c:7d:67:a9:da:7b:6c:38:fe:
93:1f:5e:9a:c2:fb:90:82:f5:28:19:49:80:17:90:34:d3:e2:
24:75:ed:c1:d5:12:67:a0:c1:96:72:30:03:07:1f:04:f3:26:
04:14:15:1c:ff:78:15:43:05:c9:9c:cc:ad:f5:3a:0d:db:cb:
42:2f:85:09:6c:ca:26:f5:54:5e:e4:67:9c:05:43:32:f5:22:
ea:68:e7:d1:4f:6a:05:b6:6e:b9:cd:20:55:1a:f8:2d:1c:44:
75:9e:1d:c9:e8:dd:15:79:f9:50:3d:6b:09:4a:b0:91:6d:b0:
e0:13:97:f2:b4:ca:9b:3d:3d:ed:9f:4f:6e:28:e8:43:5f:90:
6a:e8:29:58:4b:6a:76:b4:9b:35:d1:9b:ff:80:2c:e5:c8:59:
09:19:72:11:69:8d:83:0e:f8:4a:1b:26:1e:5b:fa:4b:09:db:
a8:49:b8:d3:49:bc:c9:81:ad:fb:38:f7:e5:ff:bc:ec:0e:22:
6b:da:40:ae:ea:3f:c5:ff:fa:7a:3c:e4:69:b2:d0:ec:72:8e:
7a:aa:d3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:48 2025 by rpki-client