Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
File: XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json)
Hash identifier: J0XZ7YXl6tcUUMn1CJFm41T/aVtzoqslSpDcuAx3aG4=
Subject key identifier: E5:A6:F9:02:B1:13:75:F1:63:3D:5A:3F:B9:2B:D5:A8:0B:CA:23:E5
Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
Certificate issuer: /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Certificate serial: 0194C3873E8054543CB0E5CC9F0CD70C6EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
Manifest number: 06BC
Signing time: Sat 01 Feb 2025 22:00:07 +0000
Manifest this update: Sat 01 Feb 2025 22:00:07 +0000
Manifest next update: Sun 02 Feb 2025 22:00:07 +0000
Files and hashes: 1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: 8W+HY/fVgPgl7fukOsIxLPh6pHGTFBz79xwfwIga5BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:3e:80:54:54:3c:b0:e5:cc:9f:0c:d7:0c:6e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Validity
Not Before: Feb 1 22:00:07 2025 GMT
Not After : Feb 2 22:00:07 2025 GMT
Subject: CN=e5a6f902b11375f1633d5a3fb92bd5a80bca23e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:31:c0:a8:ff:fc:52:86:95:d1:17:1a:99:
92:95:16:1c:a0:1e:d1:af:7e:90:a1:dc:f1:7f:2f:
f5:a6:e9:c5:16:bb:7f:f4:12:79:7f:c6:c5:60:2a:
f9:95:9e:4a:ec:b8:a1:b4:a5:21:01:65:2f:b4:19:
d0:2c:0e:9d:44:01:2d:aa:98:59:90:4b:b8:58:eb:
2d:8c:39:ef:3e:d4:61:cf:22:f6:46:1e:aa:50:ad:
c8:1e:fa:b1:31:94:ec:a6:6a:cf:ff:36:8e:95:5b:
54:f9:0f:eb:39:5a:29:4a:d1:45:45:1a:7d:8d:65:
53:63:f2:35:c6:7f:2f:c5:ad:d1:09:8a:c8:35:9e:
76:ff:68:ac:ae:38:bc:d1:0b:2c:ab:46:70:f3:c0:
a0:92:fa:71:98:9a:35:a5:1a:49:60:f1:37:ac:6b:
d2:a6:53:b3:f3:6e:8b:78:9d:c2:26:9e:ce:95:d0:
e4:db:3c:0b:39:f9:a3:37:99:82:93:32:47:ec:f8:
c5:64:2a:4c:18:b6:22:51:9a:92:08:fd:1c:69:37:
e9:de:fb:11:98:d2:07:a8:38:09:a8:36:db:52:bd:
7a:9c:dd:04:e0:a6:66:91:f7:24:ae:bd:42:93:b7:
d8:68:86:60:ad:5a:ae:f4:00:7c:cf:e6:9a:e0:b9:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A6:F9:02:B1:13:75:F1:63:3D:5A:3F:B9:2B:D5:A8:0B:CA:23:E5
X509v3 Authority Key Identifier:
keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:aa:89:f6:f4:7f:41:94:ef:0a:26:4a:99:d3:a9:e9:e3:90:
d3:55:7a:17:84:0e:6f:2c:e6:60:66:d1:70:7c:dc:ff:db:59:
7d:0b:87:9f:e0:ff:47:ef:42:8c:9e:5d:16:4f:80:c4:2e:0e:
78:23:20:b0:68:ac:d0:ec:32:2b:c9:70:72:c4:3a:8a:dd:83:
ae:21:7e:6e:4b:a2:c8:ac:ea:f6:64:8e:5c:fd:95:ac:e0:66:
1f:01:9c:f7:60:d6:b1:5c:4e:30:b9:d3:eb:fe:69:51:bb:3e:
12:46:71:74:d9:f2:6b:95:43:89:b5:c9:6b:e2:5c:5e:8d:52:
08:66:29:20:8e:1f:20:60:a2:19:5b:ad:69:8e:4a:31:ef:43:
1c:d2:b3:9c:00:87:ff:c5:14:25:63:34:83:44:99:52:73:0c:
4a:af:ce:a3:e4:f3:27:a2:02:94:ac:93:c3:bb:3e:8b:5b:e5:
65:b9:fc:b6:db:04:f9:35:99:c1:b5:4c:8a:7f:9e:4c:61:b0:
c2:4a:62:40:eb:a0:91:7f:34:35:cf:38:0e:e7:41:cb:6d:a6:
2d:19:05:8f:5c:40:14:2a:f5:6b:26:03:a8:41:30:87:16:b4:
bf:7a:e7:cc:f3:2c:85:2f:b9:d4:45:3c:ea:c1:ae:23:c8:71:
23:ca:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:02 2025 by rpki-client