Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
File: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json)
Hash identifier: R3RmnQl7BGtj5+XCtUOR4lz1rITcAGNv3xTCuFHqbYw=
Subject key identifier: C2:20:18:72:AB:AA:37:A4:8D:59:50:4C:E8:13:52:24:16:8E:0E:9C
Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Certificate serial: 019510FE04D01C0B02D3729949D1E5DAC39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
Manifest number: 038D
Signing time: Sun 16 Feb 2025 23:00:37 +0000
Manifest this update: Sun 16 Feb 2025 23:00:37 +0000
Manifest next update: Mon 17 Feb 2025 23:00:37 +0000
Files and hashes: 1: IiIPmmM-nxlvi6X_BDwclVK8nN4.roa (hash: 70bCr4c8aponltkSleoGsfNe8bySTBqaNCakdvrbnEM=)
2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: JfdWuoAMRVy+B1MiaNvpI4cHYp5a5UiCzPWs9fajoVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:04:d0:1c:0b:02:d3:72:99:49:d1:e5:da:c3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Validity
Not Before: Feb 16 23:00:37 2025 GMT
Not After : Feb 17 23:00:37 2025 GMT
Subject: CN=c2201872abaa37a48d59504ce8135224168e0e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:06:39:f7:96:02:80:0e:05:87:84:2e:8c:
01:ce:81:17:b8:0d:52:0f:6e:4a:60:d3:5e:3e:2a:
c2:42:0c:a2:b6:04:05:1e:f0:9f:68:28:fa:c3:ca:
1a:67:9e:0c:6c:b1:74:6f:ad:d9:a9:78:a9:14:ad:
d8:af:d4:8f:c0:f2:c4:00:0d:91:3e:ac:54:04:da:
58:bf:02:8e:ce:48:f7:6f:78:9b:0b:8a:6e:27:3b:
1e:0c:f8:35:6e:29:7d:b8:60:5f:f3:91:f2:08:9c:
a3:46:4c:32:86:75:5d:36:4c:55:7a:b7:c4:d0:5e:
0c:5d:c5:fe:56:ba:d9:4b:dc:05:cd:a7:90:c7:17:
7c:29:d6:d2:36:fd:b0:e0:fa:b9:29:1a:86:91:07:
d7:e1:31:2b:33:59:5b:10:f4:be:55:36:8d:b8:03:
64:d4:41:46:81:b5:19:60:de:39:a3:3d:07:1b:f2:
64:32:d3:2a:b3:d6:4d:4d:9d:4f:98:05:b6:35:2b:
b7:50:ec:52:de:1c:8d:a1:e9:2d:21:22:76:06:c4:
09:5b:b3:78:77:3b:52:f6:27:3b:41:b6:d7:36:c3:
0a:be:d1:53:31:91:3e:95:d2:5b:66:ab:d9:2b:c8:
b7:a6:0c:d6:4e:d1:15:8c:17:4f:03:d0:43:e5:63:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:18:72:AB:AA:37:A4:8D:59:50:4C:E8:13:52:24:16:8E:0E:9C
X509v3 Authority Key Identifier:
keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9a:48:b0:a2:60:be:96:27:17:c2:22:42:99:85:2c:83:d0:
4f:99:22:18:48:8e:05:96:b9:60:35:f8:f6:93:ab:a7:77:05:
5e:c5:27:35:cb:ac:ff:4b:a9:68:c0:3e:84:b4:56:a9:44:23:
20:82:f2:11:72:54:fa:26:e3:21:bd:1b:2c:44:d6:d1:2a:dd:
63:30:c5:8d:4a:25:81:88:6f:36:77:bb:2f:7a:4b:24:d1:ff:
55:bd:dd:d5:8c:d3:ca:63:0f:c9:f8:6c:b1:3d:b6:a1:af:df:
bb:f4:1b:66:18:9b:f6:27:c9:00:75:50:77:b7:51:ab:8d:08:
a5:21:75:1b:a6:b8:03:6e:cb:91:e4:ba:09:1b:67:0d:fe:43:
7d:47:31:55:4b:e0:ee:c4:db:18:70:59:7d:0e:c1:ee:13:67:
21:e4:82:52:ea:76:68:dc:36:d6:4c:f4:15:b6:13:60:cf:71:
5b:d0:5b:af:5c:a7:a9:b0:b2:22:a2:01:67:59:aa:c4:43:78:
66:c7:08:6b:f6:92:d2:58:bc:31:81:1b:d1:97:97:74:42:69:
f1:48:a7:72:aa:6b:32:b4:88:97:ff:0e:50:9d:70:db:b5:36:
88:ea:76:a8:fc:82:0c:8c:6d:d3:dc:97:ca:96:c5:58:54:eb:
a5:30:f7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:59 2025 by rpki-client