Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier: 3wIs8yjj2rNVTqiLVARUUpFdi7TsPiCJGVI64r0wcZA=
Subject key identifier: CA:79:8F:76:DA:30:08:DA:E4:0F:B5:39:5A:7A:CE:90:8C:1E:F0:63
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial: 0195116BFA83C5D2B7B4D741451D135A96B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number: 0378
Signing time: Mon 17 Feb 2025 01:00:43 +0000
Manifest this update: Mon 17 Feb 2025 01:00:43 +0000
Manifest next update: Tue 18 Feb 2025 01:00:43 +0000
Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: dPpvMZm4heUnqaboHUlngORQdDqQATeiYuNBrCCtmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:fa:83:c5:d2:b7:b4:d7:41:45:1d:13:5a:96:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Validity
Not Before: Feb 17 01:00:43 2025 GMT
Not After : Feb 18 01:00:43 2025 GMT
Subject: CN=ca798f76da3008dae40fb5395a7ace908c1ef063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:00:e6:73:74:0b:a7:6f:86:5a:b8:f4:e7:3b:
a9:e4:eb:f1:c9:d4:a4:3a:ea:20:f2:65:d1:9f:52:
0d:2a:1b:ec:3f:d7:d5:81:64:f5:ba:0a:b2:3e:91:
b4:a4:93:c1:47:1f:f1:1b:59:36:38:74:d9:7e:1d:
52:d9:db:e4:ac:40:90:8c:27:15:7f:ad:8e:3e:50:
b7:fe:86:c8:56:d8:ee:f8:73:9a:13:d0:2e:5f:6a:
77:b2:27:e1:7a:b3:94:fd:b7:72:20:1e:3b:f8:1f:
a2:71:fe:75:9a:9f:2b:74:44:0b:32:85:f4:ee:72:
ef:d8:d9:e7:3d:7f:3a:8a:59:74:6d:12:fd:78:f6:
e0:3d:8c:be:3f:2f:76:22:7d:6e:a9:e7:4f:db:69:
c2:2b:37:63:77:e5:7f:8b:e5:99:28:1b:33:8b:d8:
9d:a7:13:43:99:3b:48:80:cd:85:b9:e0:04:26:df:
7d:03:e0:b2:e3:99:21:f6:bf:5c:67:3a:64:cd:6e:
09:a4:60:bc:c2:a8:01:2b:77:03:50:a7:c3:da:2d:
c3:d3:f7:6b:41:0e:3d:f4:27:f4:28:c9:13:1f:5d:
2b:e7:6c:12:52:79:e0:55:30:52:a4:2b:e1:30:11:
a5:96:90:2a:3a:ea:c3:30:1a:d4:1a:1e:e4:c4:99:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:79:8F:76:DA:30:08:DA:E4:0F:B5:39:5A:7A:CE:90:8C:1E:F0:63
X509v3 Authority Key Identifier:
keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5a:fb:fd:fc:dd:a2:f9:24:fb:d0:89:17:e9:af:9b:a6:ab:
bc:ec:bf:9e:3e:a7:9b:0e:8e:a4:47:87:7a:f9:fa:fb:13:a5:
f7:0f:2f:85:b4:76:4e:83:bb:2a:18:93:3f:af:25:4c:7c:8e:
05:13:38:24:cd:a5:0a:68:9c:d4:8f:2d:2c:a9:55:cb:4e:ba:
74:30:2a:00:b7:a2:32:0a:e9:ae:5c:82:8f:de:1b:76:de:94:
c8:97:ae:56:57:80:f6:7b:b1:76:bb:35:81:11:15:42:fd:47:
6f:30:2a:42:7d:0a:3e:61:f0:b0:f6:59:27:0e:a3:89:1e:4b:
e2:db:e1:99:42:fa:7d:bb:84:d4:16:f0:22:5a:79:69:0a:34:
f4:a9:49:4b:c9:bf:77:36:18:e4:f9:76:a6:d8:84:5c:2e:e0:
ee:c4:ab:80:a2:98:ab:0d:12:7e:af:db:22:07:a9:76:c6:38:
cf:3c:f8:fa:0a:a2:51:74:8c:11:ba:6f:8c:11:f6:4f:6b:fa:
4c:e2:3c:40:62:1f:8d:9d:74:e3:6e:c7:c8:0b:69:f2:dc:48:
bb:77:69:36:40:12:c8:8f:03:c5:d8:43:1a:b4:24:d3:9a:08:
4f:0e:cf:d1:bd:17:6a:39:1a:d1:f5:3a:e2:21:d8:58:60:40:
05:95:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:05 2025 by rpki-client