Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: 5MiWWV+Kiybgx2oDSxscyjRRfpp1DoWzr1JEI9V3VLQ=
Subject key identifier: 65:86:0E:F2:1F:19:9F:B1:F7:6A:36:BC:F2:7F:17:DE:06:04:80:00
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 019510C7124A33DE854FBB76052D4EBA352B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 1381
Signing time: Sun 16 Feb 2025 22:00:36 +0000
Manifest this update: Sun 16 Feb 2025 22:00:36 +0000
Manifest next update: Mon 17 Feb 2025 22:00:36 +0000
Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: phDoO6RQCIk3P9s4nP7exEHVjGhyTEwlZTyO/vFP+cE=)
2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:12:4a:33:de:85:4f:bb:76:05:2d:4e:ba:35:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Feb 16 22:00:36 2025 GMT
Not After : Feb 17 22:00:36 2025 GMT
Subject: CN=65860ef21f199fb1f76a36bcf27f17de06048000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:11:93:3a:09:d2:6a:4c:47:b0:5d:20:34:
c8:17:07:15:5d:a7:07:8d:b5:2a:46:78:e8:22:de:
a5:08:5d:c6:c4:c2:54:37:7a:7c:01:0e:54:7b:3a:
b8:c8:d5:9b:28:0e:f7:8f:df:eb:c5:38:31:9a:94:
20:80:b2:78:ab:15:b9:74:2e:48:f1:7e:0a:fc:0b:
b5:21:44:04:4e:1d:e3:10:a3:bc:78:35:c4:be:2d:
c3:88:80:a0:82:c7:d2:4e:5d:94:a6:0f:af:a7:50:
05:77:42:29:6f:44:7c:e4:d3:36:4c:b3:c4:61:bc:
08:31:00:18:00:3a:75:12:21:39:c3:78:95:e8:b4:
7a:4c:cb:d2:8b:da:1e:88:8a:5c:21:f4:3c:86:f4:
0b:66:b8:1f:b4:4c:fd:54:4a:78:a4:58:d1:8b:43:
64:fe:35:3b:7e:03:36:2d:9a:ce:71:98:57:2d:09:
96:ff:35:bc:7b:6f:51:a4:be:de:10:bf:8b:1e:b1:
3b:0e:bf:46:61:da:c4:6f:be:09:80:d5:08:ed:93:
73:e2:5b:84:4f:22:51:b2:04:56:be:e6:02:ee:8e:
27:3c:2d:f6:52:9f:89:2b:48:0b:78:3b:6e:98:54:
23:3b:c9:c1:09:b5:92:24:2d:b3:5f:34:7e:e7:49:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:86:0E:F2:1F:19:9F:B1:F7:6A:36:BC:F2:7F:17:DE:06:04:80:00
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:62:68:99:ae:7d:49:85:0d:d1:24:4c:54:c6:57:b7:88:a2:
16:20:cd:e7:68:e5:f2:8c:61:9c:ca:9a:40:73:18:fa:07:ee:
11:a9:34:8d:a9:14:95:9d:b2:e1:ed:af:30:5f:fb:bd:f6:05:
0d:e0:a5:03:92:76:8d:80:88:87:fd:21:d8:a4:20:cc:51:93:
ed:1a:8e:c7:17:6d:a9:d0:6f:9b:c7:da:99:a3:21:c9:31:68:
fa:61:0e:d0:ff:92:f1:75:56:97:b7:f9:f5:48:90:93:97:d5:
bb:ac:20:df:58:44:f8:3e:a1:86:21:a0:7f:09:97:68:82:65:
6e:8e:a7:a0:75:e6:fa:9f:4b:fa:cf:c6:35:be:ac:25:0f:70:
ff:a3:4a:1c:a8:06:31:80:50:09:4b:80:82:53:b4:cd:0d:f0:
9d:fa:c2:4e:0f:eb:bb:65:6f:e9:39:56:c9:5e:04:bf:2c:a1:
07:ee:20:d4:fc:ae:58:21:d7:76:c0:04:8d:b2:f4:f3:53:19:
09:cf:6d:b8:62:bc:de:5e:ee:cc:91:d3:4a:2e:cb:4d:95:b6:
74:f1:29:e4:31:47:e7:89:c5:3c:4f:e0:7d:49:e1:b5:c1:dd:
88:36:f1:f9:c2:b2:38:da:62:b2:ba:19:e5:03:57:dc:da:0a:
bd:39:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:50 2025 by rpki-client