Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: d8aIw1HoIRMehU6MtdDUa0K2N+Bi5XkV3YBOYytxqwo=
Subject key identifier: CD:3D:4F:7F:3C:6B:86:4B:5A:0E:80:45:08:13:E4:8B:3E:71:CA:39
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 019511D9933C7907144506CFFBE42C6654D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 03:00:26 +0000
Manifest this update: Mon 17 Feb 2025 03:00:26 +0000
Manifest next update: Tue 18 Feb 2025 03:00:26 +0000
Files and hashes: 1: 5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa (hash: nWQ6LzHmMcNUWFVJjD8F6A2IBDinnQ/3GkZ+tOcMhcc=)
2: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: /4vv+1HODpADA6Sc3enDc/kpVtiyzvK/ljB8s4yPi30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:93:3c:79:07:14:45:06:cf:fb:e4:2c:66:54:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Feb 17 03:00:26 2025 GMT
Not After : Feb 18 03:00:26 2025 GMT
Subject: CN=cd3d4f7f3c6b864b5a0e80450813e48b3e71ca39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:49:6f:14:69:07:99:13:6b:24:fc:1b:7f:
aa:06:59:05:30:d0:80:12:b1:51:d5:86:57:22:79:
08:70:c2:1a:3b:8d:74:62:2d:87:4b:24:c3:34:3c:
f4:45:cb:f2:37:61:ef:e4:fc:c0:10:e9:a5:f2:93:
68:c3:19:39:37:c5:66:7f:4e:f7:f6:c1:f7:bd:33:
9d:ce:2a:87:ad:9a:da:8f:e7:48:6d:5f:96:31:5f:
30:38:de:96:86:b8:b6:de:32:20:2b:ed:a5:22:73:
bf:81:cd:a2:9b:a7:b2:c3:b2:fa:6c:43:3a:57:f9:
bb:c9:91:fc:5d:17:b7:99:88:1e:2a:d2:c2:5c:c8:
f3:99:79:a5:f2:9d:88:62:70:69:29:12:89:47:8b:
cd:94:39:07:87:e7:b5:10:36:d6:d1:51:d7:cf:e3:
5a:46:ef:fd:52:3b:c5:4b:66:44:c8:07:d3:ed:e2:
1e:25:0d:d5:00:eb:1e:df:ff:65:d4:d3:18:ec:f7:
8c:5c:45:08:c7:7d:f8:cd:01:f8:13:88:7c:fc:bb:
4c:7a:a1:24:2e:f0:12:80:5c:f6:d0:63:29:e4:dd:
a6:a1:d6:b3:be:0b:ea:2f:d8:a2:8f:04:f1:7e:7c:
d9:07:7d:73:61:45:80:a0:80:30:b0:98:a7:43:c7:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3D:4F:7F:3C:6B:86:4B:5A:0E:80:45:08:13:E4:8B:3E:71:CA:39
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cc:bc:7c:78:9f:04:ed:04:5a:80:39:39:28:1a:67:29:f7:
83:25:c7:7f:9f:0c:3f:13:88:40:b6:39:4f:f8:79:a5:b2:5f:
db:f9:ea:2e:2b:5f:ca:8d:85:99:32:aa:e3:9e:53:8c:19:30:
ca:a9:ea:28:5a:4d:17:a7:bf:b0:95:d0:83:31:72:c1:40:91:
46:4b:09:33:24:b4:61:a6:b4:af:fa:32:00:60:ed:06:aa:4a:
fc:78:99:02:b3:4b:4d:1f:45:92:81:71:da:7b:ab:8b:10:62:
18:dc:0c:42:ce:b6:0b:f8:0f:8c:44:c6:b6:1f:09:5b:fb:d8:
a7:56:99:7d:5a:cc:7d:f1:1b:95:9f:5f:bf:21:0a:c3:ee:0b:
34:00:b1:d8:f2:89:a9:e7:02:c8:ad:68:c4:9a:9d:cb:f7:e2:
f5:ad:53:b9:a4:54:ae:4f:c1:47:75:04:5d:36:6a:20:09:a9:
f4:6f:10:df:b5:6b:89:e6:80:26:59:e7:68:b1:e1:96:1e:44:
16:70:37:68:1b:8c:af:d9:36:2e:c1:a6:04:ff:0a:ce:94:30:
55:15:2f:87:28:49:ff:de:6c:fd:63:c4:36:73:b0:e7:4c:30:
f2:8c:89:41:54:28:8d:1c:ed:7d:9c:e8:07:69:c2:82:1d:20:
4e:db:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:31 2025 by rpki-client