Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
File: Xm6clCz1a-uGksXVYu2OrWlFKO0.mft (raw, json)
Hash identifier: ty7zyQUg0tSgFjQbh8me3XIeKscNmb1/dRnkaGQ3Jzs=
Subject key identifier: EE:8A:98:6F:4E:00:12:E4:90:6D:CE:BD:E9:E6:A7:28:F1:84:4A:0F
Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Certificate serial: 0194BAF263C2127797CE09108496A3D3A567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
Manifest number: 9E
Signing time: Fri 31 Jan 2025 06:00:34 +0000
Manifest this update: Fri 31 Jan 2025 06:00:34 +0000
Manifest next update: Sat 01 Feb 2025 06:00:34 +0000
Files and hashes: 1: Xm6clCz1a-uGksXVYu2OrWlFKO0.crl (hash: JrB3dKRH3Xo6Twt8Z95K2jChXvXc2d/DgTo2aRGkXHw=)
2: vosIopFKuVooFEnT_WoSvrVtBQk.roa (hash: MbdzDkBGjpybqFx3qcRSqHdBprEga+vyojjcpFHnoSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:63:c2:12:77:97:ce:09:10:84:96:a3:d3:a5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Validity
Not Before: Jan 31 06:00:34 2025 GMT
Not After : Feb 1 06:00:34 2025 GMT
Subject: CN=ee8a986f4e0012e4906dcebde9e6a728f1844a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:e9:77:8d:4a:5c:68:fe:4c:9d:00:b3:e2:
6f:de:83:1c:b8:54:84:6f:4b:2d:93:a2:ab:c9:ae:
45:36:05:84:1f:1d:8c:03:f6:e1:0a:4e:dc:43:3f:
d6:90:7d:d1:78:44:ea:e2:25:72:1c:f8:07:df:98:
7b:07:10:3a:1c:e3:b2:99:48:36:6a:72:2c:68:c4:
77:7f:c8:32:dd:ca:bc:d4:66:a5:cb:1d:9b:ed:98:
77:c8:77:8d:bf:85:a4:cb:33:c0:c4:20:29:5c:e2:
1d:c7:af:a5:6a:cc:ca:83:60:5d:a6:2e:ab:05:a9:
5f:ca:47:e1:be:4c:03:59:ae:9b:c5:8a:82:76:77:
11:7b:d5:19:78:9c:9b:24:f0:a5:4d:e5:95:4a:f7:
00:d1:f2:91:9c:3e:81:be:7b:f7:ac:4e:56:e3:23:
fa:4f:77:94:f8:2b:76:70:80:65:da:2b:df:05:65:
e2:0f:c5:5a:d4:4e:07:3f:87:4e:1a:3f:b9:d3:a6:
6b:bd:ce:a7:84:8f:2e:9c:72:4d:c0:69:5c:73:ac:
08:52:fd:e1:bd:5c:60:e0:02:a6:4c:6d:10:de:c2:
c9:d2:ae:40:94:46:c0:26:0a:06:28:16:6e:ee:be:
99:cb:b6:30:e3:1e:20:77:58:14:a0:de:b0:8f:a4:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:98:6F:4E:00:12:E4:90:6D:CE:BD:E9:E6:A7:28:F1:84:4A:0F
X509v3 Authority Key Identifier:
keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c5:e4:52:a0:21:64:bd:96:d5:77:38:4f:c6:b6:be:f2:28:
7a:e1:a2:d7:27:06:d9:74:5b:ca:9e:87:10:2a:c9:e9:4f:f5:
3d:ce:b3:db:5b:4c:2f:47:3e:c9:b3:bb:19:e2:44:73:2a:7b:
53:7f:b9:1a:fd:b5:fd:ad:5f:10:65:35:ea:4d:88:47:76:e0:
ea:ad:30:a6:64:96:85:6f:09:4d:8e:34:4c:66:ae:b9:e8:66:
38:29:8f:d0:ac:d8:36:e6:3a:25:52:d9:ea:7d:5b:40:7c:ef:
20:f2:e5:74:fc:13:cf:7c:ca:1c:6f:f1:2a:e9:35:db:bd:93:
08:2c:70:45:ef:5a:0b:26:1d:63:7b:40:bf:6f:e6:96:e3:02:
c9:b3:f8:3d:fc:a8:ec:ca:10:96:ed:86:b3:67:3b:2a:a8:75:
5a:75:89:e3:2d:6d:22:07:92:7c:8e:75:0a:e1:0c:56:30:9b:
36:50:29:b4:13:07:2b:87:d3:60:9f:ed:17:f7:6a:70:d4:25:
4c:52:bd:da:5e:47:44:d5:8d:9c:ea:01:e3:b4:b5:2e:74:1e:
11:9c:4f:a5:c1:72:d5:a4:db:41:9c:3a:71:64:27:60:90:92:
cc:de:94:86:9a:49:b9:58:ae:ff:65:67:80:f5:a9:94:17:96:
ae:7f:07:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:53 2025 by rpki-client on console-fra.rpki-client.org