Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: b55beEMhmM+KCwg7bMPG7/ZiwMf7wqlhtrndSOWIFVI=
Subject key identifier: 77:1F:32:F7:EF:84:C8:73:1A:8F:10:3E:8A:D2:D2:45:40:D9:72:84
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 0194C3510FC4411A7AB06FF3A49D4CEC0F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 130A
Signing time: Sat 01 Feb 2025 21:00:57 +0000
Manifest this update: Sat 01 Feb 2025 21:00:57 +0000
Manifest next update: Sun 02 Feb 2025 21:00:57 +0000
Files and hashes: 1: JsiUY4utQyGLQkMCxP2vm1DnYkM.roa (hash: t9dxvm0FP5XnZVQ8+CoMdOpLdpUdElKJXDgxciqeHNU=)
2: VS0vQXyTV30uKtTHz_uaATpRmNI.roa (hash: bd6zfzzABUQlbCGm2yH6xBJFNFWYvrN9JXn/fjw4bhU=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: Fn/T1cXXSjLNZntK81PTfohpxjKqCLihAPJZiz5Oa9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:51:0f:c4:41:1a:7a:b0:6f:f3:a4:9d:4c:ec:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Feb 1 21:00:57 2025 GMT
Not After : Feb 2 21:00:57 2025 GMT
Subject: CN=771f32f7ef84c8731a8f103e8ad2d24540d97284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:8c:01:b4:0d:f5:69:99:4a:bc:b4:4e:e8:
95:81:40:34:e5:7f:71:16:08:0e:b1:6a:d5:99:30:
20:fa:c6:c7:9a:b7:9a:3a:a5:57:02:d4:be:86:55:
83:92:ac:73:1e:c8:05:2f:ae:5b:9f:3f:52:6f:90:
bb:69:69:10:96:cc:7c:37:d3:90:0c:72:a2:df:2a:
4a:73:3e:f7:98:cb:71:14:f6:7b:31:40:d2:0c:ff:
db:6a:f8:d3:7e:8c:c1:38:86:06:93:f1:8e:2c:89:
c3:17:10:d9:9b:0b:c6:ed:62:8b:2c:13:1e:6c:f2:
92:15:42:79:b1:69:46:02:93:40:69:aa:68:22:19:
b3:01:ed:b6:42:15:67:a1:f2:05:b5:c9:93:b6:7d:
6a:44:83:ca:c0:1c:c4:f4:b3:ff:9f:ab:77:f9:e8:
e4:00:89:16:af:e1:3a:05:0c:39:ff:3f:68:e2:ac:
9e:e0:2e:da:ee:08:51:f5:32:e9:b2:87:d3:2a:53:
fc:d3:5d:4c:6f:8b:45:25:38:bc:de:26:ac:df:57:
f0:79:ec:36:c1:38:b5:f9:46:ff:45:a3:4d:bd:65:
fe:92:15:3c:a5:ed:af:df:09:78:46:6f:8c:c6:99:
72:0e:43:db:6a:59:45:39:3e:23:d6:2e:9c:ad:b0:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1F:32:F7:EF:84:C8:73:1A:8F:10:3E:8A:D2:D2:45:40:D9:72:84
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8e:44:db:bc:8b:3b:b9:ae:23:46:5c:43:b7:ce:31:b0:e9:
b3:49:b6:8e:67:e1:f2:dd:71:17:c2:08:f7:62:d1:0b:1c:d4:
79:72:58:a5:91:25:38:46:17:a6:e0:c3:8e:0c:46:fd:58:45:
e3:e2:69:76:94:7e:06:38:cc:d6:56:fd:ef:e1:44:c5:d1:f9:
c5:4e:da:78:9a:79:f3:e9:ac:ef:4c:44:92:84:dc:24:61:eb:
ff:43:bd:dc:21:5d:ac:cd:36:13:ad:d1:be:20:b2:4c:ed:d3:
5a:90:fd:49:97:cc:a5:04:aa:90:34:f0:51:59:83:22:40:0a:
68:4d:06:74:af:ef:46:31:35:6b:68:a8:10:ce:1c:13:93:a5:
60:7a:a6:fd:e0:51:5e:d7:75:72:38:84:c5:24:72:41:a8:29:
5b:1f:be:1c:6d:c1:1c:7c:ff:92:f2:13:f0:fe:65:bd:03:ea:
ee:8f:93:c4:41:ba:87:95:3b:17:09:5b:ed:f2:eb:0b:c1:ce:
02:a8:d6:d1:c7:f6:1b:b3:c7:75:76:19:79:d0:e6:7e:4c:29:
7d:37:8c:60:06:86:df:46:3b:50:23:5f:8c:42:83:7c:92:bb:
51:2c:16:06:09:e1:f6:ba:33:9a:08:3e:5d:83:82:c3:e1:5b:
ad:ee:85:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:45:29 2025 by rpki-client