Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: C/Fq+MlwpThhZz2CxELbXt8edGBEUA/9wjmHEcEVzQs=
Subject key identifier: E7:F2:8B:27:F0:15:3F:41:32:EB:35:EE:43:A1:77:25:3F:F9:4B:CE
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019511A2C8D1FDBAA0CF0D58A8A3C296213A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 13E7
Signing time: Mon 17 Feb 2025 02:00:35 +0000
Manifest this update: Mon 17 Feb 2025 02:00:35 +0000
Manifest next update: Tue 18 Feb 2025 02:00:35 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: 1ezxzk0eImgk+/oHHEzMoH3t0m8v1hfzxQublmQT2ek=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c8:d1:fd:ba:a0:cf:0d:58:a8:a3:c2:96:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Feb 17 02:00:35 2025 GMT
Not After : Feb 18 02:00:35 2025 GMT
Subject: CN=e7f28b27f0153f4132eb35ee43a177253ff94bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:dc:55:21:c7:d1:6f:53:42:32:b3:e6:bc:
b7:c2:2a:d3:c9:4b:1b:63:05:ce:7b:16:9a:c1:ee:
d3:7c:13:d1:93:82:d4:92:5b:e7:bd:13:ca:00:91:
c5:26:3f:aa:fe:ee:3a:80:b9:ae:c2:56:be:a9:88:
c3:c7:bf:2b:69:f4:3e:eb:0b:e3:74:85:d3:54:30:
33:7f:de:1e:e1:cf:9f:23:a2:1a:ac:64:6b:93:14:
38:d2:ad:52:b6:f4:8e:de:3f:28:a8:37:d2:43:d9:
50:60:83:68:c5:7a:91:d8:cf:82:84:c0:50:8c:73:
e0:87:24:78:58:ac:cd:04:aa:fe:36:52:62:e4:44:
dd:25:e2:60:2d:cc:69:94:07:18:af:40:ec:c0:cd:
d7:17:e4:6a:dd:fe:09:8d:de:d8:57:ac:73:d0:89:
48:7c:61:c7:0b:a8:77:37:09:97:25:63:a1:53:73:
7c:1b:67:9a:45:9c:9f:74:5e:0c:c1:62:cd:25:11:
f6:db:7d:97:c3:73:87:e8:78:43:30:32:76:57:17:
4c:20:20:b5:1f:11:a7:a8:9e:c6:d7:51:31:f7:bd:
e7:dd:04:73:b2:83:0c:ab:f3:6d:d6:df:55:43:16:
b2:ec:e4:30:f8:28:15:b2:83:f6:d0:e7:ed:a4:77:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F2:8B:27:F0:15:3F:41:32:EB:35:EE:43:A1:77:25:3F:F9:4B:CE
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c0:e8:45:93:82:d0:3d:21:df:01:3f:0a:af:90:b4:72:ce:
25:64:4f:ac:d3:72:df:06:e7:38:1e:4c:ef:b7:c8:e7:d5:c6:
0e:a2:1d:f7:4e:46:ae:3c:9b:c9:9a:fe:6d:ed:f2:f9:25:3b:
0b:a0:8e:29:eb:ca:99:d5:d9:5c:f9:f8:84:1c:bd:04:a3:bc:
a7:5d:5a:9a:ee:48:ac:df:62:33:f0:11:1f:e7:d8:00:35:84:
ce:17:69:c3:37:8b:46:39:80:16:b6:01:42:53:12:d5:c1:45:
e3:9d:af:97:ba:2f:5a:52:e8:27:5f:fc:a8:51:cf:f5:d8:f6:
88:e7:36:3b:0e:b5:88:44:85:53:07:12:be:de:fe:7c:86:c0:
a2:f4:1a:8d:f7:cd:d9:c4:7b:29:d7:03:bc:96:70:25:00:02:
73:99:aa:ba:10:3d:3d:91:62:83:2d:bf:a7:b1:fa:33:54:c8:
69:be:a8:9f:e9:d0:43:dc:60:7d:bf:64:85:28:37:3b:fb:54:
95:bc:a2:db:74:0e:8b:9b:81:cb:75:2a:56:ad:cd:76:5b:5c:
cd:f0:c1:3b:05:f6:7c:a7:61:ab:5c:31:04:a1:72:a9:55:dd:
94:b8:89:04:c9:70:a3:7e:aa:01:55:cb:3f:49:39:38:53:5c:
85:ee:56:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:14 2025 by rpki-client