Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
File: xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft (raw, json)
Hash identifier: 8lAljmhDaUiXfkTCdb61VnALDgRrHsSS5lom0XPRI+E=
Subject key identifier: 85:36:57:E0:7C:40:75:A0:B2:3E:4D:BE:47:8A:10:65:51:3E:DE:A1
Authority key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
Certificate issuer: /CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Certificate serial: 019510FDBB15F88BA1B7581EA623302960CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
Manifest number: 03C2
Signing time: Sun 16 Feb 2025 23:00:18 +0000
Manifest this update: Sun 16 Feb 2025 23:00:18 +0000
Manifest next update: Mon 17 Feb 2025 23:00:18 +0000
Files and hashes: 1: XtEdAEEop3HSdnOxibG98C_uMCU.roa (hash: +p4FtnANqp2tZpv3Dmdn2vhOEqjGwMWFA5juiZbc568=)
2: xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl (hash: jj3XREmucQfBsY8OUAtvK6h1RHZvmlIRuzli2zuom2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:bb:15:f8:8b:a1:b7:58:1e:a6:23:30:29:60:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Validity
Not Before: Feb 16 23:00:18 2025 GMT
Not After : Feb 17 23:00:18 2025 GMT
Subject: CN=853657e07c4075a0b23e4dbe478a1065513edea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:0f:06:0f:5b:a4:e4:c9:b8:11:7f:2e:46:
09:bf:9f:5d:4b:c8:d4:6f:5b:9a:24:4a:11:30:ac:
4d:ff:a4:68:db:fe:44:23:82:6c:11:24:4b:75:b5:
bf:b7:cf:a2:db:66:28:34:4b:d7:9c:45:6b:d7:50:
d1:a0:b7:56:3a:3d:3b:fb:c1:6f:34:ec:a8:4e:34:
6c:f3:30:bc:89:58:25:43:b4:40:59:8d:58:97:21:
0c:df:04:d2:7f:03:2b:53:60:93:83:fa:0e:25:c0:
fc:45:44:89:e4:04:46:84:61:69:18:01:ed:35:bc:
df:20:db:91:c4:51:fe:ee:e0:58:3a:f9:26:35:ec:
8d:6b:be:6b:87:a0:c9:48:71:42:ae:e8:80:81:74:
cf:8d:25:22:4f:9f:f6:01:77:c6:38:d3:4f:38:e3:
f7:2c:ef:a6:2a:09:9f:43:2f:45:f0:68:29:95:de:
d5:72:16:75:1b:f6:be:69:1c:a7:8b:98:ec:99:ed:
a4:9e:2b:78:27:a5:82:7c:d9:9a:41:5d:9f:54:3a:
d6:bf:15:10:46:62:64:f7:cd:ae:01:aa:43:66:0c:
2b:17:65:12:b1:35:60:fe:54:7a:f5:68:c8:2c:5f:
24:ce:6e:e8:78:08:63:38:85:84:eb:d6:3c:cd:58:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:36:57:E0:7C:40:75:A0:B2:3E:4D:BE:47:8A:10:65:51:3E:DE:A1
X509v3 Authority Key Identifier:
keyid:C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:65:a7:20:f7:ad:0c:31:7d:2e:b8:b2:ad:5b:0c:92:5c:22:
92:f3:1f:1c:f2:0a:ab:39:42:93:8a:fd:d1:1c:ae:8d:21:3e:
83:af:5e:06:fb:ff:d9:20:44:ea:64:17:5b:27:3e:ab:6b:02:
58:91:1d:81:b7:7d:a5:4d:a1:c1:7c:47:4b:6a:7d:77:4f:ce:
f0:4d:2e:92:76:33:9e:41:80:32:dc:16:03:87:29:7d:9e:4c:
8d:e2:fe:79:43:8a:a9:e3:db:eb:18:3f:6f:e9:84:14:ee:20:
9f:ee:6c:49:ab:b4:bf:c6:3e:54:e3:83:4c:b3:02:ff:98:c5:
71:32:52:0f:57:46:de:11:fe:7c:d4:88:11:ff:53:ed:6a:eb:
7f:d1:73:be:eb:71:d9:07:2c:e2:c9:93:2d:d0:02:84:0b:78:
29:c9:2b:b0:44:bd:ca:3e:85:62:b9:fe:9a:e8:df:b8:30:30:
32:1e:85:bb:74:d6:29:37:86:6a:74:96:09:6b:85:98:ff:70:
78:53:3d:f8:94:d1:cc:bd:fa:bd:89:e2:23:c5:26:6c:8f:46:
6c:6c:a5:af:7f:65:86:9e:a1:94:dd:f5:de:5b:ec:f1:6b:8e:
d7:fd:c1:1a:5c:d4:24:34:ed:80:d8:a9:53:34:29:4f:13:44:
13:c7:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:42 2025 by rpki-client