Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: a4KK0raufW7z1fV8UBJ01e5lWvWNYBz5VHI1nyIbbd8=
Subject key identifier: DE:24:BC:A5:B3:4C:9A:5B:70:79:79:B7:BA:AE:9E:F3:3C:FA:7A:0D
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019510C797B0B819AE64970CE3E8770334E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0B37
Signing time: Sun 16 Feb 2025 22:01:10 +0000
Manifest this update: Sun 16 Feb 2025 22:01:10 +0000
Manifest next update: Mon 17 Feb 2025 22:01:10 +0000
Files and hashes: 1: Ke8e1NAYZzQiPtwwM3L4rP1yhWQ.roa (hash: 4CTO9kGNxwlbcy52jny+xyVS9xLBGZQ5MXz3PD+4Smo=)
2: R43PaYUKZCLqgzcK-39C4LhJkYw.roa (hash: RU4oVL2aN6ItjsLLYNF/Tqi8VXdquafeG/KUtVtAMgo=)
3: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: sXbsIbjNesIxaVkO3rvqWdo6jDBOlnwgD7+s6DHuTJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:97:b0:b8:19:ae:64:97:0c:e3:e8:77:03:34:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Feb 16 22:01:10 2025 GMT
Not After : Feb 17 22:01:10 2025 GMT
Subject: CN=de24bca5b34c9a5b707979b7baae9ef33cfa7a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:26:3f:8b:be:71:7c:7b:3d:b3:69:5d:67:
9d:4f:5a:28:e3:4a:3d:f1:1e:75:10:54:b0:a7:f8:
99:c2:81:60:13:b5:2f:10:f3:e1:77:51:ac:1e:44:
77:36:2f:3a:14:5e:99:35:68:c4:36:ff:b7:ed:72:
ff:0d:72:9f:25:3f:33:14:74:4d:cc:3e:e2:58:9d:
db:42:47:67:e6:7e:e3:58:e4:bd:0d:29:26:8a:10:
75:ed:e3:6a:b0:e6:65:2b:3e:d4:27:5b:98:5b:f4:
90:a8:90:a6:dd:ef:aa:f8:71:f0:84:88:6f:bb:b4:
10:8c:f1:1b:20:30:2b:e2:3d:b8:74:b9:28:d5:09:
b4:ef:f3:0f:47:52:00:db:51:83:c7:4b:c8:1e:9d:
f5:95:e9:8f:3b:04:57:3d:eb:56:de:f4:71:fc:91:
3a:96:fe:0c:e6:09:29:1c:68:2b:f2:85:0e:69:e5:
43:52:7d:e4:07:9a:19:ae:b7:e4:98:8f:cc:7b:67:
eb:4d:a3:ae:6f:65:91:ed:62:db:53:d8:ed:87:84:
5e:17:21:e5:88:e7:0c:da:b2:dc:a6:8d:4b:45:70:
e5:c6:6b:ff:29:fb:68:c3:f8:d4:12:e4:92:22:cd:
1c:1c:fe:44:00:b2:84:cb:d1:45:a3:18:e1:70:31:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:24:BC:A5:B3:4C:9A:5B:70:79:79:B7:BA:AE:9E:F3:3C:FA:7A:0D
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6e:65:62:8a:01:d6:47:4b:3a:e0:77:72:75:b9:27:af:f8:
f9:74:b0:49:55:1a:1b:34:7f:b7:b2:d2:bb:d6:f6:d8:8b:f6:
87:54:26:8e:a6:aa:fb:1e:5f:32:5e:f1:8d:c8:89:c3:42:8e:
45:04:11:0d:b0:54:c5:51:04:37:80:d7:b1:55:72:31:82:8c:
1e:ad:1c:e2:cd:37:3b:b2:9a:a9:a1:dd:ad:c6:af:c3:3b:a6:
14:49:c1:4b:74:83:2a:f6:f7:40:61:d7:1b:a0:9a:e3:a7:14:
f9:1f:d6:2b:83:d1:6c:de:88:e4:db:0a:f8:0a:6b:98:19:17:
dd:29:5a:f0:68:b4:f1:c1:af:95:c3:35:83:93:e4:de:b2:0b:
df:b7:04:e0:87:46:a2:4a:08:99:0e:ef:35:61:27:c4:93:b1:
cc:40:12:74:12:c8:8d:1b:5c:a8:00:92:ed:93:07:84:2b:0e:
4b:9a:67:5f:25:62:36:31:3f:73:94:7f:bf:03:4b:cf:b8:e6:
49:7a:57:64:a1:92:88:84:23:57:e9:05:b9:05:f4:63:28:ff:
62:e0:e8:bc:8a:49:24:ea:5c:d1:94:4f:10:99:0d:b8:9d:64:
e8:a3:07:f2:3f:81:3e:e6:cd:af:43:b0:83:b3:8e:b4:bc:da:
e3:97:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:54 2025 by rpki-client