Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: Il/s8f9spWNqxb0EAP2J/ySuVS/SdPTODY0a4DW5MPE=
Subject key identifier: 96:4B:93:C8:E0:D2:6B:BE:7D:E3:00:6C:B4:87:29:6D:10:B6:CB:01
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 0194BB28FFE57CC52A5A85EB6202B622731E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 0416
Signing time: Fri 31 Jan 2025 07:00:13 +0000
Manifest this update: Fri 31 Jan 2025 07:00:13 +0000
Manifest next update: Sat 01 Feb 2025 07:00:13 +0000
Files and hashes: 1: vH1JJD9D24fFC1pA8PsnKijiP6M.roa (hash: i0B3P6h6TyOcZqs+27w3JzYg10hL8qvRbmomwjVt9VM=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: 5WeWpppLmvXoJvb6E27SM4yfm79DVb1XM+1vLScJx9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:ff:e5:7c:c5:2a:5a:85:eb:62:02:b6:22:73:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: Jan 31 07:00:13 2025 GMT
Not After : Feb 1 07:00:13 2025 GMT
Subject: CN=964b93c8e0d26bbe7de3006cb487296d10b6cb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9a:fe:ae:ea:aa:1e:b3:2b:87:92:64:ba:4c:
cc:bb:58:f4:90:87:de:35:75:73:f6:cc:99:f8:52:
82:15:5f:6f:69:cd:b5:16:ca:10:d2:7b:8a:45:ed:
83:69:5f:73:d4:fc:c8:bf:f5:55:44:0f:9f:2f:88:
fa:ba:30:98:1f:98:fe:92:b6:73:a6:b8:31:00:2b:
ae:a7:36:b7:59:dc:12:f1:75:b1:b7:16:9f:a3:2a:
50:af:ae:dc:d0:be:9f:ed:79:51:33:e1:aa:ed:1a:
54:f6:37:29:a7:94:c9:cc:1a:c1:54:4f:ec:d4:89:
c7:cb:dd:d3:86:b8:73:7f:72:15:e1:5f:f3:b1:28:
1b:57:94:08:4e:c0:fe:08:b4:11:d9:ef:2b:9e:b9:
f0:9b:60:fe:18:05:2b:45:04:c3:4c:6b:74:11:e7:
5d:b2:c2:a9:59:c8:98:e6:ab:9d:c5:b6:95:44:78:
ab:b4:24:89:05:37:f7:e8:94:be:8e:9b:d7:4a:6f:
9e:eb:b3:47:91:99:06:fa:6e:28:b4:d5:ec:f8:ff:
7d:27:d4:ce:7d:c7:07:9f:79:2f:c0:21:93:9f:a0:
51:7d:a2:76:f3:16:e9:e2:d4:d9:7a:35:5d:79:50:
31:41:11:57:2e:6b:6a:e4:5d:03:ac:20:2e:87:4b:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:93:C8:E0:D2:6B:BE:7D:E3:00:6C:B4:87:29:6D:10:B6:CB:01
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bd:e4:54:96:2e:4b:9d:9d:95:3e:1b:8b:52:eb:b2:b4:05:
3e:e6:ef:da:10:53:e1:0f:c6:e6:e6:af:cc:8e:78:ad:8e:2d:
7a:be:be:43:4a:65:61:4b:cd:ef:dc:fd:88:1d:0e:ab:1e:bd:
dd:3a:21:ee:3e:b3:d0:6b:cb:fd:08:01:99:83:b4:49:6a:02:
68:34:bc:5f:c8:fe:3e:05:78:d3:a3:36:12:af:f8:0e:dc:4d:
f9:ad:c1:7b:32:f8:d8:da:c8:c8:a4:3b:07:bd:e2:d0:8f:06:
77:8a:07:7a:f3:55:8e:59:bf:fc:5a:59:70:ae:34:3f:8b:93:
d3:98:08:e7:b2:df:fd:6d:d2:a5:60:67:cb:26:72:04:9b:a7:
74:77:13:c5:ad:6c:b7:40:8e:4c:98:d9:06:eb:57:06:5a:19:
38:a3:66:8a:0e:80:f6:66:6a:18:a3:c2:02:5a:fc:25:b9:71:
97:06:5d:de:92:21:d4:12:d0:ea:02:a3:d2:84:78:1d:e9:29:
46:3f:08:55:1e:91:e4:a4:f7:fc:a4:47:78:39:30:bf:a8:d9:
82:a2:f9:18:73:46:76:9a:c0:8e:0a:62:70:44:60:05:57:04:
00:15:ec:aa:7e:d2:ba:56:a4:eb:5a:63:f7:20:00:ce:5e:75:
75:bc:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:54 2025 by rpki-client on console-fra.rpki-client.org