Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: +dIOph/EHE4Mljc9EK0e1/FFPE/GZN+cmA11rOQd3No=
Subject key identifier: CF:F9:7A:36:27:F3:36:13:BF:51:0B:68:44:AF:94:58:D1:14:AE:1F
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 0194C49A37F4D016133C0B77DD7CEB02400A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 94
Signing time: Sun 02 Feb 2025 03:00:28 +0000
Manifest this update: Sun 02 Feb 2025 03:00:28 +0000
Manifest next update: Mon 03 Feb 2025 03:00:28 +0000
Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: VlGohSj9SYziuBDjMpHJkQD/gETwanubUGIgZej03ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:37:f4:d0:16:13:3c:0b:77:dd:7c:eb:02:40:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Feb 2 03:00:28 2025 GMT
Not After : Feb 3 03:00:28 2025 GMT
Subject: CN=cff97a3627f33613bf510b6844af9458d114ae1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:2b:d5:a0:b9:b8:41:87:8c:73:31:83:fe:
85:f6:25:54:c7:89:ed:c2:e9:95:65:35:4a:69:55:
53:3b:66:cc:42:bd:71:64:b1:3c:17:94:60:a7:95:
fe:9d:7d:dd:7a:a3:09:0f:e2:ab:24:f9:d8:d5:02:
24:24:49:2b:73:38:52:df:7f:b4:96:d8:c6:35:6a:
38:54:1b:21:9d:56:e8:a7:eb:b6:8d:0f:d4:78:5e:
60:fe:31:93:37:de:99:1e:3b:55:05:b7:98:9a:a9:
4d:f8:bf:f3:34:9f:ad:be:50:30:3b:2a:c2:33:8a:
0e:89:5e:6c:76:a4:f0:c3:3b:d3:fb:7d:0f:49:f0:
98:ac:a6:da:66:08:09:17:6a:02:e4:db:4a:a9:91:
7b:a1:b1:72:66:13:b2:e3:5b:78:17:cf:9b:b4:c4:
47:85:bc:64:36:4d:f1:33:90:27:01:fc:4c:a8:0b:
cf:27:5d:26:c9:fa:c4:48:c8:34:38:ee:56:36:a6:
6f:21:1a:69:a8:6a:ac:df:85:92:78:fb:74:9f:e2:
2d:d5:be:ec:b2:dd:ca:aa:41:64:be:f2:3f:05:b4:
e5:f4:e6:a9:1c:07:ce:32:7b:5f:3c:b0:bb:a8:e4:
20:4f:45:ae:f6:2c:a1:0b:f4:5a:1e:00:ec:c6:17:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F9:7A:36:27:F3:36:13:BF:51:0B:68:44:AF:94:58:D1:14:AE:1F
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c6:dc:1b:62:43:bd:68:76:d8:7c:59:58:a0:0d:c4:67:06:
11:18:b0:46:44:78:eb:ab:d2:26:a0:ca:8a:94:64:bf:3f:d9:
84:94:7d:a1:a2:8b:86:61:04:a8:4c:a6:3f:dd:1f:28:7f:c4:
3c:6d:ee:60:93:e8:a0:f8:7d:6f:74:ce:5d:9f:0a:07:a0:60:
8c:2e:a0:50:09:34:59:26:dd:c8:9f:52:f5:f6:3d:c2:cb:77:
e5:da:59:88:ff:30:02:82:c0:22:8a:4d:70:bb:8c:f0:7a:e7:
ed:23:45:51:11:19:e9:03:f3:e6:07:83:ec:f6:e7:62:d7:e2:
64:39:3e:53:31:9f:56:4e:d7:d1:73:6d:14:3f:fa:2c:80:8d:
83:29:b8:32:f2:05:24:84:33:2c:38:50:48:36:49:25:5a:78:
ea:60:dd:af:73:39:69:e8:ee:6c:6f:0e:2d:85:bd:1e:3f:fd:
71:ce:ed:b6:40:33:9c:fe:e3:b5:c0:42:2b:af:c5:7e:86:d9:
26:05:a1:5c:c9:45:a8:a1:63:f8:75:d3:03:77:d0:7b:85:0d:
c5:42:1b:d6:02:8f:3c:69:c4:17:78:0f:1d:a7:2e:6e:8d:fb:
0a:9e:e8:0e:44:1a:1e:06:6c:c6:c8:e8:01:a0:8e:64:5f:e0:
4f:29:0d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:00 2025 by rpki-client