Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
File: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft (raw, json)
Hash identifier: SFP9nywguYSf5/Jk6E68mq/3IAx9YVddu5J0N98jbx4=
Subject key identifier: D3:24:91:22:C9:4B:C8:3C:D9:25:91:78:C8:FA:36:0D:E6:03:B3:00
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial: 01951134F54339C24CA1CEFF1684F38A57A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
Manifest number: 131F
Signing time: Mon 17 Feb 2025 00:00:38 +0000
Manifest this update: Mon 17 Feb 2025 00:00:38 +0000
Manifest next update: Tue 18 Feb 2025 00:00:38 +0000
Files and hashes: 1: FMf3Dlx3xe3o0oQ5H7VvQF4482M.roa (hash: Ky+yUEaNAFCmWfk3pIxAZYoORhQc8JCWg+sBVNOj1UU=)
2: W6TXRuSHj7Av0ycVagFuBFyueug.roa (hash: zzCpwhscwcrboKFL/7dxhPDQ5vjcVhPtCOUJlM4/l38=)
3: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl (hash: YjoMfppmzlsVPkryExxEVX4OXVoPZ2zfAQ1QSf1zUp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:f5:43:39:c2:4c:a1:ce:ff:16:84:f3:8a:57:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Validity
Not Before: Feb 17 00:00:38 2025 GMT
Not After : Feb 18 00:00:38 2025 GMT
Subject: CN=d3249122c94bc83cd9259178c8fa360de603b300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:6a:be:a3:b0:82:38:17:40:78:be:61:5c:
4b:01:f3:8f:f0:45:aa:14:40:97:6a:fa:1b:bb:db:
69:e3:cf:11:3a:ed:27:c0:dc:ef:06:78:98:f9:74:
29:3b:6e:3f:f9:bb:fe:e7:17:a5:e0:32:0d:d6:a8:
0d:18:a3:36:8d:e1:e8:42:b5:5e:db:92:8d:a8:36:
bc:a7:1b:bc:06:1c:48:ff:7a:1b:9c:99:94:78:a0:
b0:db:50:af:f9:e7:da:7f:0a:36:27:9f:e7:2f:3b:
d6:93:70:07:74:a9:d0:74:01:81:d2:eb:7f:34:5c:
5c:30:57:81:ee:72:e0:cd:9a:2e:cd:42:3d:51:31:
a8:db:60:25:8a:62:a0:5c:1a:5f:b8:35:95:20:98:
68:4f:56:16:e9:04:df:0a:74:b9:20:48:79:a6:6c:
4b:b3:31:24:77:15:40:36:e8:08:15:5a:b2:2d:36:
9e:78:82:15:96:49:e2:ca:bc:8a:9d:8d:e6:76:b9:
06:e2:67:c6:2c:36:9e:c7:7c:08:87:16:77:ef:7f:
3b:3e:f1:e7:88:8b:e9:08:b7:dc:c0:5c:a0:f2:4b:
b8:43:e2:51:1a:cb:73:47:5e:b3:82:42:2d:ae:19:
79:15:a0:be:32:65:07:01:c4:ac:f2:6e:4c:b6:e5:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:24:91:22:C9:4B:C8:3C:D9:25:91:78:C8:FA:36:0D:E6:03:B3:00
X509v3 Authority Key Identifier:
keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5b:8f:d5:f3:3d:ac:ec:58:41:13:d4:32:9a:11:56:69:a7:
ed:29:c4:d8:fa:90:1d:ef:8e:e0:cb:9c:81:29:09:fd:84:24:
66:50:37:f3:df:8e:f3:4c:a8:61:f9:59:82:9f:40:b6:fb:cb:
fb:3b:90:d6:d2:bd:06:f6:2d:4c:94:8d:a8:ca:6b:02:18:17:
95:d2:45:45:c7:de:6e:ce:9b:40:45:f4:a9:34:d4:3f:e7:3d:
d3:ae:cf:09:7e:ad:b3:0a:1d:fc:f1:00:ad:75:f0:83:8a:43:
5d:2a:22:50:f6:37:79:69:ee:c4:c8:04:05:bc:ea:0c:64:17:
bb:25:f1:0a:2b:bf:56:ce:2f:81:89:11:ec:29:e0:50:65:21:
ef:14:cd:54:8a:86:cd:c8:e8:a2:7a:e6:70:fb:43:16:3f:f9:
e1:b2:7b:25:88:2f:b9:54:9a:39:28:f2:69:da:ee:22:60:a4:
cf:27:ed:9a:d9:ef:cb:45:c6:9e:20:dd:97:ce:03:25:19:ad:
6a:23:de:d8:46:85:48:74:14:56:35:62:2f:50:cf:d5:af:c5:
0f:ad:7f:c3:e4:b1:c1:28:28:ad:a1:02:a3:fa:20:a7:31:43:
da:af:47:73:8b:a8:6c:8f:ee:6d:92:57:97:26:74:b3:65:6e:
1a:1e:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:21 2025 by rpki-client