Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: Vklw1X5Xv9uMSPDz9WCNwUIUq2DbiNZKRgSeQCyxckw=
Subject key identifier: 69:7C:32:BB:19:D8:7C:57:05:04:47:F3:F0:9C:A6:F2:B3:FE:F3:FE
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 0194BB6041477DF3035D5BCFA7980379BEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0C03
Signing time: Fri 31 Jan 2025 08:00:35 +0000
Manifest this update: Fri 31 Jan 2025 08:00:35 +0000
Manifest next update: Sat 01 Feb 2025 08:00:35 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: VXoQUBY4cy5m95cAV2PGPc7o8Y3O6H7uhFsQdPm87Ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:41:47:7d:f3:03:5d:5b:cf:a7:98:03:79:be:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Jan 31 08:00:35 2025 GMT
Not After : Feb 1 08:00:35 2025 GMT
Subject: CN=697c32bb19d87c57050447f3f09ca6f2b3fef3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b6:ad:27:a0:df:67:16:bf:5e:49:2e:46:34:
1c:ed:ee:f2:52:27:a1:33:ac:9e:7f:bc:f6:ef:f7:
32:61:05:c0:7b:27:a8:4b:0e:3f:7e:7c:ef:81:87:
64:64:97:b5:9c:95:44:df:47:0f:8d:09:04:4a:61:
09:72:86:49:28:ad:90:ee:03:4f:db:31:d7:bf:31:
c2:01:b1:fc:8a:2b:08:ee:e1:7a:51:9f:56:49:fc:
5d:8a:62:73:b2:0e:e3:7f:b7:46:3f:b2:6a:3f:4b:
3e:6f:1e:66:a5:76:8f:4c:20:21:4a:ff:c0:1a:13:
05:c5:2e:47:20:4e:dd:d9:59:57:39:0c:b1:ad:a1:
8b:4f:44:7d:1d:44:92:54:c2:09:d3:89:ec:34:89:
e4:e9:d8:6e:74:ab:e4:f6:78:9d:3c:da:80:96:60:
0b:95:c3:76:b5:fc:29:51:c6:a4:d0:6a:77:ed:f6:
ba:f2:0c:64:ca:1c:8e:0c:bc:60:6f:09:dd:a8:a5:
81:75:f7:f5:98:6d:c3:d0:e4:f8:e0:11:8c:f2:7f:
21:5a:dd:d3:7f:1b:4b:38:15:c4:a1:ec:6e:3c:9d:
15:d4:7e:95:c8:81:d0:06:e5:0f:1c:54:a4:52:78:
49:57:3b:ea:2e:d0:69:83:68:8d:7a:fc:25:6d:94:
b8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7C:32:BB:19:D8:7C:57:05:04:47:F3:F0:9C:A6:F2:B3:FE:F3:FE
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d5:19:e3:4e:73:63:81:79:26:f9:98:83:47:3b:36:18:b8:
10:f2:27:64:13:96:d6:75:f7:ab:04:68:58:e0:de:33:56:9d:
c3:35:f7:7d:29:84:e8:c6:ba:91:2d:9a:87:3b:7d:f0:fd:a9:
34:81:da:59:03:4e:c8:d2:88:f3:51:8e:99:bf:74:be:89:91:
96:05:04:27:53:a4:6f:18:00:6b:74:84:e7:66:41:24:71:dc:
7b:33:76:a9:52:41:7f:25:b4:32:28:83:a8:d4:74:b4:5d:f8:
a5:ca:15:d3:ea:b3:9a:aa:24:34:be:fe:78:16:9d:66:6d:91:
45:38:dc:86:c7:71:fd:b2:49:17:72:c6:43:3c:70:11:e5:37:
6e:b4:74:8f:08:b4:b8:4c:d5:6e:19:1e:67:a1:d8:13:70:7c:
5f:99:ab:1d:44:b7:d1:ea:1b:0e:b2:82:a9:b0:b4:13:5c:ef:
fa:e3:fc:7b:18:5b:01:db:09:ff:33:e6:64:ef:c0:f6:d5:1d:
6f:1d:be:51:73:77:26:3b:77:f2:df:53:21:3c:f1:11:65:02:
4f:70:66:40:8b:af:e7:d7:78:d9:c9:06:ff:e6:2c:32:7c:58:
e9:ae:b0:30:f3:77:cc:15:14:c0:81:28:4d:c0:2f:21:da:05:
3e:5c:37:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:10 2025 by rpki-client on console-fra.rpki-client.org