Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: bEwXtstX7QDbHPpWNsom4PUZRwwcaFytfR4Jf5iPWRA=
Subject key identifier: D6:B2:7C:E7:B5:6F:BF:F1:07:A7:A9:6A:64:FA:AE:AD:89:79:2C:00
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 019511A29263F41D676537216CEE02D6397A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 1462
Signing time: Mon 17 Feb 2025 02:00:21 +0000
Manifest this update: Mon 17 Feb 2025 02:00:21 +0000
Manifest next update: Tue 18 Feb 2025 02:00:21 +0000
Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: XfJKMbfNqtMk+TIsMqGF+YcW4pY0ZNO4dfZ+rvKY3kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:92:63:f4:1d:67:65:37:21:6c:ee:02:d6:39:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Feb 17 02:00:21 2025 GMT
Not After : Feb 18 02:00:21 2025 GMT
Subject: CN=d6b27ce7b56fbff107a7a96a64faaead89792c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:a6:28:ce:b7:ef:33:fd:c2:3c:8e:fd:af:
68:1a:58:a7:06:e1:3d:3b:47:7e:e7:c4:9d:c1:2c:
aa:46:b2:9f:63:2d:60:bf:3e:ba:10:61:25:26:f7:
0e:93:2f:2a:a0:1d:51:00:d6:46:fd:37:45:2f:98:
94:32:90:a2:fc:9f:76:94:1b:5a:01:96:8f:76:ca:
0e:7e:e3:d4:59:cc:08:4d:40:69:34:93:9a:f9:28:
88:ba:74:b6:fb:5b:8c:29:96:01:6e:f8:c3:4a:65:
41:5d:26:a8:8f:94:b6:d3:33:25:8b:e1:c4:b8:d2:
14:43:b8:c1:a0:a1:24:d7:35:18:18:1f:b9:99:bf:
d7:a4:0a:4d:22:f1:af:fc:68:35:cd:f8:94:b0:cf:
45:fd:2f:20:72:17:64:c1:8c:84:25:94:8f:1f:9d:
f4:5a:0c:53:29:70:e0:c1:7f:7f:0e:0b:73:64:1f:
bd:50:a3:cb:df:9d:09:08:1f:4b:c8:99:ae:68:50:
27:83:36:a9:aa:cb:0c:02:85:97:2e:87:a8:37:5c:
57:42:30:b2:05:c0:42:da:f4:52:cf:7e:44:4a:73:
fb:4e:ad:2d:d3:7b:61:54:a2:c8:a2:7c:f5:ec:c4:
ea:4f:38:30:6f:a0:44:87:64:4b:65:de:4d:21:f4:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B2:7C:E7:B5:6F:BF:F1:07:A7:A9:6A:64:FA:AE:AD:89:79:2C:00
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4f:50:e2:ab:0c:35:84:91:c1:47:96:4d:b3:66:cf:af:be:
26:2e:b0:12:94:c2:38:ef:f0:81:3b:eb:fc:09:8c:52:98:13:
20:a0:12:d4:45:bc:e0:19:71:52:c3:53:2c:04:61:fb:02:cc:
db:de:c7:a3:ec:df:aa:7d:42:39:1d:29:3a:24:8f:99:bb:6d:
23:18:28:0b:5b:46:0b:85:b8:46:8c:e8:26:cb:33:9b:c9:b0:
86:62:d7:62:0c:3d:1b:a6:8a:5f:dc:ff:07:63:ef:be:68:0e:
b9:7a:83:e9:16:60:0b:cd:66:d1:e2:de:27:ad:9f:5f:f8:a1:
b5:5c:50:91:0c:50:8a:29:a5:54:ab:00:7c:e8:8d:90:eb:4f:
af:26:b5:e7:90:81:7f:86:43:5c:00:23:7a:46:50:bf:20:33:
05:ed:db:df:ce:d3:41:7b:63:58:60:15:8f:82:f5:d7:37:9e:
e5:5d:4d:9f:28:4a:fb:d5:29:d9:e7:87:c3:2a:3d:b9:9b:7f:
28:18:db:ea:18:cd:db:fe:34:9a:16:40:bf:35:75:92:87:a5:
68:14:d9:e4:dc:1a:37:74:33:30:1d:33:81:41:99:f4:bf:a2:
6a:d9:51:8a:82:09:9f:7c:44:83:e8:7b:5b:d1:fd:92:75:60:
5f:59:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:57 2025 by rpki-client