Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: DOsnW5BzH85hJMb6tofspzvQAUD7GUVSpD+7txxsMmM=
Subject key identifier: 60:69:E6:5A:54:C1:36:9F:B6:50:F7:0A:4A:7D:43:64:17:78:9B:A0
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 0194C3F633680D841B6D15378491B5853D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 0EF3
Signing time: Sun 02 Feb 2025 00:01:19 +0000
Manifest this update: Sun 02 Feb 2025 00:01:19 +0000
Manifest next update: Mon 03 Feb 2025 00:01:19 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: tR0uTDc93YCGiwoQJnvCx+XmJbVHgIz1LcGKLbobbyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:33:68:0d:84:1b:6d:15:37:84:91:b5:85:3d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Feb 2 00:01:19 2025 GMT
Not After : Feb 3 00:01:19 2025 GMT
Subject: CN=6069e65a54c1369fb650f70a4a7d436417789ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:bf:be:d7:76:15:8a:b1:ee:fe:af:d5:07:
a3:6b:ee:23:5d:8b:4c:30:b1:3e:67:c7:e1:e9:2c:
1f:f9:26:92:0c:c4:e7:13:12:d0:d4:9e:5b:6b:ad:
a1:f0:a4:42:88:58:a0:b9:a7:e1:63:52:68:54:0a:
3a:e5:04:43:77:59:51:23:68:28:11:d2:a9:8b:e9:
5e:43:68:b3:57:86:4e:b9:70:93:25:eb:1e:fe:b8:
af:b4:df:9b:20:63:e6:91:97:c0:15:ea:57:c3:8c:
62:9e:6c:53:dd:e5:7a:39:e4:e6:32:75:69:e5:33:
82:72:a3:0f:3c:26:d2:94:8d:54:e6:ec:12:cf:ff:
a6:59:59:91:7c:b6:92:3f:d6:02:1d:c9:63:e7:cb:
d1:94:33:ec:ec:44:bc:d7:dc:3f:7b:49:49:ce:f6:
d9:50:bb:28:95:ea:09:65:19:05:c0:19:52:75:65:
ac:9e:57:80:7a:09:7e:74:e5:36:9d:a9:e8:33:b2:
c0:94:ef:2f:1d:51:12:49:07:df:8e:7c:b7:c8:83:
01:8a:71:51:fa:14:32:56:6f:ce:32:a4:fe:69:09:
dd:00:88:76:47:80:c4:14:47:67:06:60:71:3b:c7:
b0:42:a4:19:95:ca:e6:51:76:97:5e:d9:55:ce:7f:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:69:E6:5A:54:C1:36:9F:B6:50:F7:0A:4A:7D:43:64:17:78:9B:A0
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:23:17:1f:ee:cd:05:7c:dd:fa:23:dd:74:0b:51:39:bc:69:
8c:ed:64:c6:02:e4:13:23:63:46:15:03:6f:56:d7:f7:16:30:
92:bd:d1:63:c5:27:b7:fa:3c:3e:2f:cd:bd:1b:88:8c:81:98:
b5:a0:60:2f:8e:f2:11:f5:9c:c2:bb:df:c7:ea:74:b2:59:d1:
5a:20:5e:49:21:e8:8a:a1:c6:57:23:38:bc:2f:d3:42:d1:ef:
d1:9d:bd:2a:1e:55:d7:42:d5:d7:83:69:4c:1b:a8:84:3e:39:
1b:87:dd:24:c1:be:3f:a7:9b:ba:41:cc:4c:17:c5:8b:0b:e1:
ca:aa:42:8b:86:b6:1a:ec:ec:53:56:a2:59:19:fb:16:a6:c5:
22:78:1f:30:59:84:d2:df:09:60:b2:ee:82:9e:ec:d1:76:d4:
26:b3:a6:e6:2e:d4:4a:c1:d0:e6:77:d0:99:08:61:7b:e3:83:
0c:11:b1:db:f0:6b:51:98:01:9a:92:0c:a6:db:42:14:aa:4a:
e0:84:59:56:16:bb:01:6a:22:5f:e7:eb:0b:f4:da:f3:81:8a:
46:df:f6:e5:87:ea:52:32:43:bc:b0:21:ad:3c:21:08:6c:22:
7f:7c:e3:53:35:20:43:6b:07:3e:37:91:29:82:eb:b9:70:41:
82:a1:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:04:46 2025 by rpki-client