Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
File: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft (raw, json)
Hash identifier: obkCOBlIMiyHSy8OvHisUtc6XmTSLYj1EnOR3Rjc8HM=
Subject key identifier: 63:A9:77:EE:81:93:DE:C7:BF:96:C5:EE:D9:72:FA:2E:F4:F5:7B:44
Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
Certificate issuer: /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Certificate serial: 0194C4634C921E0ACB6E63E46BD8BA08F059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
Manifest number: 039A
Signing time: Sun 02 Feb 2025 02:00:29 +0000
Manifest this update: Sun 02 Feb 2025 02:00:29 +0000
Manifest next update: Mon 03 Feb 2025 02:00:29 +0000
Files and hashes: 1: e-ekxZnIJuci57HrEPz7zGue28s.roa (hash: 8H4l0N/E0NCOJoBHvZIBH7Jz+P9G/e+mdO0E4zzVLoo=)
2: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl (hash: CRk7+6NOPgV1/+Rs3BaeWBauacqc1x02qpoxyyWnEeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:4c:92:1e:0a:cb:6e:63:e4:6b:d8:ba:08:f0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Validity
Not Before: Feb 2 02:00:29 2025 GMT
Not After : Feb 3 02:00:29 2025 GMT
Subject: CN=63a977ee8193dec7bf96c5eed972fa2ef4f57b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:91:50:52:69:bc:a2:0f:98:f2:5b:38:1d:cf:
73:dc:54:8e:9a:40:f6:3a:75:13:34:e0:53:92:62:
21:a5:6f:c9:18:cd:fd:bb:42:7b:c6:aa:86:f3:7d:
c5:50:ac:86:4c:27:8e:91:41:7e:ba:25:68:21:20:
34:59:62:7b:61:57:07:d2:ea:34:da:1f:96:20:02:
61:02:85:84:55:ad:50:bf:d9:f0:28:56:80:01:76:
5d:9e:cb:38:93:f5:fb:2e:8b:0f:cf:9c:c6:b6:64:
85:29:07:17:58:24:4b:e9:97:2b:5b:8d:3f:0d:71:
a6:0d:9d:3e:d1:94:26:51:56:12:58:39:a8:99:73:
3e:03:7f:fd:8b:b1:75:0a:2f:14:59:db:85:83:1d:
9b:7b:22:01:27:08:de:80:dd:4d:76:bc:e7:25:4b:
60:5e:3d:08:5f:36:51:8d:34:92:29:22:27:75:8a:
46:60:ef:ff:81:61:4d:cf:05:67:c6:34:8b:9e:51:
62:9f:de:4a:3d:71:74:b1:dc:4d:01:f9:ee:26:eb:
f4:e2:c9:0c:d8:be:80:c7:f7:ae:f0:af:ce:a0:a6:
85:4f:4d:85:63:eb:24:c9:46:e5:76:0f:8f:ab:70:
c3:7f:ee:6e:27:a5:89:e4:e5:78:ee:4f:ed:8f:fd:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A9:77:EE:81:93:DE:C7:BF:96:C5:EE:D9:72:FA:2E:F4:F5:7B:44
X509v3 Authority Key Identifier:
keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:aa:55:f3:7c:0c:ee:af:9d:a5:fd:16:8d:29:39:6f:da:f2:
c5:54:6d:55:8a:fd:53:b7:f6:e2:ba:76:60:6d:21:bb:40:5b:
bf:2b:4c:b8:82:a3:8d:9d:2b:85:25:60:40:c4:da:14:3c:0f:
11:e5:a0:c1:b2:cd:b1:5f:5e:b2:28:4a:65:c8:f6:be:95:cc:
61:69:4b:f5:2d:53:f3:d1:92:3f:25:83:15:8f:61:4b:51:d3:
ab:87:94:97:e4:18:b3:0b:60:21:79:c1:48:93:23:4c:0c:c1:
9c:20:57:34:af:e3:e5:a6:70:5f:f3:14:df:1c:6b:04:06:0d:
e4:2e:7d:88:89:d5:b7:cf:7d:dd:cb:ad:33:e4:68:b6:69:ac:
f7:d3:4f:ce:1a:3e:4f:55:84:27:12:60:58:e3:ea:98:65:0b:
45:1a:1e:ef:39:88:9b:c6:39:d6:b3:0c:15:8b:d0:16:81:69:
28:a4:b6:b4:d6:bf:96:4d:35:e5:01:d9:32:ba:99:b6:31:cc:
80:bb:63:de:3d:98:0c:48:e8:e5:dc:0e:c5:c0:34:fb:b6:e3:
43:48:9c:dd:22:90:10:7e:24:48:96:f3:39:18:ef:7c:ef:69:
03:d5:a2:03:58:de:16:36:e6:ad:35:7b:63:ea:3b:c4:36:01:
d4:f4:fe:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:37 2025 by rpki-client