Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: rIyErWBxKjjJSqeU4bpnZqs+zJmkbdVMG9BsrpLQRlc=
Subject key identifier: F6:DA:90:BA:00:70:0F:35:7E:68:97:83:88:2B:FE:C4:59:5E:17:44
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 01951134978508425F432083281CF8458654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 09CA
Signing time: Mon 17 Feb 2025 00:00:14 +0000
Manifest this update: Mon 17 Feb 2025 00:00:14 +0000
Manifest next update: Tue 18 Feb 2025 00:00:14 +0000
Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: 8sm5PJm9lr5UCyEYj2JPikcN/3pVs32QNogq8FRHpTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:97:85:08:42:5f:43:20:83:28:1c:f8:45:86:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Feb 17 00:00:14 2025 GMT
Not After : Feb 18 00:00:14 2025 GMT
Subject: CN=f6da90ba00700f357e689783882bfec4595e1744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:e0:d0:b1:13:ba:2c:a6:db:63:25:21:2d:
76:4c:04:d9:c1:5b:78:c9:94:d7:df:15:a4:a0:c8:
ad:53:3b:2b:96:a3:e2:86:78:7b:77:44:bb:c2:ce:
34:8f:b6:da:8e:b8:b4:a0:d9:a6:b2:c4:11:4c:fd:
a5:bd:04:3b:66:39:b2:8c:40:b7:9b:41:6b:20:bd:
dc:4d:9a:a7:76:bc:0c:56:29:ec:85:95:46:07:a9:
13:91:26:55:ec:9c:f7:68:cd:13:bb:5c:64:2b:36:
e7:fd:02:6a:2f:e5:23:1b:05:77:8e:1a:5e:9a:e1:
e5:78:5c:b4:f5:af:8c:03:01:9c:36:f9:37:82:24:
ef:42:4d:e3:27:86:e8:f8:11:86:37:f9:05:6a:89:
ff:78:27:56:a1:d8:0c:69:6f:51:20:a6:f6:3a:39:
79:5e:f0:7e:16:42:64:d8:81:a2:5d:cd:6d:57:f3:
62:ce:5c:de:11:96:75:73:94:08:c7:00:92:9e:68:
b1:7e:78:26:37:ac:ca:e3:39:16:51:54:95:34:9d:
06:31:e0:4e:cb:39:82:39:01:08:7a:fe:8c:c8:96:
a7:9b:5a:04:dd:66:94:2f:b2:48:c6:03:2e:97:50:
6e:c3:32:31:b8:3a:30:e9:ef:71:23:15:ae:55:70:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DA:90:BA:00:70:0F:35:7E:68:97:83:88:2B:FE:C4:59:5E:17:44
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b7:57:35:00:c1:34:cb:7f:7f:7c:8b:92:a6:6d:37:4a:c7:
3b:57:71:37:4d:bd:cf:0b:2f:0c:53:62:95:e1:68:8e:92:1a:
c4:bd:51:e7:7d:c7:1b:0a:89:41:fe:fd:f5:b4:a4:11:7e:fc:
68:bc:dd:ba:b7:4d:3a:62:31:f2:5a:8b:52:8d:d5:49:95:15:
3e:8e:f4:de:b2:8e:a0:3e:ba:f4:26:62:4d:f1:f2:6d:9a:56:
46:a5:a7:dc:3e:ee:32:1e:52:ff:6f:f0:30:ef:27:57:20:55:
af:60:94:f8:f5:b2:e1:f0:0d:1b:ce:ad:9f:00:e5:b9:32:74:
39:85:e8:81:50:29:cb:4a:2b:b2:1c:47:e6:4a:26:50:61:65:
c0:7d:2f:a4:a1:e6:e6:e5:d5:98:4e:ff:0a:b9:fb:e3:5c:ad:
6e:16:39:30:95:75:bb:86:e1:70:52:35:40:60:81:3d:d3:0f:
c8:a3:83:bf:ae:34:fb:3f:95:43:55:d8:64:e3:53:21:aa:f4:
de:a9:a5:4e:0a:ee:cc:b3:6c:31:9b:76:71:93:52:e7:3d:f4:
6c:74:bb:97:04:47:bb:38:a2:67:47:df:ca:38:d1:c1:3f:dc:
0b:fa:b7:1f:8a:ad:1f:b5:31:62:b6:ae:86:b1:81:3f:02:e1:
f9:9e:1c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:50 2025 by rpki-client