Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
File: Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json)
Hash identifier: WHRqeEEPUp+gj8G8obuciV5swM0QwBdbt8SF0nYlbNY=
Subject key identifier: F0:50:48:A5:56:8A:8E:E1:E8:12:BE:92:60:6B:F5:DE:77:87:03:EB
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 0194C4630ED9D36C576DD0EE1D6309A9FD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
Manifest number: 0E10
Signing time: Sun 02 Feb 2025 02:00:13 +0000
Manifest this update: Sun 02 Feb 2025 02:00:13 +0000
Manifest next update: Mon 03 Feb 2025 02:00:13 +0000
Files and hashes: 1: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: EXlFr84zifD/3XcwKuUibeCWKNln7cZ/UhTQFrNTfss=)
2: wonoA_cs_njK19k2rpw4egFrSTU.roa (hash: ng5AEw7xNqDcHFkEECYFEyho12TTUkJenLRXIkEgt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:0e:d9:d3:6c:57:6d:d0:ee:1d:63:09:a9:fd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Feb 2 02:00:13 2025 GMT
Not After : Feb 3 02:00:13 2025 GMT
Subject: CN=f05048a5568a8ee1e812be92606bf5de778703eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:1d:42:f1:d1:92:07:d8:b0:5f:b9:9e:a6:
a8:21:3b:e0:47:a7:ca:fa:ae:79:34:3d:d5:5e:a4:
cd:05:bf:c7:23:26:fa:5c:84:ef:e6:f3:52:3d:3e:
b1:05:85:02:dc:d5:bd:39:a0:c6:00:6c:9d:cc:0b:
7d:64:e1:90:09:6c:46:ee:5e:d3:47:c2:75:d5:03:
0d:4d:48:d0:99:b3:58:ef:63:2d:ac:0e:bb:5f:b9:
4b:7c:ee:d5:9c:40:37:0e:26:ab:7c:e8:27:e1:1f:
e0:95:80:65:cd:34:2a:8a:e5:df:fc:20:ef:8d:cc:
f8:a4:91:53:6e:8f:ad:e4:2f:5e:f2:b5:ae:a2:e1:
fb:98:a6:3f:b0:d1:44:1f:55:9e:3a:c6:c6:6b:57:
ca:f8:29:9c:54:6c:60:85:7a:44:24:2b:5c:09:c0:
e5:e0:3f:2d:16:d9:64:b2:2e:97:63:34:ab:c3:c1:
ad:dd:a5:b8:ea:95:4c:e0:12:f7:ee:96:f0:3f:91:
03:21:47:18:72:9e:9c:80:d3:e4:f4:7f:14:cc:fe:
7d:82:c8:99:21:37:92:10:82:ad:ff:9c:93:c6:23:
c8:5b:24:e6:60:ae:d2:fe:f5:04:5f:b6:8d:46:ce:
97:4a:4d:b7:26:4f:9b:a9:34:7c:7b:37:b7:e2:93:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:48:A5:56:8A:8E:E1:E8:12:BE:92:60:6B:F5:DE:77:87:03:EB
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:57:81:8e:0e:c2:d3:40:be:da:e2:16:71:48:11:ec:03:d6:
da:dd:60:34:92:b1:4d:94:6d:75:14:09:df:d3:6c:17:26:6a:
19:d7:7f:9a:4d:df:c5:da:1f:d9:14:ec:76:fb:7f:7f:0a:7d:
ed:52:c4:21:b4:06:65:5e:86:81:71:3a:2a:24:63:8f:68:a2:
67:07:35:6b:d7:98:4b:a2:9a:67:3e:af:79:d4:bf:06:71:7a:
c1:80:8a:21:a0:89:ed:a0:ad:8f:a8:ce:b1:f4:9a:a6:d3:c2:
16:fe:bc:6d:28:0e:4f:74:40:28:8a:1c:97:ad:e3:31:f6:88:
a5:7b:5d:da:86:68:d5:69:9c:5a:f3:e6:9a:8a:d9:a9:d4:79:
29:16:8a:08:72:68:4d:b8:52:ee:19:d4:c6:08:9c:9b:97:a0:
f5:a9:21:f2:02:18:46:95:29:9c:eb:6b:2e:2d:ee:18:41:e4:
7d:cd:73:6e:ee:61:42:20:b4:23:e7:fc:71:62:44:19:e2:e0:
20:a0:07:34:fe:c2:84:66:b6:fe:7c:da:12:b5:db:af:9f:b2:
e2:d2:97:3e:b5:6a:64:a9:da:72:f5:00:ce:1e:e0:6c:fe:c2:
30:1c:fa:b1:e7:92:9f:64:e8:c0:81:88:23:36:a0:6e:94:71:
a1:ac:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:44:47 2025 by rpki-client